Privacy policy

Privacy Policy

Last updated: 23 October 2026

STR8 Nutrition Ltd (Company No. 17139971), registered in England and Wales, operates this website and store, including all related content, products, services, features, and tools (the “Services”).

STR8 Nutrition is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you:

  • Visit or use our Services
  • Make a purchase
  • Create an account
  • Contact us
  • Interact with us online or through marketing communications

If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy takes priority regarding the collection, use, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of applicable data protection laws, STR8 Nutrition Ltd is the data controller of your personal information.

1. Personal Information We Collect

When we refer to “personal information”, we mean information that identifies you or can reasonably be linked to you.

We may collect the following categories of personal information depending on how you interact with the Services and where you live.

Contact information. Name, billing address, shipping address, email address, phone number.

Payment and financial information. Payment card details, billing information, transaction confirmations, payment method details. Payment information is processed securely by third-party payment providers. We do not store full payment card details on our systems.

Account information. Username, password, account preferences, saved settings.

Order and transaction information. Products viewed or purchased, cart activity, wishlist activity, returns, exchanges and cancellations, purchase history.

Communications. Information you provide when contacting us, including customer support enquiries, emails, and messages.

Device and technical information. IP address, browser type, device type, operating system, network connection data, unique device identifiers.

Usage information. Information about how you interact with the Services, including browsing behaviour, pages viewed, and interactions with website features.

2. How We Collect Personal Information

Information you provide directly. Including when you place an order, create an account, sign up for emails, contact us, or take part in promotions or surveys.

Automatically collected information. We automatically collect certain information through cookies and similar technologies when you use the Services.

Service providers. We work with third-party providers who process information on our behalf, including payment processors, fulfilment providers, analytics providers, and customer support platforms.

Partners and third parties. We may receive information from advertising partners, marketing providers, or social media platforms where permitted by law.

3. How We Use Your Personal Information, and Our Lawful Basis

UK data protection law requires us to have a lawful basis for each purpose we use your personal information for. Those purposes and bases are set out below.

What we use it for Our lawful basis
Processing and fulfilling your order, arranging delivery, managing your account, handling returns and refunds, and providing customer support Performance of a contract with you
Taking payment and managing recurring membership payments Performance of a contract with you
Sending marketing emails where you have signed up Your consent, which you can withdraw at any time
Sending marketing about similar products to existing customers Our legitimate interests in promoting our business, subject to your right to opt out at any time
Advertising, measuring advertising performance, and analytics Your consent, given through our cookie banner
Improving the Services, website functionality and user experience Our legitimate interests in running and improving our business
Verifying accounts and transactions, and detecting fraudulent or suspicious activity Our legitimate interests in protecting our customers and our business
Keeping business and accounting records, and responding to lawful requests Compliance with a legal obligation

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object to that processing at any time using the contact details below.

You can unsubscribe from marketing communications at any time. You are responsible for maintaining the confidentiality of your account credentials.

4. How We Share Personal Information

We share personal information with trusted third parties who help us operate the business. Each acts on our instructions under a written agreement and may only use the information for the purpose we have given it to them.

  • Shopify – store hosting, checkout, payment processing and customer accounts. Information submitted through the Services is processed through Shopify and its infrastructure. You can review the Shopify Consumer Privacy Policy for more detail.
  • Appstle – managing membership billing and recurring orders.
  • Klaviyo – sending email marketing and order-related emails.
  • Judge.me – collecting and displaying product reviews.
  • Royal Mail – delivering your order, which requires your name and delivery address.
  • Google – advertising and measuring advertising performance.
  • Microsoft – our business email, where we hold correspondence with you
  • TikTok – advertising on TikTok and measuring how those adverts perform. If you accept marketing cookies, we tell TikTok which of our pages you view, and whether you add a product to your basket or place an order. To match your visit to a TikTok account, we also send a scrambled (hashed) copy of your email address and phone number. Some of this is sent from Shopify’s systems rather than from your browser.
  • Meta – advertising on Facebook and Instagram and measuring how those adverts perform. If you accept marketing cookies, the Meta pixel tells Meta which of our pages you view, and whether you add a product to your basket or place an order. To match your visit to a Facebook or Instagram account, we also send a scrambled (hashed) copy of your email address and phone number, some of it from Shopify’s systems rather than from your browser.

Advertising and marketing partners. We may share limited information with advertising and marketing partners to help deliver relevant advertisements and measure campaign performance. You have the right to object to or restrict targeted advertising.

Business transfers. If STR8 Nutrition Ltd is involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction.

Legal requirements. We may disclose information where required to comply with applicable law, respond to legal requests, enforce agreements, or protect rights, property, or safety.

We do not sell your personal information.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember your preferences, analyse website performance, improve functionality, and support advertising and marketing activity.

Cookies that are strictly necessary for the website to work are set automatically. All other cookies, including analytics and advertising cookies, are only set where you have given consent through our cookie banner. You can change or withdraw your cookie preferences at any time using that banner, and you can also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

Advertising cookies we use. These include the TikTok pixel, the Meta pixel and Google’s advertising tags. None of them loads until you accept marketing cookies. They show us which adverts bring visitors to the site, and they let us show our adverts to people likely to be interested in them.

6. Third-Party Websites and Services

The Services may contain links to third-party websites, platforms, or services. We are not responsible for the privacy, security, or content of third-party services. You should review their privacy policies before providing personal information.

Information shared on social media platforms may be publicly visible depending on your privacy settings.

7. Children’s Privacy

The Services are not intended for children, and our products are not intended for anyone under 18.

We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided personal information to us, contact us at support@str8nutrition.co.uk so we can remove the information.

8. Data Security and Retention

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We keep personal information only for as long as we need it. In general:

  • Order and transaction records are kept for seven years from the end of the financial year they relate to, because UK tax law requires it.
  • Account information is kept for as long as your account is open, and deleted on request.
  • Marketing contact details are kept until you unsubscribe, and removed shortly afterwards.
  • Customer support correspondence is kept for two years after the enquiry is resolved.

We may keep information for longer where we need it to resolve a dispute or enforce our agreements.

9. International Data Transfers

Your personal information may be transferred to and processed outside the United Kingdom or European Economic Area.

Where required by law, we use recognised safeguards for international data transfers, including UK International Data Transfer Agreements and Standard Contractual Clauses approved by the European Commission.

10. Your Rights

Depending on your location, you have the following rights regarding your personal information.

  • Access. Request access to the personal information we hold about you.
  • Correction. Request correction of inaccurate or incomplete information.
  • Deletion. Request deletion of your personal information in certain circumstances.
  • Restriction. Request restriction of how we process your information.
  • Objection. Object to certain types of processing, including direct marketing.
  • Portability. Request a copy of your information in a portable format.
  • Withdraw consent. Where processing relies on consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.

You can unsubscribe from marketing emails using the unsubscribe link included in communications. We may still send service-related emails regarding orders or account activity.

To exercise your rights, contact us using the details below. We may need to verify your identity before processing your request. We will respond within one month.

UK residents also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk. For EEA residents, supervisory authority information is available through the European Data Protection Board.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any updates will be posted on this page with a revised “Last updated” date where required by law.

12. Contact Us

If you have questions about this Privacy Policy, your personal information, or your data protection rights, contact us at:

STR8 Nutrition Ltd
128 City Road
London
EC1V 2NX
United Kingdom
Email: support@str8nutrition.co.uk
Company No. 17139971
Registered in England and Wales