Privacy Policy

Last updated: 28 July 2026

This privacy notice for Health & Wellbeing Online Ltd (doing business as Science Fitness) ("we", "us", or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at sciencefitness.co.uk, or any website of ours that links to this privacy notice
• Place an order with us or create a customer account
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at info@sciencefitness.co.uk.

Summary of key points

• What we process: personal information you give us when ordering, creating an account, or contacting us — plus limited technical information collected automatically when you browse.
• Sensitive information: we do not process sensitive personal information.
• Third-party data: we do not collect information about you from third parties.
• Why we process it: to provide and improve the Services, fulfil orders, communicate with you, keep the Services secure, and comply with law — and only where we have a valid legal reason to do so.
• Sharing: we share information only in the specific situations and with the specific categories of third parties described below. We do not sell your personal information.
• Security: we protect your information with organisational and technical measures, though no online system can be guaranteed 100% secure.
• Your rights: under UK data protection law you have rights over your personal information, including access, correction, and erasure. The easiest way to exercise them is to contact us.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. When and with whom do we share your personal information?
4. Do we use cookies and other tracking technologies?
5. How long do we keep your information?
6. How do we keep your information safe?
7. Is your information transferred internationally?
8. Do we collect information from minors?
9. What are your privacy rights?
10. Controls for Do-Not-Track features
11. Do we make updates to this notice?
12. How can you contact us about this notice?
13. How can you review, update, or delete your data?

1. What information do we collect?

Personal information you disclose to us

In short: we collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you place an order, register on the Services, express an interest in our products, participate in activities on the Services, or otherwise contact us. Depending on how you interact with us, this may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Billing addresses
• Order history

Sensitive information. We do not process sensitive personal information.

Payment data. Our store runs on Shopify, and payments are handled by Shopify's checkout and its payment providers. We do not see or store your full card details ourselves. You can read how Shopify handles your data in the Shopify Consumer Privacy Policy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In short: some information — such as your IP address and browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity, but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, general location, and information about how and when you use the Services. This information is primarily needed to maintain the security and operation of the Services, and for our internal analytics and reporting.

Like most businesses, we also collect information through cookies and similar technologies (see section 4). The information we collect includes:

• Log and usage data — service-related, diagnostic, usage, and performance information our servers automatically collect, such as date/time stamps, pages viewed, searches, and other actions you take.
• Device data — information about the computer, phone, or tablet you use to access the Services, such as IP address, device identifiers, browser type, hardware model, internet service provider, and operating system.
• Location data — imprecise location information derived from your IP address. You can limit this by disabling location access on your device, though some features of the Services may not work as a result.

2. How do we process your information?

In short: we process your information to provide, improve, and administer our Services, fulfil your orders, communicate with you, keep the Services secure, and comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To fulfil and manage your orders — including payments, delivery, returns, and exchanges.
• To facilitate account creation and authentication — so you can create and log in to a customer account and keep it in working order.
• To respond to your enquiries — when you contact us we use your details to reply and to keep a record of the conversation.
• To request feedback — and to contact you about your use of our Services.
• To send marketing communications — only where you have opted in, and you can unsubscribe at any time.
• To administer prize draws and competitions.
• For security and fraud prevention, and to comply with our legal obligations.

We only process your personal information when we have a valid legal basis to do so under UK data protection law — typically the performance of a contract (fulfilling your order), your consent (marketing), our legitimate interests (improving and securing the Services), or compliance with a legal obligation.

3. When and with whom do we share your personal information?

In short: we share information only in the specific situations described here, and only with the categories of third parties listed. We never sell your personal information.

Vendors, consultants, and other third-party service providers. We may share your data with third parties who perform services for us or on our behalf and require access to the information to do that work. We have contracts in place with our third parties designed to safeguard your personal information: they cannot do anything with it unless we instruct them to, they will not share it with any organisation apart from us, and they commit to protecting it and retaining it only for the period we instruct.

