Legal

Privacy Policy

Last updated: 21 July 2026

Thornton Brook Wellness Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share your personal information when you visit muscleszywipeiu.world (the "Website") or purchase our products.

We are the data controller for personal data collected through this Website. We process your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and where applicable, the EU General Data Protection Regulation (Regulation (EU) 2016/679).

1. Who We Are

Thornton Brook Wellness Ltd
14 Thornton Mews, London, W2 4QR, United Kingdom
Company No.: 12847631 | VAT: GB347892015
Email: info@muscleszywipeiu.world
Telephone: +44 20 7946 0321

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: first name, last name.
  • Contact data: email address, telephone number, delivery address.
  • Transaction data: details of products ordered and payment method (we do not store full card details - payment processing is handled by third-party providers).
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, device identifiers, and other technology on the devices you use to access the Website.
  • Usage data: information about how you use our Website, products and services.
  • Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
  • Cookie data: please see our Cookie Policy for full details.

We do not collect any special categories of personal data (including data about health conditions, racial or ethnic origin, religious beliefs, or biometric data) through this Website.

3. How We Collect Your Personal Data

We collect personal data through:

  • Direct interactions: when you place an order, fill in a contact form, or correspond with us by email or telephone.
  • Automated technologies: as you interact with our Website, we may automatically collect technical and usage data. We collect this data using cookies, server logs and other similar technologies. Please see our Cookie Policy.
  • Third parties: analytics providers (such as Google Analytics), advertising networks, and payment processors.

4. How We Use Your Personal Data

We use your personal data only where we have a lawful basis to do so. The lawful bases we rely on are:

  • Performance of a contract: to process and fulfil your order, arrange delivery, and manage returns and refunds.
  • Compliance with a legal obligation: to comply with applicable laws including consumer protection, tax, and accounting obligations.
  • Legitimate interests: to operate and improve our Website, prevent fraud, administer our business, and send service-related communications. We have carried out a legitimate interests assessment and concluded that our legitimate interests are not overridden by your data protection rights in these cases.
  • Consent: to send you marketing communications where you have opted in; and to place non-essential cookies on your device where you have given consent through our cookie banner.

5. Cookies and Google Consent Mode v2

Our Website implements Google Consent Mode v2. By default, all non-essential cookies and advertising data signals (including ad_storage, ad_user_data, and ad_personalization) are set to denied until you actively accept via our cookie banner. Analytics storage is similarly denied by default.

For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

6. Sharing Your Personal Data

We may share your personal data with:

  • Payment processors (e.g., Stripe, PayPal, Klarna) to process your order payment securely.
  • Logistics and delivery providers to arrange dispatch and delivery of your order.
  • IT and system administration services including web hosting providers.
  • Analytics and advertising providers (including Google LLC) where you have consented to analytics or advertising cookies.
  • Professional advisers including lawyers, accountants, and auditors.
  • Regulatory authorities and law enforcement where required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow third-party service providers to use your personal data for their own purposes.

7. International Transfers

Some of our third-party service providers are based outside the UK or the European Economic Area (EEA). Where we transfer personal data to countries that do not provide an equivalent level of data protection, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office or the European Commission, or reliance on an adequacy decision.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general:

  • Order and transaction data: retained for 7 years for tax and accounting purposes.
  • Contact enquiry data: retained for 3 years from the date of last contact.
  • Cookie consent records: retained for 13 months.
  • Marketing preferences: retained until you withdraw consent or object.

9. Your Legal Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access - to request a copy of the personal data we hold about you.
  • Right to rectification - to request correction of inaccurate or incomplete data.
  • Right to erasure - to request deletion of your personal data in certain circumstances.
  • Right to restriction of processing - to request that we restrict processing of your personal data in certain circumstances.
  • Right to data portability - to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object - to object to processing based on legitimate interests or for direct marketing purposes.
  • Rights in relation to automated decision-making - we do not make decisions about you solely by automated means that produce legal or similarly significant effects.
  • Right to withdraw consent - where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@muscleszywipeiu.world. We will respond within one calendar month.

10. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the United Kingdom:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

11. Third-Party Links

Our Website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the Website after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or our data practices, please contact:

Thornton Brook Wellness Ltd
14 Thornton Mews, London, W2 4QR, United Kingdom
Email: info@muscleszywipeiu.world
Telephone: +44 20 7946 0321