Privacy Policy
What we collect, why we hold it, who else touches it, and how to get it removed.
Last updated 28 August 2026What we collect
When you place an order or enquiry, we collect:
- your name and email address;
- your shipping address, and phone number if you give one;
- the contents of your basket and any message you add;
- your order history with us.
If you create an account, our authentication provider also holds your login credentials. We never see your password.
We do not collect card or bank details. No payment processor is connected to this site — orders are handled as enquiries and payment is arranged separately, so no financial data passes through it.
Why we hold it
- To quote for, fulfil and deliver your order — our contract with you.
- To contact you about that order, including dispatch and any problem with it.
- To keep business and tax records, and to trace a batch if a quality question arises — our legal obligations.
We do not sell your data, and we do not send marketing email unless you have asked for it.
Who else processes it
We use a small number of service providers. Each handles data only to provide its service to us:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting |
| Neon | Database — orders and accounts |
| Clerk | Account sign-in |
| Resend | Order and enquiry email |
We also pass your name and address to the carrier delivering your parcel. We may disclose data where the law requires it.
How long we keep it
Order records are kept for seven years to meet tax and record-keeping obligations. Account data is kept until you ask us to delete the account. Enquiries that do not become orders are kept for 24 months and then removed.
Your rights
You can ask us to:
- give you a copy of the data we hold about you;
- correct anything that is wrong;
- delete your data, where we are not legally required to keep it; or
- stop using it for anything beyond fulfilling your orders.
Email support@biohackhealth.co and we will respond within 30 days. Depending on where you live, you may also have the right to complain to a data protection regulator.
Security
The site is served over TLS, and data is held in access-controlled managed services. Administrative access to order data is restricted to named accounts. No system is perfectly secure; if a breach affects your data we will tell you promptly.
Contact
Questions about this policy: support@biohackhealth.co. See also our Terms of Service.