Privacy Policy
Last updated: 22 July 2026
Vantage Brook Nutrition Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you visit https://reviveshoulder.world/ (the "Site") or place an order with us.
We are the data controller for your personal data. We are registered in England and Wales.
Contact: info@reviveshoulder.world · 12 Brook Lane, Manchester, M1 2AB, UK · Tel: +44 161 832 7456
1. Legal Basis and Applicable Law
We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we serve visitors from the European Economic Area (EEA), we also comply with the EU GDPR (Regulation 2016/679).
2. What Personal Data We Collect
| Category | Data Elements | Source |
|---|---|---|
| Order data | Full name, telephone number, delivery address, quantity, SKU | You (order form) |
| Contact data | Name, email address, message content | You (contact form) |
| Technical data | IP address, browser type, device type, operating system, referring URL, pages visited, session timestamps | Automatically (server logs, analytics) |
| Cookie data | Cookie identifiers, consent preferences | Automatically (your browser) |
| Marketing data | UTM parameters, Google Click ID (gclid) | Automatically (URL parameters) |
We do not collect special category data (health, biometric, genetic data). We do not collect payment card data - payment is handled on delivery by the courier.
3. How and Why We Use Your Data
| Purpose | Legal Basis (UK GDPR Art. 6) |
|---|---|
| Process and fulfil your order; contact you to confirm delivery | Art. 6(1)(b) - performance of a contract |
| Respond to your enquiry via the contact form | Art. 6(1)(b) - pre-contractual steps / Art. 6(1)(f) - legitimate interests |
| Comply with legal obligations (accounting, VAT, consumer law) | Art. 6(1)(c) - legal obligation |
| Analytics (understanding how the Site is used) | Art. 6(1)(a) - consent (via cookie banner) |
| Advertising / remarketing (Google Ads) | Art. 6(1)(a) - consent (via cookie banner) |
| Fraud prevention and site security | Art. 6(1)(f) - legitimate interests |
4. Cookies and Tracking Technologies
We use cookies and similar technologies. See our Cookie Policy for full details. You can manage your cookie preferences at any time via the cookie banner displayed on each page.
Where analytics or advertising cookies are used, we implement Google Consent Mode v2. Ad storage, ad user data, and ad personalisation signals are only sent to Google when you have given explicit consent.
5. Data Sharing and Third Parties
We share your data only where necessary:
- Delivery partners / couriers - receive your name and address to fulfil your order.
- Google LLC - analytics (Google Analytics 4) and advertising (Google Ads) where you have consented. Google may transfer data outside the UK/EEA under Standard Contractual Clauses. See Google's Privacy Policy.
- Hosting / infrastructure providers - process server logs on our behalf under data processing agreements.
- Legal and regulatory authorities - where required by law.
We do not sell your personal data to third parties. We do not transfer personal data outside the UK/EEA without appropriate safeguards (Standard Contractual Clauses or adequacy decisions).
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Order records (name, phone, address) | 6 years from the date of the transaction (UK tax law) |
| Contact form submissions | 12 months from last contact, then deleted |
| Server logs (IP, browser) | 90 days, then deleted |
| Analytics data | As configured in Google Analytics (max 26 months by default) |
| Cookie consent records | 12 months from consent, then refreshed |
7. Your Rights
Under UK GDPR you have the following rights in relation to your personal data:
- Right of access - request a copy of the data we hold about you.
- Right to rectification - ask us to correct inaccurate or incomplete data.
- Right to erasure - ask us to delete your data where there is no compelling reason for continued processing.
- Right to restrict processing - ask us to limit how we use your data.
- Right to data portability - receive your data in a structured, machine-readable format.
- Right to object - object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making - we do not use solely automated decision-making that produces legal or similarly significant effects.
- Right to withdraw consent - where processing is based on consent, you may withdraw it at any time (this does not affect the lawfulness of processing before withdrawal).
To exercise any of these rights, contact us at: info@reviveshoulder.world. We will respond within one calendar month.
8. Right to Lodge a Complaint
If you believe we have not handled your data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
If you are located in the EEA, you may also contact your local data protection authority.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption, access controls, and regular security assessments. No method of internet transmission is 100% secure; we cannot guarantee absolute security.
10. Children
Our Site and products are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Links to Third-Party Sites
Our Site includes links to third-party websites (for example, EFSA, NHS, PubMed). We are not responsible for the privacy practices of those sites and recommend you review their respective privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page will always reflect the most recent revision. Material changes will be notified via a prominent notice on the Site.