Privacy policy

Last updated: 26 July 2026

1. Introduction

Mind & Body Tech Ltd is committed to respecting your privacy and protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you:

  • visit mindandbodytech.com;
  • purchase or enquire about our products;
  • create or use a customer account;
  • subscribe to our marketing communications;
  • contact us by email, telephone, social media, contact form or another method; or
  • otherwise interact with Mind & Body Tech.

In this Privacy Policy, “Mind & Body Tech”, “we”, “us” and “our” mean Mind & Body Tech Ltd. “You” and “your” mean the person whose personal information we process.

For the purposes of UK data protection law, Mind & Body Tech Ltd is the data controller responsible for the personal information described in this policy.

2. Our contact details

Mind & Body Tech Ltd
Summit House
4–5 Mitchell Street
Edinburgh
EH6 7BD
United Kingdom

Email: info@mindandbodytech.com

Website: mindandbodytech.com

Please use the details above if you have a question about this Privacy Policy, wish to exercise a data protection right or want to make a privacy-related complaint.

3. Personal information we collect

The information we collect depends on how you interact with us.

3.1 Information you provide directly

We may collect:

  • your name;
  • email address;
  • telephone number;
  • billing and delivery addresses;
  • account login and security information;
  • products ordered or enquired about;
  • order, delivery, return, refund and warranty information;
  • correspondence and customer-service enquiries;
  • marketing preferences;
  • information included in product reviews, survey responses or feedback;
  • any information you choose to provide when contacting us; and
  • information required to arrange installation, delivery, training or after-sales support for certain products.

Please do not send us unnecessary medical or other sensitive personal information through our website or ordinary email.

Where information is required to process an order or provide a requested service, failing to provide it may prevent us from completing your request.

3.2 Payment information

Payments are processed by Shopify Payments and other payment providers made available at checkout, which may include Apple Pay, Google Pay or other supported payment methods.

Payment providers may collect your payment card details, billing information and transaction authentication information directly.

Mind & Body Tech does not ordinarily receive or store your complete payment card number or card security code.

3.3 Information collected automatically

When you use our website, we and our service providers may automatically collect information including:

  • your IP address;
  • browser and device type;
  • operating system;
  • approximate location derived from your IP address;
  • pages viewed and links selected;
  • referring website or advertising source;
  • dates, times and duration of visits;
  • shopping-basket activity;
  • checkout activity;
  • cookie and consent preferences; and
  • information about how you interact with our website and marketing communications.

This information may be collected through cookies, pixels, tags, local storage, log files and similar technologies.

Please see our Cookie Policy for more information.

3.4 Information received from third parties

We may receive personal information from:

  • Shopify and services operating through the Shopify platform;
  • payment and fraud-prevention providers;
  • delivery, fulfilment, installation and manufacturing partners;
  • email marketing and customer-communication platforms such as Klaviyo;
  • advertising, analytics and search platforms;
  • social-media platforms where you interact with our pages or advertisements;
  • customer-review or survey providers; and
  • other parties involved in fulfilling your order or providing support.

We may also receive information where someone purchases a product for you or provides your details as a delivery or contact recipient. That person should ensure they have permission to provide your details.

4. How and why we use your personal information

UK data protection law requires us to have a lawful basis for processing personal information.

The lawful bases we rely upon include:

  • contract — where processing is necessary to enter into or perform a contract with you;
  • legal obligation — where we must process information to comply with the law;
  • legitimate interests — where processing is reasonably necessary for our business or another person’s interests and those interests are not overridden by your rights;
  • consent — where you have freely given a specific and informed choice; and
  • legal claims — where information is required to establish, exercise or defend legal rights.

4.1 Processing orders and providing products

We use personal information to:

  • confirm and process orders;
  • take and verify payment;
  • arrange delivery, fulfilment, installation or product training;
  • provide order and delivery updates;
  • manage returns, refunds, replacements and cancellations;
  • register products or warranties where required;
  • respond to product and technical enquiries;
  • provide customer support; and
  • administer customer accounts.

Our principal lawful basis is the performance of our contract with you.

We may also rely on our legitimate interests in providing effective customer service and managing our business.

4.2 Supplier and direct fulfilment

Some products may be dispatched, installed or supported directly by a manufacturer, distributor, fulfilment partner or specialist delivery provider.

Where necessary, we may provide these organisations with relevant information such as your:

  • name;
  • delivery address;
  • telephone number;
  • email address;
  • product ordered;
  • delivery requirements; and
  • information needed to arrange installation, training or support.

We share only the information reasonably required to fulfil your order or provide the requested service.

Our lawful basis is usually the performance of our contract with you.

4.3 Customer service and enquiries

We use information to:

  • respond to questions and requests;
  • provide product information;
  • investigate complaints;
  • resolve delivery or payment issues;
  • maintain records of communications; and
  • provide after-sales assistance.

We rely on contract where the communication concerns an order and legitimate interests where it concerns general customer service or business administration.

