Last Updated: 14/05/2025

Shiftworker Nutrition ("we", "our") respects your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (GDPR) and EU GDPR.

1. Information We Collect

We may process:

Identity Data: Name, title, date of birth
Contact Data: Email, phone, shipping/billing address
Financial Data: Payment details (processed securely via Stripe/PayPal)
Health Data (with consent): Supplement preferences or allergy info
Technical Data: IP address, browser type, order history

2. How We Use Your Data

Purpose	Legal Basis
Process orders	Contractual necessity
Send tracking updates	Legitimate interest
Improve our products	Consent (opt-in)
Comply with tax laws	Legal obligation

3. Data Sharing

We only share data with:

Payment processors (Stripe, PayPal)
Shipping carriers (Royal Mail, DHL)
UK/EU regulators (if legally required)

4. Your Rights

Under GDPR, you have the right to:
✓ Access your personal data
✓ Correct inaccurate information
✓ Request deletion (unless legally required to retain)
✓ Withdraw consent (e.g., marketing emails)

To exercise these rights, email [DPO@shiftworkernutrition.com].

5. Data Security

All transactions encrypted (SSL/TLS)
Regular security audits
PCI-DSS compliant payment processing

6. International Transfers

Data stored in UK/EU servers. If transferred outside EEA, we use GDPR-approved safeguards.

7. Cookies

We use essential (shopping cart) and analytics cookies (Google Analytics). Manage preferences via our Cookie Banner.

8. Contact Us

Data Protection Officer:
Email: [DPO@shiftworkernutrition.com]
Postal: