Privacy Policy

Last updated: 23 July 2026

This Privacy Policy explains how Hillcrest Wellness Ltd ("we", "us", "our") collects, uses, stores and protects your personal data when you visit muscledetoxify.world (the "Website") or place an order for Wellaray Coffee. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

Hillcrest Wellness Ltd
14 Hillcrest Rise
London, EC1A 1BB
United Kingdom
Company No. / VAT: GB123456789
Email: hello@muscledetoxify.world
Telephone: +44 20 7946 0312

2. What Personal Data We Collect

We collect the following categories of personal data:

  • Identity data: full name as provided in the order or contact form.
  • Contact data: telephone number, email address.
  • Transaction data: details about the products you have ordered.
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
  • Usage data: information about how you use our Website, including pages visited, time on site, and referral source.
  • Marketing and communications data: your preferences in receiving communications from us.

We do not collect any Special Category data (such as health data, racial or ethnic origin, or genetic data) through this Website.

3. How We Collect Your Data

  • Direct interactions: when you fill in our order form or contact form, or correspond with us by email or telephone.
  • Automated technologies: as you interact with our Website, we may automatically collect Technical Data using cookies, server logs, and similar technologies. Please see our Cookie Policy for further details.
  • Third parties: analytics providers (e.g. Google Analytics) subject to your consent preferences set via our cookie banner.

4. How We Use Your Personal Data

We use your personal data only where we have a lawful basis to do so. The lawful bases we rely on are:

  • Contract performance (Article 6(1)(b) UK GDPR): to process and fulfil your order, contact you to confirm delivery, and handle returns or refunds.
  • Legal obligation (Article 6(1)(c) UK GDPR): to comply with applicable laws, including tax and accounting obligations.
  • Legitimate interests (Article 6(1)(f) UK GDPR): to improve our Website, prevent fraud, and ensure network and information security.
  • Consent (Article 6(1)(a) UK GDPR): to set non-essential cookies and conduct analytics, where you have given consent via our cookie banner. You may withdraw consent at any time.

5. Cookies and Consent Mode

We use Google Consent Mode v2. By default, advertising and analytics cookies are set to "denied" until you actively accept them via our cookie banner. For full details of the cookies we use, please read our Cookie Policy.

6. Sharing Your Personal Data

We do not sell your personal data. We may share your data with the following categories of recipients where necessary:

  • Service providers acting as data processors, such as order management, payment processing, and website hosting providers - bound by contractual obligations to keep your data confidential and use it only for specified purposes.
  • Analytics providers (e.g. Google Analytics) - only where you have consented via our cookie banner.
  • Legal and regulatory authorities - where required by law or to protect our legal rights.

Where we transfer data outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO).

7. Data Retention

  • Order data: retained for 7 years from the date of transaction for legal and accounting purposes.
  • Contact form submissions: retained for 2 years from the date of submission, or until the enquiry is resolved, whichever is sooner.
  • Cookie and analytics data: retained per the relevant third-party provider's retention policy (typically 13-26 months for Google Analytics).

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure: to request deletion of your personal data where there is no compelling reason for us to continue processing it.
  • Right to restrict processing: to request that we restrict the processing of your data in certain circumstances.
  • Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Rights related to automated decision-making: we do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at hello@muscledetoxify.world or by post at the address in Section 1. We will respond within one calendar month.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow, SK9 5AF
United Kingdom
Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

10. Security

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed without authorisation. Access to your personal data is restricted to those employees and third parties who have a business need to know it.

11. Third-Party Links

This Website may include links to third-party websites. Clicking those links may allow third parties to collect data about you. We do not control those websites and are not responsible for their privacy practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

13. Contact Us

For any questions or requests relating to this Privacy Policy, please contact our data protection contact at hello@muscledetoxify.world or write to us at the address in Section 1.