Last updated: [ date]
This Privacy Policy explains how Carb Smart Living (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit our website, purchase products, use our services, or communicate with us (together referred to as the “Services”).
By using our website or providing your personal information, you agree to the practices described in this Privacy Policy.
We comply with UK General Data Protection Regulation (GDPR) , the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
https://www.gov.uk/data-protection
If you do not agree with this Policy, please stop using our website and services.
1. Changes to This Privacy Policy
We may update this Privacy Policy to reflect technical, legal, or operational changes. Updated versions will be posted on this page with a revised “Last updated” date.
Where required by law, we may notify you of significant changes.2. Information We Collect
The information we collect depends on how you interact with Carb Smart Living.
a) Information You Provide Directly
This may include:
Contact details: name, address, telephone number, email
Order information: billing address, delivery address, items ordered, payment confirmation
Account details (if applicable): username, password
Customer support communications
Booking/consultation information where relevant
Providing this information is optional, but certain features cannot function without it (e.g., placing an order).
b) Information Collected Automatically (Cookies & Usage Data)
We use cookies and similar technologies to collect:
IP address
Browser type
Device information
Pages visited and time on site
Shopping behaviour (cart items, wishlists)
Referral websites
This helps us operate the website, improve performance, analyse usage, and deliver personalised content or advertising.
You can manage cookie preferences through your browser settings.
For details on Shopify’s cookies, see their cookie policy, as our store is hosted on Shopify Inc.c) Information from Third Parties
We may receive information from:
Shopify: e-commerce and hosting provider
Payment processors: e.g., Stripe, PayPal
Marketing and analytics providers
Delivery and logistics companies
We treat third-party data according to this Privacy Policy.
3. How We Use Your Personal Information
We use your data for:
a) Fulfilling Contracts
Processing and delivering your orders
Managing payments
Providing customer support
Booking consultations
b) Legitimate Interests
Improving website performance
Fraud prevention and security
Service optimisation
c) Consent-based Processing
Email marketing
Newsletter subscriptions
Cookies requiring consent (per PECR)
d) Legal Obligations
Tax, accounting, and financial reporting
Responding to lawful requests by regulators or authorities
You can withdraw consent at any time.
4. Cookies
We use cookies to:
Operate the website
Improve speed, security, and functionality
Run analytics and understand user behaviour
Deliver personalised marketing
Most browsers accept cookies automatically, but you can opt out or manage preferences.
Disabling cookies may affect certain website features.
5. How We Share Your Personal Information
We may share your information only when necessary and lawful:
a) Service Providers
Shopify (hosting)
Payment processors
Delivery couriers
Marketing and analytics tools
IT and security providers
b) Legal Requirements
To comply with UK law, court orders, or regulatory obligations
c) Business Transfers
If we sell or restructure our business, your data may be transferred to the new operator.
d) With Your Consent
For example, if you post a review publicly.
We do not sell personal data for money.
6. User-Generated Content
Any information you post publicly (e.g., product reviews, comments) may be visible to others.
We are not responsible for the use of information you voluntarily make public.7. Children’s Data
Our website and services are not intended for children, and we do not knowingly collect personal data from anyone under 16.
If you believe a child has provided data, contact us so we can delete it.8. Security of Your Information
We follow industry-standard practices to protect your information.
However, no transmission method is completely secure, so send sensitive data only through secure channels.9. Data Retention
We keep personal information only for as long as necessary to:
Provide our services
Fulfil our legal obligations
Resolve disputes
Maintain business records
When no longer needed, data is securely deleted or anonymised.
10. Your Rights Under UK GDPR
You have the following rights:
Right to access – to request a copy of your data
Right to rectify – to correct inaccurate information
Right to erasure – to request deletion (in certain cases)
Right to restrict processing
Right to data portability
Right to object to processing or marketing
Right to withdraw consent
Rights relating to automated decision-making
To exercise your rights, contact us at:
We respond within one month, as required by UK GDPR.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk11. International Transfers
Your data may be transferred outside the UK (e.g., Shopify servers).
Such transfers are protected by:
UK-approved adequacy regulations, or
Standard Contractual Clauses (SCCs)
These ensure your data remains protected.
12. Contact Us
For questions about this Privacy Policy or about how we use your personal information: