Version 1.0 | Effective: 16/03/2026 | Last reviewed: March 2026
Serenity Supplements Ltd is registered in England and Wales as a private limited company. We are the data controller for personal information collected through our website, email communications, and social media channels.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Sending our email newsletter and promotional content | Name, email address, engagement data | Consent (Art. 6(1)(a)) + PECR consent. Withdrawable any time. |
| Improving our email campaigns | Email engagement data (opens, clicks) | Legitimate interests (Art. 6(1)(f)) — sending relevant content. |
| Amazon Associates affiliate activity | Aggregate reporting only — no personal data stored by us | Legitimate interests (Art. 6(1)(f)) — operating our business. |
| Website and funnel analytics | Cookie and usage data | Consent (PECR) for non-essential cookies; legitimate interests for essential cookies. |
| Responding to enquiries and complaints | Name, email, message content | Legitimate interests (Art. 6(1)(f)). |
| Complying with legal obligations | Any data required by law | Legal obligation (Art. 6(1)(c)). |
We do not sell your personal data. We share it only with the following service providers who act as our data processors:
We may also disclose your data where required by law, a court order, or a regulatory authority including the ICO.
Some service providers (Kit.com, Amazon) are based in the United States. Under the Data (Use and Access) Act 2025, transfers to third countries are permitted where protection is not materially lower than UK standards.
Where we transfer data to the US, we rely on the UK International Data Transfer Agreement (IDTA) or equivalent Standard Contractual Clauses agreed with each processor. Systeme.io is based in France and is covered by the UK-EU adequacy decision.
You can request a copy of the safeguards in place by contacting us using the details in Section 1.
| Data | Retention period | Reason |
|---|---|---|
| Email subscriber records (name, email) | While subscribed, plus 12 months after unsubscribe | Suppression list — prevent re-addition without fresh consent. |
| Email engagement data (opens, clicks) | 24 months from last engagement | List hygiene and inactive subscriber management. |
| Enquiry and contact data | 12 months from last contact | In case of follow-up or dispute. |
| Website and funnel analytics cookie data | 12 to 24 months (set by third-party tools) | Traffic and conversion analysis. |
| Affiliate reporting data (aggregated only) | 6 years | UK tax and accounting obligations. |
Under UK GDPR and the Data (Use and Access) Act 2025, you have the following rights:
Request a copy of the personal data we hold about you. We respond within one calendar month.
Ask us to correct inaccurate or incomplete personal data we hold about you.
Ask us to delete your personal data where there is no overriding reason to retain it.
Ask us to pause processing your data while a complaint or correction is resolved.
Request your data in a structured, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests. We will stop unless we can demonstrate compelling grounds.
Withdraw email marketing consent at any time via the unsubscribe link in any email or by contacting us directly.
Lodge a complaint with the ICO if you are unhappy with how we handle your data. See Section 8.
To exercise any right, contact us using the details in Section 1. We respond within one calendar month. There is no charge.
Our funnel pages hosted on Systeme.io use cookies — small text files placed on your device.
Required for the page to function correctly. Do not require consent under updated PECR and DUAA rules, but can be disabled in your browser settings.
Used to understand how visitors use our pages. Under the DUAA, analytics cookies may be used without explicit consent provided you can opt out. Contact us to opt out.
TikTok and Meta may set cookies if you have previously visited those platforms. These are subject to their own cookie policies.
In the event of a personal data breach likely to risk your rights and freedoms, we will notify the ICO within 72 hours and notify affected individuals without undue delay where required.
We will only send you marketing emails if you have explicitly opted in to receive them, as required by PECR. Unsubscribe at any time via the link at the bottom of any email or by emailing us directly. We retain your email on a suppression list for 12 months to prevent accidental re-addition.
Our emails and social media content contain affiliate links to Amazon and other third-party websites. Once you leave our communications and visit those sites, this privacy policy no longer applies. Serenity Supplements Ltd is a participant in the Amazon Associates Programme. When you click an affiliate link and make a qualifying purchase, we may earn a commission at no extra cost to you.
We may update this policy from time to time. We will update the effective date at the top of this page and, where changes are material, notify active email subscribers. The current version will always be available at this URL.
Serenity Supplements Ltd
28 Woodrush Crescent, Locks Heath, Southampton, SO31 6UP
Company Registration: 16214868
ICO Registration: CSN7672223
Email: customercare@serenity-supplements.com