Privacy policy

Last updated: 5 May 2026

Simple Science Supplements Ltd (“Simple Science”, “we”, “us”, or “our”) operates this website, store, and all related content, products, and services (the “Services”). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using the Services you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your personal information as described below. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

For the purposes of UK and EU data protection law, Simple Science Supplements Ltd is the data controller of your personal information.

Personal information we collect

When we use the term “personal information” we mean information that identifies or can reasonably be linked to you. It does not include anonymised or de-identified information. Depending on how you interact with the Services and where you live, we may collect or process the following categories of personal information, including inferences drawn from it:

Contact details — name, billing address, shipping address, phone number, and email address.
Financial information — payment card details, financial account information, transaction details, payment confirmation, and other payment-related data. Full card numbers are processed by our payment provider, not stored by us.
Account information — username, password, security questions, preferences, and settings.
Transaction information — items you view, add to your basket or wishlist, purchase, return, exchange, or cancel, and your past transactions.
Communications with us — the information you include in messages to us, for example when contacting customer support, leaving a product review, or engaging with us on social media.
Device and connection information — your device, browser, network connection, IP address, and other unique identifiers.
Usage information — how and when you interact with or navigate the Services.
Marketing preferences — your subscription status and preferences for marketing communications.

How we collect your personal information

We collect personal information from the following sources:

Directly from you — when you create an account, place an order, contact us, leave a review, or otherwise provide your personal information.
Automatically through the Services — from your device when you use our products or visit our websites, including through cookies and similar technologies (see Cookies and similar technologies below).
From our service providers — when we engage them to enable certain technology or when they collect or process personal information on our behalf.
From our partners and other third parties — for example marketing partners, fraud-prevention services, and analytics providers.

How we use your personal information

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

Providing, tailoring, and improving the Services. To perform our contract with you, process payments, fulfil and ship your orders, manage your account, handle returns and exchanges, enable reviews, remember your preferences, and create a personalised shopping experience including product recommendations.
Marketing and advertising. To send you marketing communications by email, SMS, or post (where you have consented or where otherwise permitted by law) and to show you relevant online advertisements on the Services and on third-party platforms based on your activity.
Security and fraud prevention. To authenticate your account, provide a secure shopping experience, detect and prevent fraudulent or illegal activity, and protect our business and our customers. You are responsible for keeping your account credentials safe.
Communicating with you. To provide customer support, respond to enquiries, and maintain our relationship with you.
Legal and regulatory compliance. To comply with applicable law and respond to valid legal process, to investigate or participate in legal proceedings, and to enforce our terms and policies.

The legal bases on which we rely under UK and EU GDPR are: performance of a contract with you, your consent (which you may withdraw at any time), our legitimate interests (such as running and improving our business and preventing fraud), and compliance with a legal obligation.

How we disclose your personal information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes, including:

To service providers and processors that perform services on our behalf, such as e-commerce hosting, payment processing, analytics, customer support, cloud storage, fulfilment and shipping, email and SMS delivery, and fraud prevention. These providers are contractually required to protect your personal information and may only use it for the purposes we instruct.
To business and marketing partners that help us advertise our products and measure the effectiveness of our marketing. Where required by law, this is done on the basis of your consent. You can manage your preferences via the cookie banner on our website and via the unsubscribe links in our emails.
At your direction or with your consent — for example, when you ask us to ship products to a third-party address, or when you use a social media widget or login integration.
Within our corporate group, including affiliates, where applicable.
In connection with a business transaction such as a merger, acquisition, financing, or insolvency.
To comply with legal obligations including responses to subpoenas, search warrants, court orders, and similar lawful requests; to enforce our terms; and to protect our rights, our customers, or the public.

Service providers and sub-processors

We use a third-party e-commerce platform provider to host and operate our online store. As a necessary part of providing the Services, certain personal information you submit to the Services is transmitted to and processed by this provider, including for order processing, payments, hosting, fraud prevention, and analytics. Our e-commerce platform provider is Shopify Inc. Information about how Shopify processes personal information, and the rights you may have in relation to that processing, is available at privacy.shopify.com/en.