The categories of third parties we may share personal information with are:

• Ecommerce platform (Shopify) and website hosting providers
• Payment processors
• Delivery and fulfilment providers
• Communication and collaboration tools
• Data analytics services
• Data storage service providers
• Our web development agency (CreateTheWeb)

We may also need to share your personal information in the following situations:

• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

4. Do we use cookies and other tracking technologies?

In short: yes — for essential site functions, and (with your consent) for analytics and advertising.

We use cookies and similar technologies (such as web beacons and pixels) when you interact with our Services. Some are essential: they keep the Services secure, keep your basket working, prevent crashes, and remember your preferences. These do not require consent.

With your consent, we and our service providers also use tracking technologies for analytics and advertising — including tailoring advertisements to your interests and sending abandoned-basket reminders, depending on your communication preferences.

Managing cookies. When you first visit our site you can accept or decline non-essential cookies using the cookie banner, and you can change your choice at any time via the cookie preferences link. Most web browsers also let you remove or reject cookies in their settings, though this may affect some features of the Services.

Analytics. We may use analytics services, including Shopify's built-in analytics and Google Analytics, to understand how the Services are used. To opt out of Google Analytics across the web, visit Google's opt-out page; for more about Google's practices, see the Google Privacy & Terms page.

5. How long do we keep your information?

In short: for as long as necessary to fulfil the purposes in this notice, unless the law requires longer.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period in which you have an account with us, or as needed to meet our legal obligations relating to your orders.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it — or, if that is not possible (for example, because it is held in backup archives), we will securely store it, isolated from further processing, until deletion is possible.

6. How do we keep your information safe?

In short: through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the personal information we process. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that hackers, cybercriminals, or other unauthorised third parties will never be able to defeat our security. Although we will do our best to protect your personal information, transmission to and from our Services is at your own risk — please only access the Services within a secure environment.

7. Is your information transferred internationally?

In short: some of our service providers process data outside the UK; where they do, safeguards are in place.

Some of the third-party providers we use (including our ecommerce platform) may process your personal information on servers located outside the United Kingdom. Where personal information is transferred internationally, we rely on appropriate safeguards recognised by UK data protection law, such as adequacy decisions or standard contractual clauses, to ensure your information receives an equivalent level of protection.

8. Do we collect information from minors?

In short: we do not knowingly collect data from or market to children under 18.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to their use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data from our records. If you become aware of any data we may have collected from children under 18, please contact us at info@sciencefitness.co.uk.

9. What are your privacy rights?

In short: under UK data protection law you have rights over your personal information, and you can exercise them at any time.

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information in certain circumstances
• Restrict or object to certain processing of your information
• Data portability — receive a copy of the information you provided to us in a structured, machine-readable format
• Withdraw consent at any time where we rely on consent (this will not affect the lawfulness of processing before withdrawal)

Account information. If you would like to review or change the information in your account, or terminate your account, contact us. On a termination request we will deactivate or delete your account and information from our active databases, though we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with legal requirements.

Complaints. If you believe we have processed your personal information unlawfully, you have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO). We would appreciate the chance to address your concerns first, so please consider contacting us before raising a complaint.

If you have questions or comments about your privacy rights, email us at info@sciencefitness.co.uk.

10. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your online browsing activities monitored and collected. No uniform technology standard for recognising and implementing DNT signals has been finalised, so we do not currently respond to DNT browser signals. If a standard we must follow is adopted in the future, we will inform you in a revised version of this notice.

11. Do we make updates to this notice?

In short: yes, as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top. If we make material changes, we may notify you by prominently posting a notice of the changes or by sending you a notification directly. We encourage you to review this notice regularly.

12. How can you contact us about this notice?

If you have questions or comments about this notice, email us at info@sciencefitness.co.uk or write to us at:

Health & Wellbeing Online Ltd
Unit 3C, Enterprise Way
Skipton, North Yorkshire BD23 2FJ
United Kingdom

13. How can you review, update, or delete your data?

You have the right to request access to the personal information we collect from you, details about how we have processed it, to correct inaccuracies, or to delete your personal information. You may also withdraw your consent to processing where we rely on it. These rights may be limited in some circumstances by applicable law. To make a request, contact us through our contact page or email info@sciencefitness.co.uk — we will consider and act upon any request in accordance with applicable data protection laws.