Privacy Policy

Effective Date: 10/12/2025

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal data. We are committed to protecting your privacy and ensuring transparency in how we process your information.

2. Data Controller

Company Name: Xpablohealth
Address: Surbiton London UK
Email: blacpol@gmail.com
Phone Number: 07851292988

3. What Data Do We Collect?

We collect personal data in the following situations:

During account registration: first name, last name, email address, password
During checkout: first name, last name, delivery address, billing address, phone number, email address
During payment: credit card information (processed through secure payment gateways)
During communication: email correspondence, messages, reviews, and feedback
Automatically: IP address, browser type, operating system, time spent on site, cookies

4. Legal Basis for Processing

We process your data based on:

Contract: necessary to fulfil your order and deliver products
Legal obligation: compliance with tax and legal requirements
Legitimate interest: improving our services, fraud prevention, marketing
Your consent: marketing communications, analytics cookies (where required)

5. How Do We Use Your Data?

We use your data to:

Process and fulfil your orders
Communicate with you about your order (confirmation, delivery status)
Send invoices and receipts
Prevent fraud and abuse
Analyse and improve our services
Send promotional offers and marketing messages (if you consent)
Handle complaints and provide customer support
Meet legal and tax obligations

6. How Long Do We Store Your Data?

Account and order data: 6 years (VAT law requirement)
Marketing data: until you withdraw consent
Analytics cookies: up to 2 years (or according to settings)
Complaint data: 3 years
Login data: 90 days

Data will be deleted when no longer necessary, unless we are required to retain it by law.

7. Who Has Access to Your Data?

Your data may be shared with:

Service providers: courier companies (DPD, DHL, Royal Mail), payment gateways (Stripe, PayPal), hosting servers
Product suppliers: to fulfil your order
Public authorities: if required by law
Analytics companies: Google Analytics (anonymised data)

All third parties are bound by confidentiality agreements and must use your data only for the purposes we specify.

8. Your Rights

Under UK GDPR, you have the right to:

Access: request a copy of your data
Correction: correct inaccurate data
Deletion: request deletion of your data (“right to be forgotten”)
Restriction: restrict how your data is processed
Objection: object to processing of your data
Data portability: receive your data in CSV format
Withdraw consent: withdraw consent to processing at any time

To exercise these rights, contact us at blacpol@gmail.com

9. Data Security

We implement the following security measures:

SSL/TLS encryption across the entire website
Secure payment gateways (PCI DSS compliant)
Limited access to data (only employees who need it)
Regular security system updates
Secure passwords and two-factor authentication

However, no method of transmission over the Internet is 100% secure. If you have concerns, please contact us.

10. Cookies and Tracking Technologies

We use cookies for:

Essential: website functionality, session security
Preferences: remembering your settings
Analytics: understanding how you use our site (Google Analytics)
Marketing: personalising ads and content

You can manage cookie settings in your browser or through our cookie banner. Some cookies require your consent.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy policies. We recommend reading their policies before sharing any data with them.

12. International Data Transfers

Your data is stored in the UK. If we transfer data outside the UK, we implement appropriate safeguards in compliance with UK GDPR.

13. Children’s Protection

Our website is not directed at persons under 18 years of age. We do not knowingly collect data from children. If we become aware that we have collected data from a child, we will delete it immediately.

14. Changes to This Policy

We reserve the right to update this privacy policy. We will notify you of significant changes via email or on our website. Your continued use of the site means you accept any changes.

15. Contact Us

If you have questions about this privacy policy:

Email: blacpol@gmail.com
Address: Surbiton London UK
Phone: 07851292988

You can also file a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Last Updated: 10/12/2025

Cookies Policy

Effective Date: 10/12/2025

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, smartphone, tablet) when you visit a website. They help websites remember information about you and improve your browsing experience. Cookies are not programs and do not contain viruses.

2. Types of Cookies We Use

Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as:

User login and authentication
Shopping cart functionality
Payment processing
Security features
Site stability

You cannot disable essential cookies without affecting website functionality.

