Privacy policy
Last updated: 2 September 2025
This Privacy Policy explains how The Protein Baker (“we”, “us”, “our”) collects, uses, and shares your personal information when you visit or make a purchase from www.theproteinbaker.uk (the “Site”).
We are the data controller for the personal information we process. If you have questions, please contact theproteinbaker@gmail.com or write to: The Protein Baker, 15 Radstock Road, Woolston, Southampton, SO19 2HN, United Kingdom.
1) Information we collect
a) Device & browsing data
Examples: IP address, browser type/version, time zone, cookie identifiers, pages viewed, search terms, and how you interact with the Site.
How we collect: Automatically via cookies, pixels, tags, log files and similar technologies when you use the Site.
Why: To load the Site correctly, keep it secure, measure performance, and improve our services.
b) Order & account data
Examples: Name, email, phone, billing and shipping addresses, payment method details (processed by our payment providers), order history, communications with us.
How we collect: Provided by you at checkout, account creation, or customer support.
Why: To take payment, fulfil and deliver your order, provide invoices/updates, prevent fraud, and provide customer support.
c) Customer support data
Examples: Messages, photos you send (e.g., to report an issue), and any details needed to resolve your query.
How we collect: Provided by you when you contact us.
Why: To investigate and resolve your request.
We do not collect special category data (e.g., health information) through the Site. Please do not include sensitive data in messages to us.
2) Cookies & similar technologies
We use cookies and similar tools to operate the Site, keep it secure, and analyse performance. Some cookies are essential (e.g., for the cart/checkout); others are for analytics or marketing (if enabled).
Examples of Shopify cookies (function): _secure_session_id (navigation), cart/cart_sig (checkout), secure_customer_sig (login), _shopify_y/_shopify_s (analytics), _orig_referrer/_landing_page (attribution).
How to control cookies: Most browsers let you block or delete cookies. Blocking some cookies may affect Site functionality.
Ad choices (if marketing cookies used): You can also visit the Digital Advertising Alliance opt-out page: http://optout.aboutads.info/.
We do not currently respond to Do Not Track browser signals.
3) How we use your information
We use your personal information to:
Provide our services: list products, process payments, fulfil/deliver orders, and send order updates.
Improve and secure the Site: troubleshooting, analytics, and fraud prevention.
Communicate with you: customer support and, where you consent or it is otherwise lawful, marketing about our products/offers (you can opt out at any time).
Comply with legal obligations: tax/accounting, legal claims, and requests from authorities where required by law.
4) Sharing your information
We share information with service providers who help us run our business, under contracts that limit their use of your data:
Shopify (store platform & hosting). Learn more: https://www.shopify.com/legal/privacy.
Payment processors/gateways (e.g., Shopify Payments, Stripe, PayPal) to process your payment securely.
Couriers/fulfilment (e.g., Royal Mail) to deliver your order.
Email & communications (e.g., Gmail) to send messages and support replies.
Analytics/advertising (only if enabled), such as Shopify analytics and, where configured, partners like Google Analytics or Meta for performance and ads measurement.
We may disclose information if required by law (e.g., to comply with a legal request) or to protect our rights.
We do not sell your personal information.
5) Lawful bases (UK GDPR / GDPR)
We process personal information under one or more of the following legal bases:
Contract: to provide products/services you request (checkout, delivery, support).
Legitimate interests: to secure the Site, prevent fraud/abuse, understand performance, and market similar products to existing customers (balanced against your rights).
Consent: for certain marketing/analytics cookies or email marketing where required. You can withdraw consent at any time.
Legal obligation: to meet tax, accounting and regulatory duties.
6) Retention
We keep personal information only as long as necessary for the purposes above:
Orders & finance records: typically up to 6 years for tax/accounting.
Support & communications: as long as needed to manage your request, plus a reasonable period to establish/defend legal claims.
Marketing data: until you opt out or your consent is withdrawn.
We then delete or anonymise the information.
7) International transfers
Shopify and some providers may process data outside the UK/EEA (e.g., Canada, United States). Where this happens, we use appropriate safeguards such as Standard Contractual Clauses (and the UK addendum, where applicable). See Shopify’s GDPR resources for details: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
8) Your rights
Depending on where you live (e.g., UK/EEA), you have rights over your personal information, including:
Access (a copy of your data)
Rectification (correct inaccuracies)
Erasure (delete, in certain cases)
Restriction (limit processing)
Portability (receive data in a portable format)
Object (to processing based on legitimate interests or to direct marketing)
To exercise your rights, email theproteinbaker@gmail.com. We may need to verify your identity before responding.
You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/. We’d appreciate the chance to address your concerns first.
9) Children
Our Site is not intended for children under 16. We do not knowingly collect personal information from children. If you are a parent/guardian and believe a child has provided us information, contact theproteinbaker@gmail.com and we will delete it.
10) Automated decision-making
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our platform provider (Shopify) uses limited automated tools for fraud prevention (e.g., temporary deny-lists for suspicious IPs/cards).
11) Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will post the updated version on this page with a new “Last updated” date.
12) Contact us
Questions, requests, or complaints about privacy:
Email: theproteinbaker@gmail.com
Post: The Protein Baker, 15 Radstock Road, Woolston, Southampton, SO19 2HN, United Kingdom