Privacy Policy

Last updated: March 2026

1. Who We Are

BioEnhance is an unregistered online business operated by individuals based in England, United Kingdom.

For the purposes of data protection law, BioEnhance acts as the data controller of your personal data.

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data — such as your name
  • Contact Data — such as your email address
  • Payment Data — processed securely by Stripe (we do not store card details)
  • Account Data — login details for accessing purchased content via Squarespace
  • Usage Data — information about how you use our website (pages visited, time on site, general location)
  • Marketing Data — your preferences in receiving marketing communications
  • Communication Data — records of emails or messages you send to us

3. How We Collect Your Data

We collect data when you:

  • Purchase a product
  • Create an account to access content
  • Sign up for emails or marketing communications
  • Interact with our website
  • Contact us directly

We may also receive data through analytics and advertising tools (see Section 10).

4. How We Use Your Data

We use your data for the following purposes:

  • To fulfil purchases — process payments and provide access to your content
  • To manage your account — including login access and support
  • To communicate with you — including confirmations and support responses
  • To send marketing emails — where you have given consent
  • To improve our website and services — using analytics data
  • To comply with legal obligations

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Contract — to provide purchased products and services
  • Legitimate Interests — to improve our website and user experience
  • Consent — for marketing communications and non-essential cookies
  • Legal Obligation — where required by law

6. Who We Share Your Data With

We do not sell your personal data.

We only share your data with trusted third-party providers necessary to run our business:

  • Squarespace — website hosting, membership system, analytics
  • Stripe — payment processing
  • MailerLite and/or Squarespace Email Campaigns — email marketing services
  • Meta (Facebook & Instagram) — advertising and analytics tools

These providers may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent protections.

7. Data Retention

We retain your data only as long as necessary:

  • Account and purchase data — for as long as your account is active and for a reasonable period after
  • Marketing data — until you unsubscribe or withdraw consent
  • Communication records — up to 2 years
  • Legal records — as required by law

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Request data portability
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, contact:

We will respond within 30 days.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies.

We use:

  • Essential cookies — required for site functionality and login access
  • Analytics cookies — to understand how users interact with our site
  • Advertising cookies — used by Meta (Facebook & Instagram) to measure and improve ad performance

Non-essential cookies (analytics and advertising) are only set after you provide consent via our cookie banner. This includes tracking technologies such as the Meta Pixel, which will only be activated after you have provided consent.

You can manage or withdraw your cookie preferences at any time through your browser settings or the cookie controls on our website.

10. Advertising and Analytics

We may use Meta (Facebook and Instagram) advertising tools, including the Meta Pixel.

This allows us to:

  • Measure ad performance
  • Understand user behaviour
  • Deliver more relevant advertising

This data may be linked to your Meta account if you are logged in to their platforms.

11. International Data Transfers

Some of our service providers (including Squarespace, Stripe, MailerLite, and Meta) may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)
  • Adequacy regulations where applicable

12. Data Security

We take reasonable technical and organisational measures to protect your personal data.

  • Payments are processed securely via Stripe (PCI DSS compliant)
  • Our website is hosted on Squarespace with industry-standard security

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy

Our content is intended for a general audience.

If you are under the age of 18, you should only use this website and purchase products with the involvement and consent of a parent or guardian.

We do not knowingly collect personal data from children under the age of 13.

14. Complaints

If you have concerns about how your data is handled, please contact us first:

If you are not satisfied, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), at any time.

  • Website: ico.org.uk
  • Phone: 0303 123 1113

15. Changes to This Policy

We may update this Privacy Policy from time to time.

Any updates will be posted on this page with a revised "Last updated" date.

16. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.