Performance & Analytics Cookies

These cookies help us understand how visitors use our website. They collect data about:

Pages visited
Time spent on site
Links clicked
Browser and device information
Traffic sources

We use Google Analytics for this purpose. Data is anonymised and used only for statistical analysis.

Preference Cookies

These cookies remember your choices and settings, such as:

Language preferences
Font size
Display preferences
Login details (if you choose “remember me”)

Marketing & Targeting Cookies

These cookies are used to:

Display personalised advertisements
Track your activity across multiple websites
Create user profiles for marketing purposes
Measure campaign effectiveness
Deliver content relevant to your interests

Third-party cookies may be set by partners such as Google Ads, Facebook, and other advertising networks.

3. Cookie Management

How to Control Cookies

You can control and delete cookies through your browser settings:

Google Chrome: Settings → Privacy and security → Delete browsing data → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Privacy, search, and services → Clear browsing data

Opt-Out of Analytics

You can opt out of Google Analytics tracking by:

Installing the Google Analytics Opt-out Browser Add-on
Or adjusting your tracking preferences in your browser

Disabling Cookies

Most browsers allow you to refuse cookies or alert you when a cookie is being sent. However, disabling cookies may affect website functionality and your user experience.

4. Specific Cookies We Use

Cookie Name	Type	Purpose	Duration	Provider
PHPSESSID	Essential	Session management	Session	Our Server
cart_items	Essential	Shopping cart	30 days	Our Server
user_login	Essential	User authentication	6 months	Our Server
_ga	Analytics	Google Analytics	2 years	Google
_gid	Analytics	Google Analytics	1 day	Google
fbp	Marketing	Facebook tracking	3 months	Facebook
_gac	Marketing	Google Ads	3 months	Google

Note: This table is an example. Please update with your actual cookies.

5. Third-Party Cookies

We work with third parties who may set cookies on your device:

Google Analytics: For website traffic analysis
Google Ads: For advertising and remarketing
Facebook Pixel: For social media advertising
Payment Providers: Stripe, PayPal for secure transactions
Email Marketing: For tracking email campaigns

These companies have their own privacy policies. We recommend reviewing them:

Google: www.policies.google.com
Facebook: www.facebook.com/policies
Stripe: www.stripe.com/privacy
PayPal: www.paypal.com/webapps/mpp/ua/privacy-full

6. Cookie Consent

When you first visit our website, a banner will appear asking for your consent to use non-essential cookies. You can:

Accept All: Allow all cookies including marketing and analytics
Reject: Refuse non-essential cookies (only essential cookies will be used)
Preferences: Choose which types of cookies you allow
Save Preferences: Your choice will be remembered

You can change your cookie preferences at any time by:

Clicking the cookie preferences link in the website footer
Clearing your browser cookies and revisiting the site

7. Cookie Retention

Essential cookies: Deleted when you close your browser or after the session ends
Preference cookies: Retained for up to 1 year
Analytics cookies: Retained for up to 2 years
Marketing cookies: Retained for up to 90 days to 3 years depending on provider

8. Children’s Privacy

Our website is not intended for children under 13. We do not knowingly collect cookies from children. If a child has accepted cookies without parental consent, parents should contact us to have them removed.

9. Legal Basis

We use cookies based on:

Consent: You have consented to non-essential cookies
Legitimate Interest: We have a legitimate interest in improving our website
Legal Obligation: We comply with UK GDPR requirements

10. Your Rights

Under UK GDPR, you have the right to:

Know what cookies are being used
Withdraw consent to cookies at any time
Request deletion of cookie data
Access information about how your data is used

To exercise these rights, contact us at [INSERT EMAIL].

11. Cookie Policy Changes

We may update this policy to reflect changes in technology or legal requirements. Any material changes will be communicated via email or on our website.

12. Contact Us

If you have questions about our use of cookies:

Email: blacpol@gmail.com
Address: Surbiton
Phone: 07851292988

For complaints about cookies or privacy, you can also contact: Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Phone: 0303 123 1113

Last Updated: 10/12/2025

Suggested text: Our website address is: https://xpablohealth.co.uk.