Privacy Policy
What we collect, why we hold it, who else touches it, and how to get it removed.
Last updated 18 September 2026What we collect
When you place an order or enquiry, we collect:
- your name and email address;
- your shipping address, and phone number if you give one;
- the contents of your basket and any message you add;
- your order history with us.
If you create an account, our authentication provider also holds your login credentials. We never see your password.
If you start a checkout and do not finish it, we keep what you had entered — your email address, name, delivery address, phone number if you gave one, and the contents of your basket — so that we can help with an order that did not go through. We save this only once a valid email address has been entered and there is something in your basket; if you have not given us an email address, nothing is kept. It is deleted after 90 days, or as soon as you ask. Card details are never involved: they are entered on our payment provider's own page and never reach this site at any stage.
We do not store card numbers. Payment details are handled by our payment processor and never reach our servers.
Why we hold it
- To quote for, fulfil and deliver your order — our contract with you.
- To contact you about that order, including dispatch and any problem with it.
- To keep business and tax records, and to trace a batch if a quality question arises — our legal obligations.
We do not sell your data, and we do not send marketing email unless you have asked for it.
Who else processes it
We use a small number of service providers. Each handles data only to provide its service to us:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting |
| Neon | Database — orders and accounts |
| Clerk | Account sign-in |
| Resend | Order and enquiry email |
| Whitcomb Payments | Card payment processing, and a record of card orders (name, contact details, address and items) |
| Google Analytics | Optional public-page visit measurement, only with your permission |
| Meta | Optional homepage visit and advertising measurement, only with your permission |
We also pass your name and address to the carrier delivering your parcel. We may disclose data where the law requires it.
How we measure use of the site
We count visits to our own pages so we can see which products people look at and where our visitors come from. This measurement uses no cookies and stores nothing on your device, which is why it is not part of the cookie choices below.
It does not identify you. Your IP address and browser are combined into a one-way code that cannot be turned back into either, and that code is different every day, so you are not recognised from one day to the next or followed to any other website. We record which of our pages was viewed and the website you arrived from — the site's address only, never the full link. We never record this on checkout confirmation pages, and the figures we look at are totals, not individuals.
How long we keep it
Order records are kept for seven years to meet tax and record-keeping obligations. Account data is kept until you ask us to delete the account. Enquiries that do not become orders are kept for 24 months and then removed. Checkouts that were started but never completed are kept for 90 days and then deleted automatically. Page-measurement records hold no personal data and are kept as totals.
Your rights
You can ask us to:
- give you a copy of the data we hold about you;
- correct anything that is wrong;
- delete your data, where we are not legally required to keep it; or
- stop using it for anything beyond fulfilling your orders.
Email support@biohackhealth.co and we will respond within 30 days. Depending on where you live, you may also have the right to complain to a data protection regulator.
Security
The site is served over TLS, and data is held in access-controlled managed services. Administrative access to order data is restricted to named accounts. No system is perfectly secure; if a breach affects your data we will tell you promptly.
Contact
Questions about this policy: support@biohackhealth.co. See also our Terms of Service.