Bull Factory Ltd ("we", "us", "our") is committed to protecting your personal information. This policy explains what we collect, why we collect it, and what rights you have over it.
We are the data controller for the information described here.
Bull Factory Ltd
Registered in England and Wales, Company number 16258837
Telephone: 07481 150476
What we collect
When you place an order. Your name, delivery and billing address, email address, telephone number, and the details of what you ordered.
When you pay. Payment is processed by [PAYMENT PROVIDER]. Your card details are entered directly into their system and are never stored on or seen by our website. We receive only confirmation that a payment succeeded or failed, and the last four digits and card type for reference.
When you create an account. Your name, email address, password (stored encrypted), and your order history.
When you contact us. Whatever you include in your message, together with your name and contact details, so that we can reply.
When you subscribe to marketing. Your email address and, where you give it, your name.
When you browse the site. Your IP address, browser type and version, device type, the pages you view, and how you arrived at the site. This is collected through cookies and similar technologies. See our Cookie Policy for detail.
When you visit one of our shops. We do not collect personal information in store unless you ask us to place an order for you, sign up to our mailing list, or make a purchase requiring a receipt by email.
What we do not collect
We do not ask for and do not want health information. Please do not send us details of medical conditions, medications, diagnoses or treatment when you contact us. If you need advice about whether a product is suitable alongside a medical condition or medication, speak to your GP or pharmacist rather than us.
Why we use it, and our lawful basis
To process and deliver your order. Necessary to perform our contract with you.
To take payment and guard against fraud. Necessary to perform our contract, and our legitimate interest in preventing fraudulent transactions.
To answer your enquiries. Our legitimate interest in responding to people who contact us.
To send marketing emails. Your consent, which you can withdraw at any time. Where you have bought from us before, we may email you about similar products under the soft opt-in rule, and every message includes an unsubscribe link.
To keep accounting and tax records. Our legal obligation.
To improve the website and understand how it is used. Your consent, given through the cookie banner.
To handle returns, refunds and complaints. Necessary to perform our contract and to comply with consumer law.
Who we share it with
We share personal information only with organisations that help us run the business, and only what they need:
- [PAYMENT PROVIDER], to process payments
- [COURIER / ROYAL MAIL], to deliver your order
- [EMAIL PROVIDER], to send order confirmations and, if you have opted in, marketing
- [HOSTING PROVIDER], where the website and its database are stored
- Our accountant, for bookkeeping and tax
- Analytics providers, where you have consented to analytics cookies
We do not sell your personal information to anyone, and we do not share it with third parties for their own marketing.
We may disclose information where we are legally required to, for example to HMRC, Trading Standards, a regulator, or in response to a court order.
Transfers outside the UK
Some of our providers process data outside the UK. Where they do, we rely on the UK Government's adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your information keeps an equivalent level of protection.
How long we keep it
Order and transaction records. Six years after the end of the financial year they relate to, as required for tax purposes.
Account details. For as long as your account is open. If you ask us to close it, we delete your account but keep the order records for the period above.
Marketing subscriptions. Until you unsubscribe, and for a short period afterwards so that we can honour your unsubscribe request.
Enquiries and correspondence. [24] months from your last contact with us.
Website analytics. [26] months.
Your rights
Under UK data protection law you have the right to:
- Ask what personal information we hold about you and get a copy of it
- Have inaccurate information corrected
- Ask us to delete information, where we no longer have a reason to keep it
- Ask us to restrict how we use it while a query is resolved
- Object to processing we carry out on the basis of legitimate interests
- Ask us to transfer your information to you or another provider in a portable format
- Withdraw consent at any time, where consent is what we relied on
- Opt out of marketing at any time, either by using the unsubscribe link or by emailing us
To exercise any of these, email [privacy@bullfactorynutrition.co.uk]. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your information, please tell us first so we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
Security
We use HTTPS across the site, store passwords in encrypted form, and limit access to personal information to the people who need it. No system can be guaranteed completely secure, but we take the protection of your information seriously and will notify you and the ICO where we are required to in the event of a breach.
Children
Our website is not directed at children and we do not knowingly collect information from anyone under 16. Some products we sell are not suitable for under-18s and are marked accordingly.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed. Where the changes are significant, we will tell you by email or with a notice on the site.