Last updated: 26 November 2025
Controller: Capsure Supplements Ltd, 124 City Road, London, EC1V 2NX, United Kingdom
Contact: hello@capsure.uk

1) Who we are

1.1 This Privacy Policy explains how Capsure Supplements Ltd (“we”, “us”, “our”) collects and processes your personal data when you visit or purchase from capsure.uk (the “Website”).

1.2 We are the data controller for personal data processed via the Website. Where we use third parties (e.g., payment processors), they act as our data processors or independent controllers, as stated below.

1.3 The Website may contain links to third-party websites or services. Those websites have their own privacy and cookies policies, and we are not responsible for their practices. We recommend that you read their policies before providing any personal data.

2) What data we collect

2.1 Identity & Contact Data: name, email, phone, billing and delivery addresses.

2.2 Order & Transaction Data: products purchased, order history, payment status, refunds, chargebacks.

2.3 Payment Data: processed securely by WooPayments (powered by Stripe) (card type, last 4 digits, token/identifier). We do not store full card numbers or CVC.

2.4 Account Data (optional): username, hashed password, preferences, wishlists.

2.5 Communications: messages sent via forms/email, support notes, marketing preferences.

2.6 Technical & Usage Data: IP address, device and browser type, operating system, pages visited, time and duration of visits, referral/source (for example search engine, advert or referring website), approximate location, and cookie/online identifiers generated by our analytics and advertising partners (for example Google Analytics 4, Google Ads and Microsoft Advertising) where you have consented to the relevant cookies (see Clause 9 and our Cookies Policy).

2.7 Marketing & Cookie Preferences: opt-in status and consent logs (for example, when you gave or withdrew consent for marketing emails or non-essential cookies).

3) How we use your data (purposes & lawful bases)

We process personal data only where we have a lawful basis under UK GDPR:

To take and fulfil your order (create/confirm orders, deliver goods, handle returns and refunds) – Contractual necessity.
To process payments via WooPayments (powered by Stripe) and prevent fraud – Contractual necessity and Legitimate interests; some checks may be Legal obligation.
Customer service (respond to queries, manage complaints, warranty/recall communications) – Contractual necessity and Legitimate interests.
Account features (if you register) – Contractual necessity.
Service improvement & analytics (for example site diagnostics, performance and aggregate statistics about how visitors use the Website). For essential diagnostics based on server logs we rely on Legitimate interests. For non-essential analytics that use cookies and similar technologies (such as Google Analytics 4) we rely on your Consent.
Advertising and campaign performance (measuring and optimising our online advertising on platforms such as Google and Microsoft/Bing, including Google Ads, Google Merchant Centre and Microsoft Advertising/Bing Ads). We rely on your Consent for advertising cookies and similar technologies.
Marketing (emails about products/offers) – Consent (you can withdraw at any time).
Legal and compliance (tax/VAT records, product safety, regulatory requests, defending legal claims) – Legal obligation and Legitimate interests.

4.1 Payment processor: WooPayments (powered by Stripe) to authorise and settle card payments, prevent and detect fraud, and manage refunds/chargebacks.

4.2 Operational providers: web hosting/CDN and ecommerce/checkout platform, cookie-consent and preference-management provider (currently CookieYes), email/SMS and marketing tools, anti-spam/security tools, couriers and postal operators (delivery labels and tracking), and IT/maintenance suppliers.

4.3 Professional advisers: accountants, auditors, legal counsel (as needed).

4.4 Authorities: HMRC, regulators, law enforcement and similar bodies where required by law or where we have a good-faith belief that disclosure is reasonably necessary.

4.5 Business transfers: in a reorganisation/merger or asset sale, data may transfer in accordance with data protection laws and subject to appropriate safeguards.

4.6 Analytics and advertising partners: we use services provided by Google (including Google Analytics 4, Google Ads, Google Merchant Centre and Google Tag Manager) and Microsoft Advertising/Bing Ads to measure visits and conversions from our ads and to understand how visitors interact with the Website. When their tags or cookies are active, these partners may receive Technical & Usage Data such as your IP address, device and browser information and cookie identifiers. In many cases they act as independent controllers of this data – for more information, please see their own privacy policies.

