Privacy Policy

Last updated: 4 August 2026

This notice explains what personal data RevaHealth collects, why we collect it, how long we keep it and the rights you have over it. It applies to this store and to the emails we send. We are the data controller for the information described here. The controller is Revahealth Limited, company number 17047576, registered office 86-90 Paul Street, London EC2A 4NE.

What we collect

We only collect what an order or an enquiry actually requires:

Order details. Your name, delivery address, billing address, email address, phone number and the items you bought.
Payment information. Processed by Shopify Payments and, where you choose them, third-party wallets. We receive confirmation that a payment succeeded plus the last four digits and card type. We never see or store your full card number.
Account and subscription details. If you create an account or start a subscription, the schedule, the products and the payment method held against it.
Correspondence. Emails and messages you send us, together with our replies.
Marketing preferences. Your email address and consent record if you subscribe to our emails.
Device and usage data. Cookies and similar technologies record pages viewed, referring site, browser, approximate location and IP address. See the cookie section below.

Why we use it, and our lawful basis

To fulfil your order — including delivery, returns, refunds and subscription renewals. Lawful basis: performance of a contract.
To answer your questions about a product label, an order or a subscription. Lawful basis: performance of a contract, or our legitimate interest in responding to enquiries.
To meet legal duties such as keeping tax and accounting records and complying with food supplement and consumer law. Lawful basis: legal obligation.
To prevent fraud and keep the store secure. Lawful basis: legitimate interests.
To send marketing emails, where you have asked us to. Lawful basis: consent, which you can withdraw at any time using the unsubscribe link in any email.
To measure how the store is used so we can improve it. Lawful basis: consent for non-essential cookies.

We do not sell your personal data, and we do not use it to make automated decisions that have a legal effect on you.

Health information

We do not ask you to tell us about health conditions, and you should not send us medical details in order to buy something. If you choose to mention a health matter when contacting us — for example to ask whether a formula interacts with a medicine — we use that message only to answer you, we do not add it to your customer record for marketing, and we delete the correspondence in line with the retention periods below. For anything clinical, please speak to your GP or pharmacist.

Who we share it with

We share data only with the service providers needed to run the store, and only for that purpose:

Shopify Inc. — our ecommerce platform, which hosts this store and processes checkout.
Payment providers — Shopify Payments and any wallet you select at checkout.
Subscription service — the app that creates and manages recurring orders.
Delivery partners — the carrier handling your parcel, which receives your name, address and contact details.
Email and analytics providers — for order notifications, marketing you have consented to, and store measurement.

We may also disclose information where the law requires it, or to establish or defend legal claims.

International transfers

Some of these providers operate outside the UK and the European Economic Area. Where data is transferred, it is protected by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, together with appropriate technical safeguards.

Cookies

Essential cookies keep your basket, session and security working; they cannot be switched off. Analytics and marketing cookies are only set if you accept them in the cookie banner. You can change or withdraw that choice at any time through the banner or your browser settings, and you can block or delete cookies in your browser without losing access to the store.

How long we keep it

Order and transaction records — six years after the end of the relevant financial year, as UK tax law requires.
Account and subscription records — while the account is open, then up to two years after your last order.
Correspondence — up to two years after the enquiry closes.
Marketing consent records — until you unsubscribe, then a suppression record so we do not contact you again.

Your rights

Under UK GDPR you have the right to be informed, and the right to ask us to give you a copy of your data, correct it, delete it, restrict how we use it, transfer it to another provider, or stop using it for our legitimate interests or for marketing. Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email hello@revahealth.co.uk. We reply within one month. We may ask you to confirm your identity first so that we do not disclose your data to someone else. There is no charge.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Security

The store runs over an encrypted connection. Checkout is handled on Shopify's PCI DSS certified infrastructure, and access to customer records is limited to the people who need it to fulfil orders and answer enquiries. No system can be guaranteed completely secure, so please tell us straight away if you think your account has been compromised.

Children

This store is intended for adults. Our products are not intended for children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this notice

If we change how we handle personal data, we will update this page and the date at the top. Material changes will be highlighted on the store.

Contact us

Email hello@revahealth.co.uk for any question about this notice or about the data we hold on you. Our postal address and other contact details are on the contact information page.