Privacy Policy
Privacy Policy
This Privacy Policy explains how Bodyloria Ltd ("we", "us", "our") collects, uses, and protects your personal information when you visit bodyloria.com or purchase from us.
1. Information We Collect
Information you provide to us:
- Name, email address, and delivery address when you place an order
- Payment information (processed securely via Shopify Payments — we do not store card details)
- Communications you send us via email or contact forms
Information collected automatically:
- Browser type, IP address, and pages visited (via cookies)
- Device type and operating system
- Referring website or advertisement
2. How We Use Your Information
- To process and fulfil your orders
- To send order confirmations and shipping updates
- To respond to customer service enquiries
- To send marketing emails (only with your consent — unsubscribe at any time)
- To improve our website and products
- To comply with our legal obligations
3. Legal Basis for Processing (GDPR)
- Contract: Processing necessary to fulfil your order
- Legitimate interests: Improving our services and preventing fraud
- Consent: Marketing communications (you may withdraw consent at any time)
- Legal obligation: Compliance with applicable UK law
4. Sharing Your Information
We do not sell your personal data. We share information only with:
- Shopify Inc: Our e-commerce platform and payment processor
- Royal Mail / DPD: Our delivery partners for order fulfilment
- Meta Platforms: For advertising purposes (with your consent via cookies)
- Legal authorities: When required by law
5. Cookies
We use cookies to improve your browsing experience and analyse website traffic. You can manage cookie preferences via our cookie banner or your browser settings. Essential cookies cannot be disabled as they are necessary for the website to function.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described above, typically 7 years for financial records as required by applicable tax authorities, and 2 years for marketing data.
7. Your Rights (GDPR)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data ("right to be forgotten")
- Object to or restrict processing of your data
- Data portability
- Withdraw consent for marketing at any time
- Lodge a complaint with the relevant data protection authority in your country (e.g. ICO for UK customers, your national DPA for EU customers)