We require processors to provide appropriate technical and organisational measures and to process data only on our instructions.

5) International transfers

5.1 Some providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards, such as:

UK International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses; and/or
An adequacy regulation for the destination country; and/or
Participation in an approved data-transfer framework (where applicable).

5.2 Details of specific safeguards can be provided on request.

5.3 This may include our analytics and advertising providers (such as Google and Microsoft/Bing), which may store or access data from servers located outside the UK.

6) Retention periods

6.1 We keep personal data only as long as necessary for the purposes set out above:

Orders & tax records: typically 6 years after the end of the financial year to which the records relate.
Customer service correspondence: up to 3 years after resolution (longer if needed for legal claims).
Accounts: for as long as your account remains active; if closed, we delete or anonymise data subject to legal retention requirements.
Marketing: until you withdraw consent or your address bounces/inactivates, then minimised for suppression so we do not contact you again.
Cookies/analytics: per cookie lifespan—see Clause 9, our Cookies Policy and your consent settings.

7) Your rights

Access your personal data;
Rectify inaccurate or incomplete data;
Erase data (“right to be forgotten”) where applicable;
Restrict processing in certain cases;
Object to processing based on legitimate interests or direct marketing;
Data portability for data you provided to us under consent or contract;
Withdraw consent at any time (for example, for marketing emails or analytics/advertising cookies);
Complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data (www.ico.org.uk).

Under UK GDPR you have the right to:

To exercise rights, email hello@capsure.uk. We may need to verify your identity. We aim to respond within one month, or inform you if we need more time for complex requests.

8) Security

8.1 We use appropriate technical and organisational measures to protect personal data, including TLS encryption, access controls, least-privilege principles, and secure password hashing.

8.2 Payment data is handled by WooPayments (powered by Stripe), a PCI DSS Level 1 certified provider.

9) Cookies & similar technologies

9.1 We use necessary cookies for the basic operation of the Website, such as keeping items in your basket, enabling secure checkout, preventing fraud (for example Stripe cookies), and remembering your cookie choices (for example the CookieYes consent cookie). These cookies are required for the service and do not require your consent.

9.2 Where you consent, we also use analytics cookies (for example from Google Analytics 4) to understand how visitors use the Website, and advertising cookies (for example from Google Ads/Google Merchant Centre and Microsoft Advertising/Bing Ads, including tags loaded via Google Tag Manager) to measure and improve the effectiveness of our online advertising. These technologies involve the collection of Technical & Usage Data described in Clause 2.6, including online identifiers linked to your browser or device.

9.3 You can choose which categories of cookies you accept via our cookie banner and the “Customise Consent Preferences” panel powered by CookieYes, and you can also use your browser settings to block or delete cookies. Please be aware that blocking necessary cookies may mean the Website (including the shopping basket and checkout) will not function correctly.

9.4 For more detailed information about the types of cookies we use, their purposes and lifespans, and the third-party providers involved, please see our separate Cookies Policy.

10) Marketing communications

10.1 We send marketing only with your opt-in consent (or as otherwise permitted by law). This may include information about products, offers, news and promotions.

10.2 You can unsubscribe at any time using the link in our emails or by contacting us. We keep a minimal suppression record to respect your choice and avoid sending you further marketing.

11) Children

11.1 Our Website is not intended for children under 16, and we do not knowingly collect data from children. If you believe a child has provided data, please contact us so that we can delete it.

12) Platforms & processors

12.1 The Website may operate on an ecommerce platform and uses third-party services (e.g., hosting, checkout, payment processing). Regardless of platform, this Policy applies to our processing of your data.

12.2 Current payment processing is via WooPayments (powered by Stripe). If we change providers, we will update this Policy and/or notify you where appropriate.

13) Changes to this Policy

13.1 We may update this Policy from time to time. The latest version will always appear on this page with the “Last updated” date. Where changes are material, we will take additional steps to inform you (for example by email or a notice on the Website).

14) Contact us

If you have any questions about this Policy or how we handle your data, please contact:

Capsure Supplements Ltd
124 City Road, London, EC1V 2NX, United Kingdom
Email: hello@capsure.uk