Last Updated: 1st October 2025
1. Introduction
At Mastering Our Body (“we,” “our,” or “us”), we are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website [MasteringOurBody.com] (the “Site”) and make a purchase.
We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal information is:
Mastering Our Body
478 C Prescot Rd, Liverpool, L13 3DB
Support@MasteringOurBody.com, e.g., privacy@MasteringOurBody.com
3. The Information We Collect
We collect several types of information from and about users of our Site:
-
Personal Identification Information: Name, shipping/billing address, email address, phone number.
-
Financial Information: Payment card details are processed securely by our third-party payment processors (e.g., Stripe, PayPal). We do not store your full credit card information on our servers.
-
Health Data (Special Category Data): When you voluntarily provide it (e.g., in customer reviews, when contacting our support team about a product concern, or when purchasing products for a specific health need), we may process data concerning your health. This is considered “special category data” under GDPR, and we treat it with the highest level of security and confidentiality.
-
Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
-
Usage Data: Information about how you use our Site, products, and services, including the full URL clickstream to, through, and from our Site, products you viewed or searched for, page response times, and download errors.
-
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
4. How We Use Your Information (Our Legal Basis)
We use your information based on the following legal grounds:
| Purpose of Processing | Type of Data | Legal Basis for Processing |
|---|---|---|
| To process and deliver your order, manage payments, and prevent fraud. | Identity, Contact, Financial, Transaction | Performance of a Contract |
| To manage our relationship with you, including notifying you about changes to our terms or policy, and asking you to leave a review. | Identity, Contact, Profile, Marketing | Performance of a Contract; Legal Obligation |
| To provide customer support and respond to your inquiries. | Identity, Contact, Health Data (if provided) | Performance of a Contract; Your Consent (for health data) |
| To administer and protect our business and this website (troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data). | Identity, Contact, Technical | Legitimate Interests (for running our business, provision of administration and IT services, network security) |
| To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you. | Identity, Contact, Profile, Usage, Marketing, Technical | Legitimate Interests (to study how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy) |
| To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences. | Technical, Usage | Legitimate Interests (to define types of customers for our products and services, to keep our website updated and relevant, and to develop our business) |
| To make suggestions and recommendations to you about goods or services that may be of interest to you. | Identity, Contact, Technical, Usage, Profile | Legitimate Interests (to develop our products/services and grow our business) or Consent (where required by law) |
5. How We Share Your Information
We may share your personal information with the following categories of third parties:
-
Service Providers: We share data with trusted third parties who provide services on our behalf, such as payment processing, order fulfillment, shipping (e.g., Royal Mail, DPD), email delivery, hosting, and analytics.
-
Professional Advisers: We may disclose your data to professional advisers such as lawyers, bankers, auditors, and insurers.
-
Legal Obligations: We may disclose your data to comply with applicable laws, regulatory requests, court orders, or to protect our rights, property, or safety, or that of others.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
6. International Transfers
We primarily store and process your data within the European Economic Area (EEA). If we transfer your data outside the EEA, we will ensure it is protected by using one of the following safeguards:
-
Transferring to a country deemed to provide an adequate level of protection.
-
Using specific contracts approved for use in the UK which give personal data the same protection it has in the UK/EEA.
7. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. These include encryption, access controls, and secure servers.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, we are required to keep basic information about customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.
9. Your Data Protection Rights
Under GDPR, you have the following rights:
-
The right to be informed: You have the right to know how we use your data (this policy fulfills that right).
-
The right of access: You can request a copy of the personal data we hold about you.
-
The right to rectification: You can request correction of inaccurate or incomplete data.
-
The right to erasure (‘the right to be forgotten’): You can ask us to delete your personal data.
-
The right to restrict processing: You can ask us to temporarily halt the processing of your data.
-
The right to data portability: You can request a transfer of your data to another service.
-
The right to object: You can object to our processing of your data based on our legitimate interests.
-
Rights in relation to automated decision making and profiling: We do not engage in fully automated decision-making that produces legal effects.
To exercise any of these rights, please contact us at [privacy@MasteringOurBody.com].
10. Cookies
Our Site uses cookies and similar tracking technologies to distinguish you from other users. This helps us to provide you with a good experience and also allows us to improve our Site. For detailed information, please see our separate [Cookie Policy].
11. Changes to This Privacy Policy
We may update this policy from time to time. The date of the last revision will be stated at the top of this page. We will notify you of any material changes via email or a prominent notice on our Site.
12. Contact Us & Complaints
If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact us at:
Email: privacy@MasteringOurBody.com
Address: 478C Prescot Rd, Liverpool, L13 3DB, United Kingdom
If you are not satisfied with our response, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.
