Privacy Policy – Carb Smart Living

Last updated: [ date]

This Privacy Policy explains how Carb Smart Living (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit our website, purchase products, use our services, or communicate with us (together referred to as the “Services”).

By using our website or providing your personal information, you agree to the practices described in this Privacy Policy.

We comply with UK General Data Protection Regulation (GDPR) , the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

https://www.gov.uk/data-protection

If you do not agree with this Policy, please stop using our website and services.


1. Changes to This Privacy Policy

We may update this Privacy Policy to reflect technical, legal, or operational changes. Updated versions will be posted on this page with a revised “Last updated” date.
Where required by law, we may notify you of significant changes.


2. Information We Collect

The information we collect depends on how you interact with Carb Smart Living.

a) Information You Provide Directly

This may include:

  • Contact details: name, address, telephone number, email

  • Order information: billing address, delivery address, items ordered, payment confirmation

  • Account details (if applicable): username, password

  • Customer support communications

  • Booking/consultation information where relevant

Providing this information is optional, but certain features cannot function without it (e.g., placing an order).


b) Information Collected Automatically (Cookies & Usage Data)

We use cookies and similar technologies to collect:

  • IP address

  • Browser type

  • Device information

  • Pages visited and time on site

  • Shopping behaviour (cart items, wishlists)

  • Referral websites

This helps us operate the website, improve performance, analyse usage, and deliver personalised content or advertising.

You can manage cookie preferences through your browser settings.
For details on Shopify’s cookies, see their cookie policy, as our store is hosted on Shopify Inc.


c) Information from Third Parties

We may receive information from:

  • Shopify: e-commerce and hosting provider

  • Payment processors: e.g., Stripe, PayPal

  • Marketing and analytics providers

  • Delivery and logistics companies

We treat third-party data according to this Privacy Policy.


3. How We Use Your Personal Information

We use your data for:

a) Fulfilling Contracts

  • Processing and delivering your orders

  • Managing payments

  • Providing customer support

  • Booking consultations

b) Legitimate Interests

  • Improving website performance

  • Fraud prevention and security

  • Service optimisation

c) Consent-based Processing

  • Email marketing

  • Newsletter subscriptions

  • Cookies requiring consent (per PECR)

d) Legal Obligations

  • Tax, accounting, and financial reporting

  • Responding to lawful requests by regulators or authorities

You can withdraw consent at any time.


4. Cookies

We use cookies to:

  • Operate the website

  • Improve speed, security, and functionality

  • Run analytics and understand user behaviour

  • Deliver personalised marketing

Most browsers accept cookies automatically, but you can opt out or manage preferences.

Disabling cookies may affect certain website features.


5. How We Share Your Personal Information

We may share your information only when necessary and lawful:

a) Service Providers

  • Shopify (hosting)

  • Payment processors

  • Delivery couriers

  • Marketing and analytics tools

  • IT and security providers

b) Legal Requirements

  • To comply with UK law, court orders, or regulatory obligations

c) Business Transfers

If we sell or restructure our business, your data may be transferred to the new operator.

d) With Your Consent

For example, if you post a review publicly.

We do not sell personal data for money.


6. User-Generated Content

Any information you post publicly (e.g., product reviews, comments) may be visible to others.
We are not responsible for the use of information you voluntarily make public.


7. Children’s Data

Our website and services are not intended for children, and we do not knowingly collect personal data from anyone under 16.
If you believe a child has provided data, contact us so we can delete it.


8. Security of Your Information

We follow industry-standard practices to protect your information.
However, no transmission method is completely secure, so send sensitive data only through secure channels.


9. Data Retention

We keep personal information only for as long as necessary to:

  • Provide our services

  • Fulfil our legal obligations

  • Resolve disputes

  • Maintain business records

When no longer needed, data is securely deleted or anonymised.


10. Your Rights Under UK GDPR

You have the following rights:

  • Right to access – to request a copy of your data

  • Right to rectify – to correct inaccurate information

  • Right to erasure – to request deletion (in certain cases)

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing or marketing

  • Right to withdraw consent

  • Rights relating to automated decision-making

To exercise your rights, contact us at:

📧 carbsmartliving@gmail.com

We respond within one month, as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk


11. International Transfers

Your data may be transferred outside the UK (e.g., Shopify servers).
Such transfers are protected by:

  • UK-approved adequacy regulations, or

  • Standard Contractual Clauses (SCCs)

These ensure your data remains protected.


12. Contact Us

For questions about this Privacy Policy or about how we use your personal information:

📧 carbsmartliving@gmail.com