Privacy Policy

1. Who we are

The Merton Nutrition Review Ltd ("we", "us", "our") is the data controller responsible for your personal data collected through this website.

• Registered address: 14 Cavendish Place, London, W1G 9DL, United Kingdom
• Company No. / VAT: GB 394 8771 23
• Telephone: +44 20 3948 7712
• Email: info@musclesryvitaar.world

2. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR Article 6:

• Contract (Art. 6(1)(b)): Processing necessary to fulfil your order or respond to your pre-contractual enquiry.
• Legitimate interests (Art. 6(1)(f)): Fraud prevention, website security, and improving our editorial content.
• Consent (Art. 6(1)(a)): Where you have explicitly consented - for example, to analytics or marketing cookies via our cookie banner. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Where we are required to retain data for tax, accounting or regulatory purposes.

3. What personal data we collect and why

Category	Data collected	Purpose	Legal basis
Order data	Name, phone number, delivery address	Fulfil and deliver your order; payment on delivery confirmation	Contract
Enquiry data	Name, email address, message content	Respond to contact form enquiries and returns requests	Legitimate interests / Contract
Technical data	IP address, browser type, pages visited, timestamps	Website security, error diagnosis, fraud prevention	Legitimate interests
Analytics data	Anonymised or pseudonymised usage data (pages, sessions, referrers)	Understand how visitors use the site and improve content	Consent
Marketing data	Ad interaction data (where consented)	Measure and optimise advertising campaigns	Consent
Cookie data	Cookie consent preference stored locally	Remember your consent choice	Legitimate interests (essential functionality)

4. Cookies and tracking

We use cookies and similar technologies on this website. Strictly necessary cookies (which store your consent preference and support basic site functionality) are placed without consent. All other cookies - analytics and advertising - are placed only with your explicit consent via our cookie banner. Please read our Cookie Policy for full details.

5. Google Consent Mode v2

This website implements Google Consent Mode v2. Before you grant consent, all advertising and analytics signals - including ad_storage, ad_user_data, ad_personalization, and analytics_storage - are set to denied by default. These signals are updated to granted only when you click "Accept All" on the cookie banner, or selectively grant permissions via the Settings panel.

6. How we share your data

We do not sell your personal data. We may share data with the following categories of third-party recipients where necessary:

• Delivery partners: Your name and delivery address are shared with our fulfilment and courier partners solely to deliver your order.
• Payment processors: Payment is collected on delivery; no card data is processed by this website.
• Analytics providers (consent-dependent): Anonymised/pseudonymised usage data may be shared with analytics platforms (e.g. Google Analytics) where you have consented.
• Legal and regulatory authorities: Where required by law, court order, or regulatory obligation.

All third parties acting as data processors on our behalf are bound by data processing agreements and may only process your data on our instructions.

7. International transfers

Some of our service providers may process data outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place - such as the UK International Data Transfer Agreement (IDTA) or adequacy regulations - in accordance with UK GDPR Chapter V.

8. How long we keep your data

• Order data: Retained for 7 years from the date of transaction for accounting and legal compliance purposes.
• Enquiry data: Retained for 2 years from the date of enquiry, then deleted.
• Analytics data: Retained in anonymised form for up to 26 months, in line with Google Analytics defaults.
• Cookie consent records: Retained in your browser's local storage until you clear it or change your preferences.

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no lawful basis for continued processing.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Rights related to automated decision-making: We do not make solely automated decisions that produce legal or similarly significant effects.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@musclesryvitaar.world or in writing to 14 Cavendish Place, London, W1G 9DL. We will respond within one calendar month.

10. Right to complain to the ICO

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the UK supervisory authority:

• Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Telephone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address any concern directly before you approach the ICO.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include HTTPS encryption across the website and access controls on internal systems.

12. Children's data

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law or our data practices. The "last updated" date at the top of this page will be revised accordingly. Material changes will be communicated via a notice on this website.

14. Contact us

For any questions or requests relating to this Privacy Policy, please contact us:

• Email: info@musclesryvitaar.world
• Post: The Merton Nutrition Review Ltd, 14 Cavendish Place, London, W1G 9DL
• Telephone: +44 20 3948 7712