4.4 Safety, fraud prevention and security

We may process information to:

  • verify transactions;
  • identify potentially fraudulent orders;
  • protect customer accounts;
  • prevent misuse of our website;
  • investigate suspicious or unlawful activity;
  • maintain website and information security; and
  • protect our customers, business and service providers.

We rely on our legitimate interests in protecting our business and customers and, where applicable, compliance with legal obligations.

An order may be delayed or reviewed where automated or manual checks indicate an elevated risk of fraud. A final decision affecting an order will not necessarily be made solely by automated means.

4.5 Legal and regulatory requirements

We may use and retain information to:

  • maintain financial, tax and accounting records;
  • respond to lawful requests from regulators, courts or law-enforcement authorities;
  • comply with consumer-protection and product-safety requirements;
  • manage recalls or safety notices;
  • establish, exercise or defend legal claims; and
  • comply with other legal obligations.

Our lawful basis is compliance with a legal obligation or, where appropriate, our legitimate interests in protecting our legal rights.

4.6 Improving our website, products and services

We may use information to:

  • understand how visitors use our website;
  • measure website performance;
  • identify technical problems;
  • improve navigation and checkout;
  • assess customer interest in particular products;
  • develop our product range and customer service; and
  • produce aggregated or statistical business information.

Where non-essential cookies or similar technologies are involved, we will request consent where required.

Otherwise, we rely on our legitimate interests in operating and improving our business.

4.7 Email marketing

Where permitted, we may send information about:

  • new products;
  • educational and science-based content;
  • company news;
  • events;
  • special offers; and
  • other Mind & Body Tech updates.

We may use Klaviyo to manage subscriptions and deliver email communications.

We will generally rely on your consent. In limited circumstances, we may contact existing customers about similar products where the law permits this and where an opt-out was provided when the details were collected.

You may unsubscribe at any time by selecting the unsubscribe link in an email or contacting us at info@mindandbodytech.com.

Unsubscribing from marketing will not prevent us from sending necessary messages about an order, account, safety notice, warranty or customer-service request.

4.8 Advertising and measuring campaigns

Subject to your cookie choices, we may use advertising and analytics services provided by organisations such as Google and Meta to:

  • measure visits and sales;
  • understand how people found our website;
  • measure advertising effectiveness;
  • create or measure advertising audiences; and
  • show relevant advertisements on other websites and platforms.

These services may collect information through cookies, pixels or similar technologies.

Where consent is required, advertising and analytics technologies will only be used after you have provided that consent through our cookie controls.

You can find further information in our Cookie Policy and adjust your choices through the cookie settings available on our website.

5. Cookies and similar technologies

Our website uses cookies and similar technologies.

Some are necessary for the website, shopping basket, checkout, security and privacy preferences to work. Others may be used, with your permission where required, for:

  • website preferences;
  • analytics and performance measurement;
  • email and campaign measurement; and
  • advertising and social-media services.

You can accept, reject or manage non-essential cookies using our cookie banner or cookie settings.

Rejecting non-essential cookies should not prevent you from browsing or purchasing from the website, although certain optional features may be affected.

Our separate Cookie Policy explains the categories of cookies used, their purposes, the organisations that may place them and how to change your preferences.

6. Who we share personal information with

We may share information with trusted organisations where reasonably necessary for the purposes described in this policy.

These may include:

6.1 Website and technology providers

This includes Shopify, which hosts and supports our online store, together with approved applications and technology providers connected to our website.

Shopify may process information to provide its services to us and may separately process certain information in accordance with its own consumer privacy terms.

6.2 Payment providers and financial institutions

We share transaction-related information with payment processors, card networks, banks, digital-wallet providers and fraud-prevention services.

6.3 Manufacturers, suppliers and fulfilment partners

Where required to complete an order, we may share information with manufacturers, distributors, warehouse providers and supplier-direct fulfilment partners.

6.4 Delivery and installation providers

We may share information with postal operators, couriers, specialist delivery companies, installation teams and product-training providers.

6.5 Marketing and communications providers

This may include Klaviyo and other providers used to manage customer communications and marketing preferences.

6.6 Analytics, advertising and social-media providers

Subject to your cookie choices, this may include Google, Meta and other analytics or advertising providers used on our website.

6.7 Professional advisers

We may disclose information to accountants, auditors, insurers, solicitors, IT advisers and other professional consultants where necessary.

6.8 Authorities and legal recipients

We may disclose information where required by law, court order or a lawful request from a regulator, tax authority, law-enforcement body or other competent authority.

6.9 Business transfers

If Mind & Body Tech is reorganised, sold, merged or transfers some or all of its business or assets, relevant personal information may be disclosed to advisers, potential purchasers or successor organisations, subject to appropriate confidentiality and data-protection safeguards.

7. Sale of personal information

Mind & Body Tech does not sell customers’ personal information in exchange for money.

Some privacy laws use terms such as “sale”, “sharing” or “targeted advertising” more broadly to include certain uses of advertising cookies or the transfer of online identifiers to advertising partners.

Where these rules apply, you can reject or withdraw consent for relevant technologies through our cookie settings and any privacy-choice mechanisms made available on the website.

