Privacy Notice
This staging page is a draft for launch preparation only. Shiftworker Nutrition is not yet trading. Do not publish as final legal wording until every [LAUNCH REQUIRED] field has been completed and reviewed.
1. Controller
Data controller legal name: [LAUNCH REQUIRED: DATA CONTROLLER LEGAL NAME]. Privacy contact: [LAUNCH REQUIRED: PRIVACY CONTACT EMAIL]. Business or registered address: [LAUNCH REQUIRED: BUSINESS OR REGISTERED ADDRESS].
2. Personal data we may process
- Account and identity details.
- Order, delivery and customer service information.
- Payment-related information processed through approved providers.
- Marketing preferences and consent records.
- Website technical data, cookie choices and analytics data where used.
3. Purposes and lawful bases
Draft lawful bases include contract, legal obligation, legitimate interests and consent where required. These must be mapped to the final launch systems, forms and providers.
4. Sharing personal data
Third-party service providers: [LAUNCH REQUIRED: THIRD PARTY SERVICE PROVIDERS]. Payment processors: [LAUNCH REQUIRED: PAYMENT PROCESSORS].
5. International data transfers
International data transfer details and safeguards: [LAUNCH REQUIRED: INTERNATIONAL DATA TRANSFER DETAILS].
6. Retention
Data retention periods: [LAUNCH REQUIRED: DATA RETENTION PERIODS].
7. Your rights
Individuals may have rights to access, correct, erase, restrict, object to processing, request portability and complain to the ICO. The final notice must include the confirmed contact route for privacy requests.
8. 2026 data protection changes
The final notice should be reviewed against the UK GDPR, Data Protection Act 2018, PECR and applicable 2026 UK data protection changes before publication.