Privacy policy

Who we are

Glory Edward Nutrition Ltd (“we”, “us”, “our”) is the data controller responsible for your personal data. We are registered in England & Wales under company number 13447089, with a registered address at 20-22 Wenlock Road, London, N1 7GU, United Kingdom. This policy is aligned with the UK GDPR and the Data Protection Act 2018.

What data we collect

• Identity & contact data: name, email address, phone number, delivery and billing address.
• Order & transaction data: products purchased, order history, and payment confirmation details (we do not store full card numbers — see “Payments” below).
• Account data: login credentials and preferences, where you create an account.
• Consultation & wellness data: information you choose to share when booking a consultation or scan. Health-related information is special category data and is handled with additional care.
• Communications: messages you send us, and newsletter or marketing preferences.
• Technical & usage data: IP address, device and browser type, and how you use our website, collected via cookies and similar technologies (see our cookies policy).

How we use your data & our lawful bases

Under UK GDPR we rely on the following lawful bases:

• Contract: to process and deliver your orders, manage your account, arrange consultations and provide customer support.
• Legal obligation: to meet accounting, tax and consumer-law requirements.
• Legitimate interests: to run and secure our business, prevent fraud, and improve our products and website — balanced against your rights.
• Consent: for marketing emails, non-essential cookies, and any processing of special category (health) data. You can withdraw consent at any time.

Payments

Card payments are processed securely by our payment provider, Stripe. Your full card details are entered directly with Stripe and are never seen or stored by us. Stripe processes this data as an independent controller and processor under its own terms and privacy policy.

Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under contract and appropriate safeguards:

• Supabase — secure database and authentication hosting.
• Stripe — payment processing.
• Resend — transactional email (order confirmations, account emails).
• Zoho — business email and customer correspondence.

We may also disclose data where required by law, or to protect our rights, property or safety. Where a provider processes data outside the UK, we ensure appropriate safeguards (such as adequacy decisions or standard contractual clauses) are in place.

How long we keep your data

We keep personal data only as long as necessary for the purposes we collected it, including legal, accounting and reporting requirements. Order and transaction records are typically retained for up to six years to meet tax obligations. Marketing data is kept until you unsubscribe or withdraw consent. Health-related consultation data is retained in line with professional and clinical record-keeping guidance.

How we protect your data

We use appropriate technical and organisational measures — including encryption in transit, access controls and reputable providers — to protect your data against unauthorised access, loss or misuse.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no overriding legal reason to keep it.
• Restriction — ask us to limit how we use your data.
• Portability — receive certain data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, or to direct marketing at any time.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us using the details below. We will respond within one month.

Cookies

Our website uses cookies and similar technologies. Please see our cookies policy for details and to manage your choices.

Contact & complaints

For any privacy question or to exercise your rights, contact our data controller, Glory Edward Nutrition Ltd, at hello@gloryedwardnutrition.com or 0207 175 5108. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.