Privacy policy

Data Protection UK GDPR Fully compliant with UK GDPR and the Data Protection Act 2018
Your Data Never sold We do not sell your personal data to any third party, ever
Response Time 30 days Maximum response time for all data requests under UK GDPR

Who We Are

Elysium Supplements is a UK-based wellness brand operating at elysium-supplements.com. We are committed to protecting your personal data in full accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what we collect, why we collect it, and how it is handled.

What We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Category
What This Includes
Identity
Your name, email address, billing and shipping address, and phone number where provided
Transaction
Order history and payment details, processed securely via Shopify's encrypted infrastructure
Technical
IP address, browser type, cookies, and browsing behaviour on our site
Marketing
Your consent status and communication preferences

How We Use Your Data

We process your personal data only where we have a lawful basis to do so:

Lawful Basis
Purpose
Contract
To process your orders, manage returns, and provide customer support
Legitimate
To improve our site experience, detect and prevent fraud, and send essential service communications
Consent
To send marketing emails when you have opted in — you may withdraw this consent at any time
Legal
To comply with HMRC, accounting, and applicable regulatory requirements

Third Parties

Our Commitment We do not sell your personal data. We share it only with trusted service providers who support the operation of our business — including Shopify (e-commerce platform), shipping carriers, email platforms, and analytics tools. All third parties are contractually bound to UK GDPR standards and may not use your data for any other purpose.

Data Retention

Data Type
Retention Period
Orders
7 years, as required by HMRC
Account
Duration of your account, plus 2 years following last activity
Marketing
Until you unsubscribe or withdraw consent

Your Rights Under UK GDPR

You have the following rights regarding your personal data. To exercise any of them, contact us at hello@elysium-supplements.com.

Right
What It Means
Access
Request a copy of the personal data we hold about you
Correction
Ask us to correct any inaccurate or incomplete data
Deletion
Request erasure of your data where there is no lawful reason for us to continue processing it
Restriction
Ask us to suspend processing of your data in certain circumstances
Portability
Receive your personal data in a structured, machine-readable format
Object
Object to processing based on legitimate interests or for direct marketing purposes

If you have concerns about how your data is handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Our site uses cookies to support functionality, improve your experience, and analyse site performance. You can manage cookie preferences through your browser settings at any time.

Contact

Data Requests We respond to all data requests within 30 days. For any data requests or privacy enquiries, contact us at hello@elysium-supplements.com in accordance with UK GDPR requirements.