Privacy policy

Privacy policy

  This policy explains what personal data Sigma
  Supps collects when you use sigmasuppsuk.com or
  buy from us, why we collect it, and what your
  rights are. Sigma Supps is a trading name of
  [Legal entity name], company number [company
  number], registered at [registered address]. We
  are the controller of your data under the UK
  GDPR and the Data Protection Act 2018.

  What we collect and why

  When you place an order: your name, email
  address, delivery and billing addresses, phone
  number if you give one, what you bought, and
  your payment details. Card and PayPal details
  are handled by Shopify's checkout and PayPal and
  never reach our systems. We use this to fulfil
  your order, take payment, arrange delivery, send
  order updates, handle returns, and keep the
  records the law requires us to keep. The legal
  basis is performing our contract with you, and
  our legal obligations.

  When you contact us: your name, email address,
  order number and whatever you write to us. We
  use it to reply and to keep a record of the
  conversation. The legal basis is our legitimate
  interest in providing customer service.

  When you browse: your device type, browser, IP
  address, pages viewed, and how you arrived at
  the site, collected through cookies and similar
  technology. We use it to make the site work, to
  keep it secure, and to understand how it is used
  so we can improve it. The legal basis is our
  legitimate interests, and consent where the law
  requires it for cookies.

  If you join our affiliate programme: the details
  you give when you sign up, your code and link,
  and the orders your code is used on, so we can
  track and pay your commission. This is processed
  under our contract with you.

  Marketing: we only send marketing email if you
  have opted in, and every message has an
  unsubscribe link. We do not sell your data and
  we do not share it for other companies'
  marketing.

  Cookies
  Shopify sets cookies needed for the site to
  work, such as keeping your cart and the checkout
  secure. GoAffPro sets a cookie for 30 days when
  you arrive through an affiliate link so the
  affiliate can be credited. We may use Google
  Analytics to measure site usage. Our Instagram
  strip is loaded through Instafeed. You can
  control cookies in your browser settings, but
  blocking essential cookies will stop the
  checkout working.

  Who we share data with
  Only the companies we need to run the shop:
  Shopify, which hosts the site, processes the
  checkout and stores order data; PayPal, if you
  pay with it; [courier] and, for orders outside
  the UK, their delivery partners and customs
  authorities, to deliver your order; GoAffPro,
  for affiliate tracking; Google, for fonts and
  analytics; and Meta through Instafeed, for the
  Instagram feed on our homepage. Each of these
  processes your data under its own privacy terms
  and, where they act for us, under a contract
  with us. We also share data where the law
  requires, for example with HMRC or to prevent
  fraud.

  Where your data goes
  Some of these providers store data outside the
  UK, including in the United States. Where that
  happens it is covered by the UK's international
  data transfer rules, including the UK Extension
  to the EU-US Data Privacy Framework or standard
  contractual clauses.

  How long we keep it
  Order records are kept for six years after the
  order, as tax law requires. Contact messages are
  kept for two years. Marketing consent is kept
  until you unsubscribe. Browsing data is kept for
  up to 26 months.

  Your rights
  You can ask us for a copy of the personal data
  we hold about you, ask us to correct it, ask us
  to delete it, object to how we use it, ask us to
  restrict its use, and ask us to send it to
  another provider. Where we rely on consent you
  can withdraw it at any time. To exercise any of
  these rights use the contact form at
  sigmasuppsuk.com/pages/contact. We respond
  within one month. If you are unhappy with how we
  have handled your data you can complain to the
  Information Commissioner's Office at ico.org.uk
  or on 0303 123 1113.

  Children
  Our site and products are for people aged 18 and
  over. We do not knowingly collect data from
  anyone under 18.

  Changes
  We will post any changes to this policy here.
  Last updated: 10 September 2026.