For laboratory research use only. Not for human or veterinary use, diagnosis, treatment or any clinical application.
Body Pharm

Privacy Policy

Last updated: 20 September 2026

1. Who we are

This Privacy Policy explains how Body Pharm ("we", "us", "our"), the operator of bodypharm-uk.com (the "Site"), collects and uses your personal data. Our trading address is 128 City Road, London EC1V 2NX, United Kingdom; company registration details are available on request from support@bodypharm.co.uk.

We are the "data controller" for the personal data described in this policy — we decide how and why your data is processed, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our products are supplied strictly for research and analytical purposes only and are not for human or animal consumption. We do not knowingly collect health data or process orders for anyone under 18.

2. The data we collect

Account information. When you create an account: your name, email address, mobile number, date of birth (to verify you are 18 or over), your password (stored hashed — we cannot see it), and whether you have opted in to marketing.

Order and delivery information. Delivery name and UK postal address, order contents, order history and value, and communications you send us about an order.

Payment information. Payments are processed by our third-party payment provider, PayTree. Your card details are entered directly with PayTree and are not stored on our systems; we receive only limited confirmation data (such as whether a payment succeeded and a transaction reference) to fulfil your order.

Age verification and research-use declaration. Before your first purchase you complete a research-use declaration confirming you are 18 or over, that you are acquiring the products for laboratory research, and that they will not be administered to any human or animal. We retain a record of that declaration on your customer account — the statements you confirmed, the research setting you selected, the optional institution name and the date — so we can evidence that the declaration was made. Your date of birth is retained on your account for age verification. We do not ask for, and do not hold, any information about your health.

Analytics and cookies. We use Google Analytics 4 (GA4) to understand Site usage — device, browser, approximate location (from IP), pages viewed and referral source. See section 8.

Support communications. If you contact us by email (support@bodypharm.co.uk) or WhatsApp, we process the content of those messages and your contact identifier so we can respond and keep a record.

3. Lawful bases for processing

  • Performance of a contract — to create and manage your account, process and deliver orders, and provide order support.
  • Legal obligation — to verify you are 18+, keep accounting and tax records, and comply with consumer-protection law.
  • Legitimate interests — to run and secure the Site, understand aggregate usage, prevent fraud, and respond to enquiries.
  • Consent — for optional marketing and non-essential (analytics) cookies. You can withdraw consent at any time.

4. How we use your data

To create, verify and administer your account (including age verification); process, fulfil and deliver orders and manage returns; take payment via our provider; send service messages (email verification, order confirmations, dispatch/tracking); provide support; send marketing only where you have opted in; detect and prevent fraud and misuse; understand and improve Site performance; and comply with our legal obligations.

5. Marketing

We will only send marketing where you have chosen to receive it. You can opt out at any time via the unsubscribe link in any marketing email, your account preferences, or by emailing support@bodypharm.co.uk. Opting out does not stop essential service messages about your account or orders.

6. Who we share your data with

We do not sell your personal data. We share it only as needed with: our payment provider (PayTree); order fulfilment and Royal Mail for tracked UK delivery; our analytics provider (Google/GA4) where you consent; WhatsApp/Meta where you contact us there; IT, hosting and infrastructure providers acting under our instructions; and professional advisers or authorities where legally required. All processors acting on our behalf are bound by contract to protect your data.

7. Data retention

  • Account data — while your account is active; deleted or anonymised on closure, save for records we must keep.
  • Order and transaction records — retained to meet legal, accounting and tax obligations (generally around six years).
  • Eligibility answers — discarded once eligibility is granted; only the fact and date are retained.
  • Support communications — retained for a reasonable period, then deleted.
  • Analytics — per our GA4 and Google retention settings.

8. Cookies

Essential cookies keep you logged in, remember your basket and maintain security — these do not require consent. Analytics cookies (GA4) measure Site usage and are only set where you consent. You can manage or withdraw consent at any time and can block or delete cookies in your browser; blocking essential cookies may stop parts of the Site working.

9. International transfers

Some providers (e.g. Google and Meta/WhatsApp) may process data outside the UK. Where data is transferred outside the UK we ensure an appropriate safeguard is in place — such as UK adequacy regulations or the International Data Transfer Agreement (IDTA) / UK Addendum to the EU Standard Contractual Clauses — so your data receives equivalent protection.

10. Your rights

Under UK GDPR you have rights to access, rectification, erasure, restriction, portability, objection (including to direct marketing at any time), and to withdraw consent. To exercise any right, email support@bodypharm.co.uk. We may need to verify your identity and will respond within one month (extendable for complex requests). There is normally no charge.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk — though we would appreciate the chance to resolve it first.

11. Age restriction (18+)

The Site and our products are intended only for individuals aged 18 or over. We do not knowingly collect data from anyone under 18 and will delete such data if we learn we hold it.

12. Security

We use appropriate technical and organisational measures — encryption in transit, hashed passwords, and restricted access to personal data. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

13. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, where changes are significant, take reasonable steps to notify you.

14. Contact us

For any privacy question or request: support@bodypharm.co.uk.