Privacy policy

Last updated 18 August 2026

What we collect, why, and how to make us stop. We do not sell your data to anyone.

We are the data controller for the personal data described here. For anything to do with your data, write to info@thriiv.co.uk.

What we collect

• Order details: name, delivery and billing address, email, phone if you give it, what you ordered, and your subscription status.
• Payment details: handled by our payment providers. We can see the last four digits and card type; we never see or store the full card number.
• Messages: anything you email us, and our replies.
• Marketing preferences: whether you have opted in, and what you have opened or clicked.
• Site usage: pages viewed, device and browser, and approximate location from your IP address, through cookies and similar technologies.

We do not ask for health information. If you tell us about an allergy or a dietary condition in a message, we use it only to answer you and we do not add it to a marketing profile.

Why we use it, and our lawful basis

To take and deliver your order, and to run your subscription

Performance of our contract with you.

To answer questions, handle complaints, refunds and recalls

Performance of our contract, and our legitimate interest in running the business properly.

To keep accounting, tax and food-safety records

Compliance with our legal obligations.

To send marketing emails

Your consent, or the soft opt-in where you have bought from us. Every email has an unsubscribe link and we act on it immediately.

To measure and improve the site

Your consent, given through the cookie banner.

To prevent fraud and secure the site

Our legitimate interest in protecting the business and our customers.

Who we share it with

Only the suppliers who make the shop work, and only what each needs:

• Shopify: our store, hosting, checkout and order emails. Shopify also gives us aggregate sales and traffic reporting.
• Shopify Payments and Shop Pay: to take card payments and, if you choose it, to speed up checkout.
• Our delivery courier: your name, address and phone number, so the parcel can reach you.
• Google Analytics: to measure how the site is used. This only runs if you accept analytics cookies.
• Our accountants and professional advisers, and any authority we are legally required to tell.

Some of these are based outside the UK. Where data is transferred abroad we rely on UK adequacy regulations or on the International Data Transfer Agreement, so your data keeps equivalent protection.

How long we keep it

Order and transaction records for seven years, because tax law requires it. Marketing data until you unsubscribe, and then a minimal record so we do not email you again by mistake. Emails to support for two years. Cookie data for the periods in the cookie section below.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it ported elsewhere. You can withdraw consent at any time. Email info@thriiv.co.uk and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.

Cookies

Cookies that are strictly necessary (keeping you logged in, remembering your basket, security) are set automatically, because the site cannot work without them.

Everything else, including analytics, is only set if you agree through the cookie banner you see on your first visit. Declining is one click, exactly like accepting, and you can change your mind at any time from the cookie preferences in that banner.

Children

The shop is for adults. We do not knowingly collect data from anyone under 16. If you think a child has given us their details, tell us and we will delete them.

Changes

If we change this policy we will update the date at the top, and we will email you if the change is significant.