Privacy policy

This policy explains how FIBAR collects, uses, and protects your personal information when you visit our website or buy from us. It applies to all customers and visitors of fibar.uk and any related services (the "Services").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

WHO WE ARE

FIBAR is a trading name of FIBAR Ltd. We are the data controller responsible for your personal information.

Registered office: 61 Bridge Street, Kington, HR5 3DJ
Company number: 16705787
Email: founders@fibar.uk

WHAT INFORMATION WE COLLECT

When you visit our website or place an order, we collect the following information:

Information you give us directly:
- Name, billing address, shipping address
- Email address and phone number (if provided)
- Payment information (processed by Shopify Payments — we do not store full card details)
- Order history and subscription preferences
- Any messages you send us

Information collected automatically:
- IP address, device type, browser, and operating system
- Pages visited, time spent, and referring website
- Cookie data (see our Cookie Policy for details)

Information from third parties:
- Order and account data shared by Shopify (our e-commerce platform)
- Email engagement data from Klaviyo (our email service)
- Analytics data from Google Analytics

HOW WE USE YOUR INFORMATION

We use your information to:
- Process and ship your orders
- Manage subscriptions and recurring deliveries
- Send order confirmations, shipping updates, and account notifications
- Send marketing emails (only if you have signed up to our newsletter)
- Respond to your enquiries
- Improve our website, products, and customer service
- Detect and prevent fraud
- Comply with legal obligations

OUR LAWFUL BASIS FOR PROCESSING

We process your data under the following lawful bases:
- Contract: to fulfil orders and provide subscription services you have purchased
- Legitimate interests: to run our business, improve our website, and prevent fraud
- Consent: to send marketing emails and set non-essential cookies
- Legal obligation: to meet tax, accounting, and consumer protection laws

You can withdraw consent at any time by emailing founders@fibar.uk or by clicking the unsubscribe link in any of our emails.

WHO WE SHARE YOUR INFORMATION WITH

We share your data with trusted third parties who help us run our business. They process data on our behalf and are bound by contracts to protect it.

Service providers we use:
- Shopify (e-commerce platform, payment processing, order management)
- Klaviyo (email marketing and abandoned cart recovery)
- Google Analytics (website usage analytics)
- Trustpilot (customer reviews)
- Royal Mail, Evri, DPD, and other couriers (delivery)
- Nutreelife Ltd (our contract manufacturer, for production planning — no personal customer data shared)

We do not sell your personal information to anyone.

We may share data when required by law, court order, or to protect our legal rights.

INTERNATIONAL DATA TRANSFERS

Some of our service providers are based outside the UK (for example, Shopify and Google operate internationally). When data is transferred outside the UK, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

HOW LONG WE KEEP YOUR DATA

We keep your information only as long as we need it.

- Order and customer account data: 7 years after your last order (required for UK tax law)
- Email marketing data: until you unsubscribe, then deleted within 30 days
- Website analytics: 26 months
- Customer service correspondence: 2 years

YOUR RIGHTS UNDER UK GDPR

You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Ask us to delete your data (right to be forgotten)
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent for marketing or non-essential cookies

To exercise any of these rights, email founders@fibar.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at https://ico.org.uk or by calling 0303 123 1113.

We use cookies to make our website work, to understand how visitors use it, and (with your consent) to personalise content and measure marketing performance. See our Cookie Policy for full details.

CHILDREN

Our Services are not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a child, email us and we will delete it.

CHANGES TO THIS POLICY

We may update this policy from time to time. The latest version will always be at fibar.uk/policies/privacy-policy. If we make material changes, we will notify you by email or a notice on the website.

For any questions about this policy or how we handle your data:

FIBAR
A trading name of FIBAR Ltd
Registered office: 61 Bridge Street, Kington, HR5 3DJ
Company number: 16705787
Email: founders@fibar.uk