Where we rely on legitimate interests, we have considered your rights and do not use your data in ways you would find unexpected or intrusive. You can ask us about this at any time.

4. Marketing and your choices

We will only send you marketing where you have agreed to receive it. You can opt out at any time by using the unsubscribe link in any marketing email, or by emailing us. Opting out of marketing does not stop service messages you need, such as order confirmations and download links.

5. Cookies and tracking

We use cookies and similar technologies to run the Site and, with your consent, for analytics and advertising. These include the Meta pixel and Conversions API (to measure and target our ads), Google Analytics (to understand how the Site is used), and Crazy Egg (which produces heatmaps of how visitors use our pages, configured to collect this information anonymously). Non-essential cookies are only set after you consent through our cookie banner, and you can change your choices at any time. For full detail, please see our Cookie Policy.

6. Who we share your data with

We do not sell your personal data. We share it only with organisations that help us run our business, and only as far as they need it. These include:

•  GoHighLevel — our customer relationship and marketing-automation platform, which also hosts our website; your contact record and communications are held here;

•  Stripe — our payment provider, which processes your payment;

•  Google — Google Workspace, which provides our email, and Google Analytics, which we use (with your consent) to understand how the Site is used;

•  Meta (Facebook and Instagram) and other advertising and social platforms (such as TikTok and YouTube) — for the comment-and-message tools we use and, with your consent, for advertising and measurement;

•  ManyChat — a messaging-automation tool integrated with our Instagram and Facebook, used to handle comment and message replies;

•  Crazy Egg — a website-analytics tool that produces heatmaps of how visitors use our pages;

•  postal and courier services — to deliver your physical orders (we hold small amounts of stock and ship to you directly);

•  professional advisers (such as our accountants and lawyers) and public authorities, where we are required to share data by law or to protect our legal rights.

These providers act as our processors and may only use your data on our instructions, except where they are separate controllers in their own right (for example, Stripe and the advertising platforms for certain purposes), in which case their own privacy notices also apply.

7. Transfers outside the UK

Some of our providers (including GoHighLevel, Stripe, Google, Meta, ManyChat and Crazy Egg) are based in, or process data in, the United States or other countries outside the UK. Where your data is transferred outside the UK, we make sure appropriate safeguards are in place — such as UK “adequacy” or “data bridge” regulations where the recipient is covered, or the UK’s International Data Transfer Agreement (or the EU Standard Contractual Clauses with the UK Addendum). You can ask us for more detail on the safeguards that apply.

8. How long we keep your data

We keep your personal data only for as long as we need it for the purposes above, and then delete or anonymise it. As a general guide:

•  Order and transaction records: kept for 7 years after the transaction, to meet accounting and tax requirements.

•  Marketing and lead data: kept until you unsubscribe or ask us to delete it, and reviewed after 36 months of inactivity.

•  Enquiries and correspondence: kept for as long as needed to deal with the matter and a reasonable period afterwards.

9. How we keep your data safe

We use reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No online service can be guaranteed to be completely secure, but we take your privacy seriously and work with reputable providers who do the same.

10. Your rights

Under UK data protection law you have the right to:

•  access the personal data we hold about you;

•  ask us to correct data that is inaccurate or incomplete;

•  ask us to delete your data in certain circumstances;

•  ask us to restrict or object to how we use your data;

•  ask for a copy of certain data in a portable format; and

•  withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email us at [email protected]. We will respond within the time limits set by law. Exercising your rights is free in most cases, and it will not normally affect the service you receive.

11. Complaints

We hope to resolve any concern you raise with us directly. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concerns before you approach the ICO.

12. Children

Our products and services are aimed at adults (first-time buyers aged 18 and over). We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we do, we will post the revised version here with a new “Last updated” date. Please check back from time to time.

14. How to contact us

Email: [email protected] ·  Post: Efficient Business Limited, 10 Beech Court, Hurst Reading, RG10 0RQ