Privacy Policy - Brookline Nutrition

1. Who we are

The data controller is Brookline Nutrition Ltd, registered in England and Wales (Company No. 14827361 / VAT GB 382 9104 21), with a registered address at 14 Harley Court, London W1G 9PQ, United Kingdom.

Contact for data matters: info@vibrantvibeclean.world

2. What personal data we collect

We may collect the following categories of personal data:

Identity data: first name, last name.
Contact data: telephone number, email address, delivery address.
Transaction data: details of products ordered, order references, payment confirmation references (we do not store card numbers).
Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system and platform, device identifiers.
Usage data: information about how you use our website, products and services.
Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
Cookie data: see our Cookie Policy for full details.

We do not collect any Special Categories of personal data (such as health data, racial or ethnic origin, religious beliefs or biometric data) through this website.

3. How we collect your personal data

We collect data through the following means:

Direct interactions: when you place an order, complete a contact form, or email us.
Automated technologies: as you interact with our website, we may automatically collect technical data via cookies and similar technologies. See our Cookie Policy.
Third parties: analytics providers and payment processors may share technical or transactional data with us in accordance with their own privacy policies.

4. How we use your personal data - lawful basis

Purpose	Lawful Basis
To process and fulfil your order	Performance of a contract (Art. 6(1)(b) UK GDPR)
To respond to your enquiries	Legitimate interests / performance of a contract
To manage returns and refunds	Performance of a contract; Legal obligation
To send order confirmation and dispatch emails	Performance of a contract
To comply with legal and regulatory obligations	Legal obligation (Art. 6(1)(c) UK GDPR)
To conduct analytics and improve our website	Legitimate interests (Art. 6(1)(f) UK GDPR) - only after consent for analytics cookies
To send marketing communications (if opted in)	Consent (Art. 6(1)(a) UK GDPR)

5. Cookies and Consent Mode v2

Our website uses Google Consent Mode v2. By default, all non-essential consent signals (ad_storage, analytics_storage, ad_user_data, ad_personalization) are set to denied until you make a choice via our cookie banner. Only strictly necessary cookies are active before consent is given. See our Cookie Policy for a full list of cookies and how to manage them.

6. Sharing your personal data

We do not sell your personal data. We may share your data with the following categories of recipients:

Payment processors: to process your payment securely. They act as data processors under a Data Processing Agreement.
Delivery partners: to fulfil your order and deliver your product to you.
Analytics providers: such as Google Analytics, subject to your cookie consent.
IT and system administration providers: who help us maintain our website and systems.
Professional advisers: including lawyers, accountants, auditors and insurers where necessary.
Regulatory or law enforcement authorities: where required by applicable law.

Where we share data with third parties outside the UK or EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

7. Data retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

Order and transaction data: 7 years (UK tax and accounting requirements).
Contact and enquiry data: 3 years from last contact.
Marketing consent records: until you withdraw consent, plus 12 months for compliance audit purposes.
Technical/log data: 13 months (standard analytics retention).

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): to request deletion of your data in certain circumstances.
Right to restrict processing: to request that we limit how we use your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making: we do not carry out solely automated decision-making that produces legal or similarly significant effects.
Right to withdraw consent: where we process data on the basis of your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@vibrantvibeclean.world. We will respond within one calendar month.

9. Right to lodge a complaint

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk
Helpline: 0303 123 1113
Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at info@vibrantvibeclean.world.

10. Data security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encrypted transmission (HTTPS/TLS), access controls, and regular security assessments. However, no internet-based system is completely secure; we cannot guarantee absolute security.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies.

12. Children

Our website and products are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to notify users (for example, via a banner on our website). Continued use of our website after changes constitutes acceptance of the updated policy.

14. Contact us

For any privacy-related questions or to exercise your rights, contact Brookline Nutrition Ltd at:

Email: info@vibrantvibeclean.world
Post: 14 Harley Court, London W1G 9PQ, United Kingdom