We also engage a number of other service providers to operate our business, including for payment processing, shipping and fulfilment, email and SMS marketing, customer support, analytics, and advertising measurement. We require all service providers to handle your personal information in accordance with applicable data protection law.

Cookies and similar technologies

We use cookies, pixels, local storage, and similar technologies on our website. We use them in three broad categories:

Strictly necessary — required for the Services to function (for example, keeping you signed in, remembering items in your basket, processing payments, and maintaining security). These cannot be disabled.
Analytics and performance — help us understand how visitors use the website so we can improve it.
Marketing and advertising — used to deliver relevant advertising on the Services and on third-party platforms, and to measure the effectiveness of our marketing.

Where required by law (including in the UK and EEA), we set non-essential cookies only with your consent. You can manage or withdraw your consent at any time using the cookie preferences control on our website. You can also disable cookies through your browser settings, but doing so may affect the functionality of the Services.

Health-related information

Our products are food supplements, not medicines, and we do not require customers to disclose any medical, health, or dietary information in order to purchase them. From time to time you may choose to share information about your health, dietary preferences, or wellness goals with us — for example, in a customer support message, a product review, or a response to a survey. We treat any such information with care and use it only for the purpose for which you provided it (typically to respond to your enquiry). We do not use health-related information for advertising or profiling. You can ask us to delete any such information at any time using the contact details below.

Third-party websites and links

The Services may contain links to websites or platforms operated by third parties. If you follow these links you should review the third party’s own privacy and security policies. We are not responsible for the privacy or security practices of third-party sites, including the accuracy or reliability of their content. Information you share on public or semi-public venues, including third-party social platforms, may be visible to other users without restriction on its use. Our inclusion of a link does not imply endorsement of the linked content unless explicitly stated.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you are the parent or guardian of a child who you believe has provided us with personal information, please contact us using the details below and we will take steps to delete it. As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share personal information of individuals under 16 years of age within the meaning of applicable law.

Security and retention

We implement appropriate technical and organisational measures designed to protect your personal information from unauthorised access, use, alteration, or disclosure. However, no security measures are perfect, and information transmitted over the internet cannot be guaranteed to be completely secure. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

How long we retain your personal information depends on the purpose for which it was collected, including: maintaining your account, providing the Services, complying with legal and tax obligations, resolving disputes, and enforcing our agreements. When personal information is no longer required, we securely delete or anonymise it.

International transfers

We are based in the United Kingdom. Your personal information may be transferred to, stored in, or processed in countries outside the UK or the European Economic Area, including by our service providers. Where we transfer personal information out of the UK or EEA to a country that has not been formally recognised as providing an adequate level of data protection, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses, or the European Commission’s Standard Contractual Clauses, as relevant.

Your rights and choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may be subject to legal exceptions.

Right of access — to request a copy of the personal information we hold about you.
Right to rectification — to request that we correct inaccurate or incomplete personal information.
Right to erasure — to request that we delete personal information we hold about you.
Right to data portability — to receive a copy of certain personal information in a portable format and, where technically feasible, to request that we transfer it to another controller.
Right to restrict processing — to ask us to limit how we use your personal information in certain circumstances.
Right to object — to object to our processing of your personal information for direct marketing or where we rely on legitimate interests as our legal basis.
Right to withdraw consent — where we rely on your consent, to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Marketing preferences — to opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us. We may still send you non-marketing messages about your account or orders.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. Where permitted by law you may use an authorised agent, in which case we may require proof of authorisation. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

Complaints

If you have concerns about how we process your personal information, please contact us first using the details below so we can try to resolve the issue. If you remain dissatisfied, you have the right to lodge a complaint with your local data protection authority. In the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO) — ico.org.uk. In the EEA, you can find the responsible authority for your country on the European Data Protection Board’s website.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, our Services, or for other operational, legal, or regulatory reasons. When we make changes, we will update the “Last updated” date at the top of this page and, where required by law, provide additional notice. We encourage you to review this page periodically.

Contact us

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please contact us:

Email: help@simplesciencesupplements.com

Post:
Simple Science Supplements Ltd
Suite 8, Newton Hall
Town Street, Newton
Cambridge CB22 7ZE
United Kingdom

Company number: 14933468