Privacy Policy
Last updated: 22 July 2026 · Effective date: 22 July 2026
Redwood Nutrition Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how to exercise those rights.
Our supervisory authority is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You have the right to lodge a complaint with the ICO at any time: ico.org.uk or telephone 0303 123 1113.
1. Who We Are (Controller Details)
Data controller: Redwood Nutrition Ltd
Registered address: 14 Botanical Lane, London EC1A 1BB, United Kingdom
Company No. / VAT: 09428371
Contact: privacy@musclesnew.world
2. What Personal Data We Collect
We collect the following categories of personal data, depending on how you interact with our website:
| Category | Examples | Source |
|---|---|---|
| Identity data | Full name | Order form, contact form, directly from you |
| Contact data | Phone number, email address | Order form, contact form |
| Transaction data | Product ordered, price, SKU | Order form |
| Usage data | Pages visited, time on site, browser type, IP address | Automatically via cookies / analytics (with consent) |
| Marketing preferences | Consent records, opt-in/opt-out status | Cookie banner, forms |
| Communications data | Content of messages sent via contact form | Directly from you |
We do not collect special category data (e.g. health, biometric, or financial data). We do not process children's data - our website and products are intended for adults aged 18 and over.
3. How We Use Your Personal Data
| Purpose | Lawful Basis (UK GDPR Art. 6) |
|---|---|
| Processing and fulfilling your order; contacting you to confirm delivery details | Art. 6(1)(b) - Performance of a contract |
| Responding to enquiries submitted via our contact form | Art. 6(1)(b) - Pre-contractual steps / Art. 6(1)(f) - Legitimate interests |
| Complying with legal obligations (e.g. VAT records, consumer rights) | Art. 6(1)(c) - Legal obligation |
| Analytics and website improvement (with consent) | Art. 6(1)(a) - Consent |
| Advertising personalisation (with consent) | Art. 6(1)(a) - Consent |
| Detecting and preventing fraud; security | Art. 6(1)(f) - Legitimate interests |
4. Cookies and Google Consent Mode v2
We use Google Consent Mode v2. When you first visit our website, all non-essential Google signals - including ad_storage, ad_user_data, ad_personalization, and analytics_storage - are set to denied by default. These are only updated to granted if you click "Accept All" on our cookie banner.
Full details of the cookies we use - including their names, purposes, providers, and retention periods - are set out in our Cookie Policy.
5. Sharing Your Personal Data
We do not sell your personal data. We may share it with:
- Delivery and logistics partners - to fulfil your order (name and delivery address only, shared on a contractual basis).
- Payment processors - where applicable, for secure payment handling.
- IT and hosting providers - who process data on our behalf under Data Processing Agreements.
- Google LLC - analytics and advertising services, only where you have provided consent via our cookie banner. Google is certified under the EU-US Data Privacy Framework.
- Regulatory authorities - where required by law (e.g. HMRC, ICO).
All third-party processors are bound by contractual obligations consistent with UK GDPR requirements.
6. International Transfers
Where your data is transferred outside the UK (e.g. to Google LLC in the United States), we ensure appropriate safeguards are in place, including the UK International Data Transfer Agreement (IDTA) or adequacy decisions, as applicable.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (HMRC statutory requirement) |
| Contact form enquiries | 3 years from last interaction, or until you request deletion |
| Cookie consent records | 13 months from consent or withdrawal |
| Analytics data (if consented) | 26 months (Google Analytics default; configurable) |
| Marketing preferences | Until withdrawn or 3 years of inactivity |
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access - to obtain a copy of your personal data (Subject Access Request).
- Right to rectification - to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") - to request deletion of your data, subject to legal obligations.
- Right to restriction - to limit how we process your data in certain circumstances.
- Right to data portability - to receive your data in a structured, commonly used format.
- Right to object - to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making - we do not use solely automated decision-making that produces legal or significant effects.
- Right to withdraw consent - where processing is based on consent, you may withdraw it at any time via our cookie banner or by contacting us. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of these rights, contact us at privacy@musclesnew.world. We will respond within one calendar month. If you are dissatisfied with our response, you have the right to lodge a complaint with the ICO (ico.org.uk).
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption. Access to personal data is restricted to authorised personnel on a need-to-know basis.
10. Links to Third-Party Sites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Where changes are material, we will notify you via a prominent notice on our website.
12. Contact Us
For any questions about this Privacy Policy or your personal data:
Redwood Nutrition Ltd · 14 Botanical Lane, London EC1A 1BB, UK
Email: privacy@musclesnew.world
To complain to the supervisory authority:
Information Commissioner's Office (ICO)
ico.org.uk · 0303 123 1113