Privacy policy
Last updated: 5 June 2025
BodyCurve ("we", "us", or "our") operates www.trybodycurve.com. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
BodyCurve is the data controller for your personal data. For any data protection queries, contact us at support@trybodycurve.com.
What Data We Collect
We collect data you provide directly: your name, contact details (email, phone, delivery address), payment information (processed securely by our payment provider — we do not store card details), account login details if you create an account, and any communications you send us.
We also collect data automatically: your IP address and browser type, pages visited and time spent on our website, device information, and data collected via cookies and similar technologies.
How We Use Your Data
We use your data to process and fulfil your orders, communicate with you about your order or enquiries, send marketing communications (only with your consent), improve our website and services, comply with legal obligations, and prevent fraud.
Legal Basis for Processing
We process your data on the basis of contract (to fulfil your order), legitimate interests (to improve our services and prevent fraud), consent (for marketing emails, which you can withdraw at any time), and legal obligation where required by law.
Sharing Your Data
We may share your data with delivery and logistics partners, payment processors (e.g. Stripe, PayPal), marketing platforms (e.g. Meta, Google) for advertising purposes, and IT service providers who support our website. We do not sell your personal data to third parties.
International Transfers
Some of our service providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy. Order data is retained for 7 years for tax and legal compliance. Marketing data is retained until you unsubscribe.
Your Rights
Under UK GDPR, you have the right to access your personal data, request correction of inaccurate data, request erasure ("right to be forgotten"), object to or restrict processing, data portability, and to withdraw consent at any time. To exercise any of these rights, contact us at support@trybodycurve.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page.