How Victory Supplements handles personal information

Business

Victory Supplements Ltd

Company number

17251272

Website

www.victorysupplements.co.uk

Effective date

14th August 2026

Victory Supplements Ltd is the controller of personal information described in this policy. Registered office: Studiofifty, 50 Christchurch Road, Ringwood, Hampshire, BH24 1DW. Privacy contact: infor@victorysupplements.co.uk

1. Scope

This policy applies to customers, website visitors, prospective customers, competition entrants, reviewers and people who contact us. It should be read with our Cookie Policy.

2. Information we collect

Identity and contact details, such as name, billing and delivery addresses, email address and telephone number.
Order, payment-status, refund, delivery, correspondence and customer-service records. Full card details are normally handled by payment providers rather than stored by us.
Account credentials and preferences.
Technical and usage information, such as IP address, device, browser, pages viewed, referral source, cookie identifiers and interactions.
Marketing preferences, consent records and engagement with messages.
Fraud-prevention, security and verification information.
Reviews, survey answers, competition entries and other information you choose to provide.

Please avoid sending health information unless it is genuinely necessary to address a product-safety or customer-service issue. Where information concerning health is supplied, we will handle it with additional care and identify an appropriate lawful condition where required.

3. How information is collected

We collect information directly from you, automatically through the website and similar technologies, and from service providers such as payment, ecommerce, delivery, fraud-prevention, analytics and advertising providers. We may also receive information from social-media platforms where you interact with our pages or advertisements, according to your settings and the platform’s terms.

4. Purposes and lawful bases

To take payment, fulfil orders, deliver goods, process returns and provide customer service: performance of a contract and steps requested before a contract.
To keep transaction, tax, food-safety, recall and legal records: legal obligation and legitimate interests.
To prevent fraud, secure the website, enforce terms and establish or defend claims: legitimate interests and, where applicable, legal obligation.
To improve products, service and website performance using proportionate analytics: legitimate interests where consent is not required; consent where cookies or similar technologies require it.
To send email, SMS or similar direct marketing: consent or the lawful existing-customer exception where its conditions are satisfied. Every message will offer an appropriate opt-out.
To personalise advertising or measure campaigns using non-essential technologies: consent where required.
To manage competitions, surveys and reviews: contract, consent or legitimate interests depending on the activity.

5. Sharing information

We may share personal information where reasonably necessary with:

Wix, which provides our website, e-commerce platform and Wix Payments payment-processing services;

PayPal, where customers choose PayPal to make a payment;

Tide and other banking or financial-service providers;

Royal Mail and any other couriers, fulfilment providers or delivery partners used to complete orders;

Microsoft, including Microsoft 365 and Outlook, for business communications and related services;

IT, hosting, cybersecurity, customer-support, marketing and analytics providers;

social media and advertising platforms, including platforms operated by Meta and TikTok, where applicable;

accountants, auditors, insurers, legal advisers and other professional advisers;

regulators, courts, law-enforcement agencies and public authorities where disclosure is legally required or otherwise permitted by law; and

a prospective purchaser, investor or adviser involved in a proposed sale, merger, restructuring or transfer of all or part of our business.

Where a provider processes personal information on our behalf, it must do so under appropriate contractual instructions and data-protection safeguards. Some recipients, including banks, payment providers, couriers and social media platforms, may process personal information as independent controllers under their own privacy policies.

6. International transfers

Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we will use an adequacy regulation, approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism, and assess supplementary protections where appropriate. Contact us for further information about relevant safeguards.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, tax, accounting, product-safety, recall, warranty, fraud-prevention and dispute-resolution requirements.

Our usual retention periods are:

· Order, payment and accounting records: six years after the end of the financial year to which they relate.

· General customer service and complaint records: six years after the matter is closed.

· Product-safety, adverse event and recall records: ten years after the matter is closed or the relevant product was last supplied, whichever is later.

· Customer account records: until the account is closed and then for two years, unless particular information must be retained for longer for another purpose described above.

· Marketing records: until consent is withdrawn or the individual opts out. We may retain a minimal suppression record to ensure that their marketing preference continues to be respected.

· Cookie and analytics information: for the periods specified in our current cookie table.

We may retain information for longer where reasonably necessary because of a complaint, legal claim, dispute, product recall, regulatory investigation, suspected fraud or legal hold. When information is no longer required, it will be securely deleted or anonymised.

8. Your rights

Depending on the circumstances, you may have rights to be informed, access your information, correct it, erase it, restrict processing, object, receive portable data, withdraw consent, and obtain safeguards concerning solely automated decisions. Rights are not absolute. We may verify identity and must normally respond within one month. Withdrawing consent does not affect earlier lawful processing.

9. Marketing choices

Use the unsubscribe link, adjust available account settings or contact info@victorysupplements.co.uk. We may retain a suppression record so that we do not contact you again. You can change or withdraw your cookie consent at any time by selecting “Cookie Settings” in the footer of our website.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy. Strictly necessary technologies may operate without consent where legally permitted. Analytics, advertising and other non-essential technologies will be used only in accordance with the consent choices available through our banner.

11. Security

We use proportionate organisational and technical measures designed to protect information. No internet transmission or storage system is completely secure. You are responsible for protecting passwords and notifying us of suspected account misuse.

12. Children

Our store is intended for adults. We do not knowingly target or sell through the website to children. If you believe a child has supplied personal information improperly, contact us.

13. Complaints

Contact us first at info@victorysupplements.co.uk. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or by using its published contact channels. You may also contact the relevant supervisory authority where another regime applies.

14. Changes

We may update this policy to reflect changes in law, technology, providers or operations. Material changes will be highlighted where appropriate. The effective date appears above.