Privacy policy


Privacy Policy

Last updated: 6 December 2025

This Privacy Policy explains how Elixir Store (“we”, “us”, “our”) collects, uses and protects your personal information when you visit or make a purchase from elixirstore.co.uk (the “Site”).

By using our Site, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Site.

This Policy applies in addition to our Terms & Conditions and Returns & Refunds Policy.

1. Who we are

Elixir Store operates the website elixirstore.co.uk and is the controller of your personal information for the purposes of UK data protection law (including UK GDPR and the Data Protection Act 2018).

If you have any questions about this Policy or how we handle your data, you can contact us at:

Email: support@elixirstore.co.uk

2. Information we collect

We collect information that you provide directly to us, information collected automatically when you use the Site, and information from third-party partners.

2.1 Information you provide directly

When you use our Site, you may provide us with:

  • Contact details – name, email address, phone number

  • Order details – billing address, shipping address, order contents, order notes

  • Account information – username, password (if you create an account)

  • Payment information – card details, digital wallet details (processed via our payment provider; we do not store full card numbers)

  • Personalisation details – initials, names or other wording you ask us to print/emboss on products

  • Customer service information – emails you send us, messages via contact forms, complaints, returns information and other communication

2.2 Information collected automatically

When you visit the Site, certain information is automatically collected:

  • Device information – IP address, browser type, operating system, device type

  • Usage information – pages viewed, time and date of visits, time spent on pages, clicks and navigation paths

  • Log data – technical data from your browser or device when you interact with the Site

We collect this data using cookies, pixels and similar technologies. You can find more details in our Cookie Policy.

2.3 Information from third parties

We may receive information about you from third parties, including:

  • Shopify – our e-commerce platform provider

  • Payment providers – to confirm payment status and prevent fraud

  • Analytics and advertising partners – such as Google, Meta (Facebook/Instagram), TikTok and others, where you have accepted cookies/tracking

  • Social media platforms – if you interact with us via social channels, or log in using social accounts (where available)

3. How we use your information

We use your personal information for the following purposes:

3.1 To process and fulfil your orders

  • To process payments and prevent fraud

  • To prepare, personalise and dispatch orders

  • To send order confirmations, shipping updates and other transactional messages

Legal basis: performance of a contract; legitimate interests; legal obligations (e.g. record-keeping).

3.2 To provide customer support

  • To respond to your enquiries, requests and complaints

  • To manage returns, refunds and replacements

  • To provide after-sales support and service

Legal basis: performance of a contract; legitimate interests.

3.3 To operate, maintain and improve our Site

  • To analyse how visitors use the Site

  • To troubleshoot, test and improve user experience and functionality

  • To monitor for fraud, abuse or security incidents

Legal basis: legitimate interests.

3.4 Marketing and personalised advertising

Where permitted by law and, where required, with your consent, we may use your information to:

  • Send you email marketing about new products, offers or updates (if you opt in)

  • Show you personalised ads on platforms such as Google, Facebook/Instagram, TikTok and others – using cookies, pixels and similar technology

  • Build audiences and measure the performance of our advertising campaigns

You can opt out of email marketing at any time by using the “unsubscribe” link in our emails or contacting us at support@elixirstore.co.uk.

You can control cookies and advertising preferences via your browser settings, device settings, and the tools provided by each platform (e.g. Facebook Ad Preferences, Google Ad Settings, TikTok Ad Personalisation).

Legal basis: consent (for cookies/marketing where required); legitimate interests.

3.5 Legal and regulatory purposes

We may use your information to:

  • Comply with legal obligations (e.g. tax and accounting rules)

  • Assist law enforcement or regulatory bodies where required by law

  • Enforce our terms and protect our rights, property and customers

Legal basis: legal obligations; legitimate interests.

4. Cookies and tracking technologies

We use cookies, pixels and similar technologies to:

  • Keep you logged in and remember your preferences

  • Enable shopping cart and checkout functionality

  • Analyse Site traffic and performance

  • Facilitate personalised advertising and remarketing

You can manage or disable cookies through your browser settings and, where applicable, via our cookie banner/preferences tool.

For more information, please refer to our Cookie Policy.

5. Sharing your information

We do not sell your personal information. We may share your data with:

  • Service providers / processors, including:

    • Shopify (e-commerce platform)

    • Payment processors (e.g. card providers, digital wallets)

    • Shipping and courier companies

    • IT, hosting and security providers

    • Email and SMS service providers

    • Analytics and advertising partners (e.g. Google Analytics, Meta, TikTok)

  • Professional advisors, such as accountants, auditors or legal advisors where necessary

  • Authorities and regulators, if required to comply with legal obligations or to protect our rights

These third parties only have access to the information required to perform their services and are required to process your data in accordance with data protection laws.

6. International data transfers

Some of our service providers (including Shopify and certain analytics/advertising platforms) may be located outside the UK or the European Economic Area.

Where your data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by relevant authorities, or

  • Other lawful transfer mechanisms under UK data protection law.

7. Data retention

We keep your personal information only for as long as necessary for the purposes set out in this Policy, including:

  • For as long as you have an account with us

  • For as long as needed to fulfil your orders and provide services

  • For the period required by tax, accounting and other legal obligations

  • For as long as needed to resolve disputes or enforce our agreements

When we no longer need your information, we will securely delete or anonymise it.

8. Your rights

Under UK data protection law, you have certain rights regarding your personal information. These include:

  • Right of access – to request a copy of the personal data we hold about you

  • Right to rectification – to request correction of inaccurate or incomplete data

  • Right to erasure – to request deletion of your data in certain circumstances

  • Right to restrict processing – to ask us to limit how we use your data in certain cases

  • Right to data portability – to receive your data in a structured, commonly used format and transmit it to another controller (where applicable)

  • Right to object – to object to certain types of processing, including direct marketing

  • Right to withdraw consent – where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at support@elixirstore.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your personal data.
For more information, visit the ICO website.

9. Children’s privacy

Our Site is not intended for children under the age of 16, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us so we can delete it.

10. Third-party links

Our Site may contain links to other websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We are not responsible for the content or privacy practices of third-party sites, and we recommend you review their privacy policies separately.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors.

When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we handle your information.

12. Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: support@elixirstore.co.uk
Website: elixirstore.co.uk