Privacy Policy

Last updated: 19th November 2025

At YouNutri, your privacy matters to us.
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit or make a purchase from our Shopify-powered website (the “Website”).

We are committed to safeguarding your personal information and respecting your privacy rights under UK law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Who We Are

Maxxi Retail Ltd, trading as, YouNutri, “YouNutri”, “we”, “us” or “our” refers to:

YouNutri
Registered in England and Wales under company number  12920549
Registered office: 137 Keppoch Street, Cardiff, UK, CF24 3JU
Email: help@younutri.com

We are the “data controller” for the purposes of UK data protection law, meaning we determine how and why your personal data is processed.

Our store is hosted on Shopify, which acts as our “data processor” in certain circumstances. Shopify provides us with the e-commerce platform that allows us to sell our products to you.
Shopify’s Privacy Policy can be found here: https://www.shopify.com/legal/privacy

We are registered with the UK Information Commissioner’s Office (ICO) under registration number ZA926231. 

We have appointed a Data Protection Lead responsible for overseeing privacy matters. You can contact them at help@younutri.co.uk

2. What Personal Data We Collect

When you visit our Website, we collect certain information about you. The data we collect depends on how you interact with us.

(a) Information you provide directly

We may collect:

·       Identity details: name, title, date of birth (if provided)

·       Contact details: billing/delivery address, email address, phone number

·       Order details: products purchased, payment method (Shopify does not share your full card number with us)

·       Account details: login details, password (encrypted)

·       Marketing preferences: your communication and consent choices

·       Customer support information: any messages or enquiries you send to us

(b) Information collected automatically

When you browse our Website, we automatically collect certain technical information:

·       IP address

·       Browser type, operating system, and device information

·       Time zone and language settings

·       Pages visited and time spent on each

·       Referring website or ad link

This helps us understand website performance and improve your experience.

(c) Information from cookies and similar technologies

We use cookies and tracking technologies for website functionality, analytics, and marketing purposes.
See our Cookie Policy for more details on how cookies and tracking technologies operate on our site.

(d) Information from third parties

We may receive information from:

·       Shopify (for order management and analytics)

·       Payment processors (for fraud prevention and transaction validation)

·       Marketing platforms (e.g., Google, Meta, TikTok — where you have consented)

·       Delivery partners (to fulfil your orders)

3. How We Use Your Personal Data

We process your personal data for the following purposes and lawful bases under UK GDPR:

Purpose

Legal Basis

To process and fulfil your order, including delivery and returns

Performance of a contract

To manage your account and maintain records

Legitimate interests / Contract

To respond to customer enquiries or product questions

Legitimate interests

To communicate with you (order updates, customer support)

Performance of a contract

To send marketing emails or offers (where you’ve opted in)

Consent

To improve our website, services and customer experience

Legitimate interests

To detect, prevent and report fraud or security issues

Legal obligation / Legitimate interests

To comply with tax, accounting or legal requirements

Legal obligation
To respond to customer enquiries or product questions Legitimate interests

 

We do not sell or rent your personal data to third parties.


4. How Shopify Processes Your Data

Our store is hosted by Shopify Inc. or its affiliates (Shopify International Ltd. for UK users).

Your data may be stored through Shopify’s data storage, databases, and general applications on secure servers behind a firewall.
When you complete a purchase, Shopify stores your order information and processes payments securely in accordance with PCI-DSS (Payment Card Industry Data Security Standard).

Shopify may transfer data outside the UK/EEA (e.g., to Canada or the United States) but ensures that adequate safeguards such as Standard Contractual Clauses or adequacy decisions are in place.

5. How We Share Your Information

We may share your information with:

·       Shopify (for order fulfilment, hosting and analytics)

·       Payment processors (Shopify Payments, PayPal, Klarna, etc.)

·       Courier and delivery partners (to deliver your orders)

·       Marketing and analytics partners (e.g., Google, Meta) where consent is given

·       IT and security providers (to operate and maintain the Website)

·       Professional advisers (such as accountants or legal advisers, where necessary)

·       Authorities (if required by law, e.g., HMRC or law enforcement)

All third parties must respect the confidentiality and security of your data and only process it under our instructions.

6. Marketing and Communications

We may send you marketing emails or SMS if:

·       You have opted in to receive them; or

·       You are an existing customer and we are promoting similar products under the “soft opt-in” exemption of the Privacy and Electronic Communications Regulations (PECR).

You can opt out at any time by:

·       Clicking the “unsubscribe” link in our emails

·       Adjusting your preferences in your account

·       Contacting us directly at help@younutri.com

We will never share your details with third parties for their marketing purposes without your consent.

Where you are an existing customer, we may send you information about similar products under the ‘soft opt-in’ exemption of the Privacy and Electronic Communications Regulations (PECR). You can opt out at any time.

7. Data Retention

We keep your personal data only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations.

Examples:

·       Order records: 6 years (for tax and legal compliance)

·       Marketing data: until you withdraw consent

·       Account information: while your account is active, or until you request deletion

When no longer needed, we securely delete or anonymise your data.

8. Your Rights Under UK Data Protection Law

You have the following rights under the UK GDPR:

·       Right of access – request a copy of your data

·       Right to rectification – correct inaccurate or incomplete data

·       Right to erasure (“right to be forgotten”) – request deletion of your data

·       Right to restriction of processing – limit how we use your data

·       Right to data portability – receive your data in a usable format

·       Right to object – object to certain processing, such as marketing

·       Right to withdraw consent – withdraw consent for marketing or cookies at any time

To exercise your rights, contact us at help@younutri.com.
We may need to verify your identity before processing your request.

If you are unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
Telephone: 0303 123 1113

9. International Data Transfers

Where data is transferred outside the UK/EEA, Shopify and our service partners rely on legally recognised safeguards such as adequacy regulations or the UK’s International Data Transfer Addendum to the EU Standard Contractual Clauses:

·       UK Government adequacy regulations; or

·       The UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

You can request details of these safeguards by contacting us.

10. How We Keep Your Data Secure

We use a combination of technical and organisational measures to protect your data, including:

·       SSL encryption across our Website

·       Secure Shopify servers and PCI-DSS compliant payment gateways

·       Limited and authorised staff access to data

·       Regular monitoring for vulnerabilities and threats

While no online system is 100% secure, we take all reasonable steps to safeguard your information.

11. Links to Other Websites

Our Website may contain links to third-party sites (e.g., Instagram, YouTube, or partners).
We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies before sharing personal data.

12. Children’s Privacy

Our Website and products are not intended for children under 16.
We do not knowingly collect data from minors.
If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or business changes.
Any updates will be posted on this page with an updated “Last Updated” date.
Please check this page regularly for updates.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

YouNutri LTD

Email: help@younutri.com

Correspondence address: YouNutri, 48 Free Street, Brecon, Wales, LD3 7BN.

We aim to respond to emails within 24 hours during business days (usually same day).