8. International transfers

Some of our service providers may process personal information outside the United Kingdom.

This may include processing in the European Economic Area, the United States or other countries where our technology, payment, marketing, manufacturing or fulfilment partners operate.

Where personal information is transferred outside the UK, we take reasonable steps to ensure that an appropriate safeguard is used where required. Depending on the circumstances, this may include:

  • a UK adequacy regulation;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to the European Commission’s Standard Contractual Clauses; or
  • another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your personal information.

9. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, warranty, safety and reporting requirements.

The retention period depends on factors including:

  • the nature of the information;
  • the product purchased;
  • warranty or expected product-support periods;
  • legal and regulatory requirements;
  • the need to resolve disputes;
  • fraud-prevention requirements; and
  • whether information is required to establish, exercise or defend legal claims.

For example:

  • order, payment and accounting records may generally be retained for at least the applicable statutory tax and accounting period;
  • customer-service and warranty records may be retained for the relevant warranty or support period and for a reasonable period afterwards;
  • account information may be retained while the account remains active and for a reasonable period following closure;
  • marketing information is retained until you unsubscribe, withdraw consent or the information is no longer required, subject to retaining a minimal suppression record so that we can respect your opt-out; and
  • cookie and consent records may be retained as necessary to record and demonstrate your choices.

When information is no longer required, we will delete it, anonymise it or securely restrict its use.

10. Security

We use reasonable technical and organisational measures designed to protect personal information from:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • disclosure; and
  • destruction.

These measures may include access controls, password protection, secure hosting, encrypted connections and the use of reputable payment and technology providers.

No online system or method of electronic transmission is completely secure. You should use a strong, unique password for any customer account and avoid sending sensitive information through unsecured channels.

If you believe your account or personal information may have been compromised, please contact us promptly.

11. Your data-protection rights

Depending on the circumstances, UK data protection law may give you the right to:

11.1 Access

Request confirmation that we process your personal information and obtain a copy of it.

11.2 Correction

Ask us to correct inaccurate information or complete information that is incomplete.

11.3 Erasure

Ask us to delete your personal information in certain circumstances.

11.4 Restriction

Ask us to restrict the way we use your information in certain circumstances.

11.5 Objection

Object to processing based on legitimate interests, including certain profiling, and object at any time to direct marketing.

11.6 Data portability

Receive certain information you provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation, where legally applicable.

11.7 Withdraw consent

Withdraw consent at any time where we rely on consent.

Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

11.8 Rights concerning automated decisions

Request safeguards in relation to certain decisions based solely on automated processing that produce legal or similarly significant effects.

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a right, contact info@mindandbodytech.com.

We may ask for reasonable information to verify your identity and ensure personal information is not disclosed to an unauthorised person.

We will respond within the period required by applicable law.

You will not ordinarily be charged for exercising a data-protection right. However, the law may permit a reasonable fee or allow us to refuse a request that is manifestly unfounded or excessive.

12. Complaints

Please contact us first if you have concerns about how we use your personal information. We will endeavour to investigate and resolve the matter.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office

Further information and complaint procedures are available through the Information Commissioner’s Office website.

You may also have the right to complain to a data-protection authority in the country where you live or work, particularly if you are located in the European Economic Area.

13. Children’s privacy

Our website and products are intended for adults and are not directed towards children.

We do not knowingly collect personal information directly from children.

If you are a parent or guardian and believe a child has provided personal information to us without appropriate permission, please contact us so that we can investigate and take appropriate action.

14. Health information and product enquiries

Mind & Body Tech supplies wellness, recovery and related technology products. We do not need detailed medical records in order to operate our online store.

Please avoid sending diagnoses, medical records or other sensitive health information through general contact forms, email or social-media messages.

Where you ask a question that relates to health, suitability or product use, any information you voluntarily provide will be used only as reasonably necessary to respond to your enquiry, manage safety concerns or refer you to appropriate product guidance.

Our products and website information are not a substitute for advice from a qualified healthcare professional. You should discuss medical concerns and the suitability of a product with an appropriately qualified practitioner.

15. Third-party websites

Our website may include links to manufacturers, social-media services, research resources and other third-party websites.

Those websites operate independently and have their own privacy practices. We are not responsible for the privacy, security or content of websites we do not control.

We encourage you to review the privacy information provided by the relevant third party before submitting personal information.

16. Changes to this policy

We may update this Privacy Policy to reflect:

  • changes to our services or technology;
  • new suppliers or service providers;
  • changes to our data-processing practices; or
  • legal or regulatory developments.

The revised policy will be posted on this page and the “Last updated” date will be changed.

Where a change materially affects how we use personal information, we will take additional steps to notify affected individuals where required by law.

17. Contact us

For questions, requests or complaints relating to privacy, please contact:

Mind & Body Tech Ltd
Summit House
4–5 Mitchell Street
Edinburgh
EH6 7BD
United Kingdom

Email: info@mindandbodytech.com

Mind & Body Tech Ltd is the data controller responsible for the personal information described in this Privacy Policy.