Privacy policy

This policy explains what personal information Healthy Food Supplements collects when you use this website or buy from us, why we collect it, who we share it with, how long we keep it, and the rights you have over it. We have tried to write it in plain English. If anything is unclear, ask us — the contact details are below.

Last updated: 7 October 2026

Who we are

Healthy Food Supplements is an independent NeoLife distributor. We are the “controller” of the personal information described in this policy, which means we decide how and why it is used.

• Business: Healthy Food Supplements, the trading name of Nishit Kotak, a sole trader
• Address: 20 Grove Avenue, Pinner HA5 5NU, United Kingdom
• Email: info@healthyfoodsupplements.co.uk
• Phone: +44 7488 879555

We are a small business, so there is no separate data protection officer. Questions about your data come to the email address above and are answered by a real person.

The information we collect

When you place an order: your name, billing and delivery addresses, email address, phone number, what you ordered, and how and when you paid. Card details are entered directly into the secure payment fields of our payment providers (Stripe, PayPal and Klarna). We never see or store your full card number.

If you create an account: your login details, saved addresses, order history, any subscriptions and your wishlist.

If you use Subscribe & save: the products, how often you want them and your renewal dates. So that renewals can be charged automatically, your payment provider keeps a secure reference to your payment method; we do not hold the card details ourselves.

When you contact us or fill in a form: what you tell us — for example by email, phone, the chat window on the site, our contact form, the “Find your supplement” questions, or a newsletter or offer sign-up form.

Your marketing choices: whether you have agreed to receive marketing emails and, separately, reorder reminders by text message, and when you agreed or unsubscribed.

If you start checkout but do not finish: the email address and basket contents you entered, so that we can remind you about your basket (see “Basket reminders” below).

When you browse the site: technical information such as your IP address, browser and device type, which our hosting and security systems record to keep the site running and protected. If — and only if — you click “Accept” on our cookie banner, we also collect information about how you use the site (see “Cookies”).

Reviews: if you leave a review, your name (as you choose to give it) and what you wrote.

How we use it, and our lawful basis

UK data protection law says we must have a lawful basis for each thing we do with your information. These are ours:

Where we rely on legitimate interests, we have weighed them against your rights and kept what we do to the minimum. You can object at any time (see “Your rights”).

Basket reminders

If you type your email address at checkout and then leave without ordering, we save that email address and your basket and may send you a reminder. We stop as soon as you order, unsubscribe or ask us to. Saved baskets are deleted after 90 days.

Who we share it with

We do not sell your personal information, and we never let anyone else use it for their own marketing. We share only what each of these needs to do their job for us:

• NeoLife — we place your order with NeoLife, which packs it and sends it to you direct. NeoLife receives your name, delivery address, phone number and the products ordered.
• DPD — our delivery company receives your name, address, and email or phone number so it can deliver and send you tracking updates.
• Stripe, PayPal and Klarna — take your payment and check it for fraud. If you choose Klarna, Klarna may carry out its own checks and acts under its own privacy notice.
• LeadConnector (GoHighLevel) — our customer-contact system, which stores contact details and preferences and sends our emails and texts. It also runs the chat window on the site.
• ConvertBox and Pabbly Connect — run our sign-up forms and pass the details you enter to our customer-contact system.
• Our email service — sends order and account emails on our behalf.
• SiteGround — hosts the website and its data.
• Google (Google Analytics, only with your consent) and PostHog (site analytics hosted in the EU, only with your consent).
• Meta (Facebook and Instagram) — the Meta Pixel, only with your consent, to measure our adverts; and our product catalogue, which contains no customer data.
• Our accountant and professional advisers, where they need it to advise us.
• The police, HMRC, regulators or courts, if the law requires us to.

Transfers outside the UK

Some of the providers above are based in, or use systems in, other countries — in particular the United States (for example Stripe, PayPal, Google, Meta and LeadConnector) and India (Pabbly). Where that happens, the transfer is protected in one of the ways UK law allows: the country has been found to give adequate protection, the provider is certified under the UK–US data bridge, or the provider has signed the UK’s approved contract terms (the International Data Transfer Agreement or the UK Addendum). Ask us if you would like more detail.

How long we keep it

• Orders, invoices and payment records: six years after the end of the tax year they relate to, because tax law requires it.
• Your account: until you ask us to close it.
• Marketing consent: until you unsubscribe. After that we keep only your email address on a “do not contact” list, so that we never email you by mistake.
• Abandoned baskets: 90 days.
• Messages and enquiries: two years after the matter is closed, unless they relate to an order (then as for orders).
• Analytics data: 14 months in Google Analytics and 12 months in PostHog.

Cookies

Cookies are small files a website stores in your browser. We use only a few, and anything that is not essential is switched off unless you click “Accept” on our banner. If you click “Decline”, the shop works exactly the same.

To change your choice at any time, use the Cookie settings link at the bottom of every page.

Your rights

You have the right to:

• see the personal information we hold about you and get a copy of it;
• have anything that is wrong corrected;
• have your information deleted, where we no longer need it or have no other legal reason to keep it (we must keep order records for tax purposes);
• restrict how we use it while a concern is looked into;
• object to anything we do on the basis of legitimate interests — and you can always object to marketing, which we will stop straight away;
• receive your information in a portable format (data portability);
• withdraw your consent at any time, for example by unsubscribing from emails, replying STOP to a text, or changing your cookie choice. This does not affect anything we did before you withdrew it.

We do not make decisions about you based solely on automated processing. If you pay with Klarna, Klarna may make an automated decision about whether to offer you its payment options; its privacy notice explains your rights.

To use any of these rights, email info@healthyfoodsupplements.co.uk. It is free, and we will reply within one month. We may ask you to confirm your identity first.

Keeping it secure

The site uses an encrypted (HTTPS) connection throughout. Payments are handled by Stripe, PayPal and Klarna, which are certified to the payment card industry’s security standard (PCI DSS). Access to customer records is limited to the people who need it, and our hosting includes security monitoring and regular backups.

Children

Our shop is for adults. Some products are designed for children, but they must be bought by an adult, and we do not knowingly collect personal information from anyone under 16.

Complaints

If you are unhappy with how we have handled your information, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.

Changes to this policy

If we change how we use your information, we will update this page and the “last updated” date at the top. If a change is significant, we will also tell customers by email.