PRIVACY POLICY

How The Girth Guru Collects, Uses and Protects Personal Information

Last updated: 2 August 2026

At The Girth Guru, privacy and discretion are central to the way we operate. This Privacy Policy explains how we collect, use, share, store and protect personal information when you browse our website, create an account, contact us, place an order or otherwise interact with our services.

This policy is intended to provide clear information about our data practices and the choices available to you. It should be read alongside our Cookie Policy, which explains how cookies and similar technologies operate, our Terms and Conditions, and our Returns, Refunds and Cancellation Policy.

The Girth Guru is the controller responsible for deciding how and why personal information is used in connection with this website and our customer services. You can contact us through the Contact The Girth Guru page or email Girthguru@outlook.com.

Who This Policy Applies To

This policy applies to website visitors, customers, account holders, people who contact customer support, newsletter subscribers and anyone else whose personal information we process in connection with The Girth Guru.

Our products and website content are intended for adults aged 18 and over. We do not knowingly offer products to children or intentionally collect personal information from anyone under 18. If you believe that a person under 18 has provided information to us, please contact our support team so that we can review and remove it where appropriate.

Personal Information We May Collect

The information we collect depends on how you use the website and which services you request. It may include the following categories.

Identity and Contact Information

This may include your name, billing address, delivery address, email address, telephone number and any other contact details supplied when you order, create an account or contact us.

Order and Transaction Information

When you purchase through the Girth Guru shop, we may process details of the products ordered, order value, currency, transaction reference, order status, delivery method, dispatch information, tracking details, returns, refunds and previous purchases.

Payment Information

Payments are processed through the payment methods made available at checkout. The Girth Guru does not normally receive or store complete card numbers, security codes or online-banking credentials. Payment providers may send us confirmation that a payment was approved, declined, refunded or disputed, together with limited transaction and fraud-prevention information.

Payment services may include PayPal and Square. When you choose one of these services, the provider processes information under its own privacy terms and may act as an independent controller for parts of the transaction. Available payment methods may change over time.

Account and Preference Information

If you create a website account, we may process login details, account settings, saved addresses, order history and communication preferences. Passwords are handled through the website platform and should not be shared with us or with anyone else.

Customer-Service and Communication Information

When you send an email, complete a form, use online chat, request support or make a complaint, we may retain the content of the communication, contact details, dates, attachments and records of how the matter was handled. This helps us respond consistently and maintain an appropriate service record.

Technical and Website-Usage Information

When you use the website, technical information may be collected automatically. This may include internet protocol address, browser type, device type, operating system, general location derived from an IP address, pages viewed, referring website, session activity, security events and information collected through cookies or similar technologies.

Our Cookie Policy explains the categories of cookies that may operate, when consent is required and how to change your choices. If Google Analytics or another Google service is enabled, information may also be processed in accordance with the relevant Google privacy information.

Marketing and Preference Information

This may include whether you have asked to receive marketing, the date and method of consent, unsubscribe requests and information about interactions with marketing communications where those features are enabled.

Age and Eligibility Information

Because our products are for adults, we may ask you to confirm that you are aged 18 or over. We do not normally require a copy of an identity document, but a payment provider or fraud-prevention service may request additional verification under its own procedures.

Sensitive or Special Category Information

We do not ask customers to provide medical records or unnecessary information about health, sex life or other special category matters through the ordinary order process. However, a person may choose to include sensitive details in a support message. Please provide only the information reasonably needed for us to understand your enquiry.

If processing special category information becomes necessary, we will identify both an appropriate lawful basis and a separate legal condition for that processing. Depending on the circumstances, we may request explicit consent, limit the information retained or advise you to seek assistance from an appropriately qualified professional.

How We Collect Personal Information

We may collect personal information directly from you when you place an order, create an account, contact us, subscribe to marketing, submit a review, request a return or otherwise provide information through the website.

We may also collect information automatically through the website platform, security systems, server logs, cookies and similar technologies. In addition, we may receive limited information from payment providers, delivery services and other organisations involved in completing a transaction or resolving an issue.

The website is hosted and operated using Wix technology. Wix may process website, account, checkout, security and technical information as a service provider and, in some circumstances, for its own stated purposes. Further details are available in the Wix Privacy Policy.

How and Why We Use Personal Information

We only use personal information where we have a lawful reason to do so. The lawful basis depends on the purpose and the circumstances. The main purposes and bases are explained below.

To Process and Fulfil Orders

We use identity, contact, order and transaction information to accept payment, confirm an order, prepare the parcel, arrange delivery, provide tracking information, handle cancellations and manage returns or refunds. This processing is generally necessary to perform a contract with you or to take steps at your request before entering into a contract.

To Provide Customer Support

We use contact, order and communication information to answer questions, provide product and delivery information, respond to complaints and resolve problems. This is generally necessary to perform our contract with customers and may also be necessary for our legitimate interest in providing an effective and accountable customer service.

To Operate, Secure and Improve the Website

We may use technical, usage and security information to operate the website, maintain accounts and checkout functions, detect errors, protect against fraud or misuse, improve performance and understand how visitors navigate the site. Depending on the activity, the lawful basis may be our legitimate interests, compliance with a legal obligation, or consent where required for non-essential technologies.

To Meet Legal and Regulatory Obligations

We may use and retain information where necessary to comply with tax, accounting, consumer-protection, data-protection and other legal obligations. We may also use information to establish, exercise or defend legal claims, respond to lawful requests from authorities and maintain records demonstrating compliance.

To Prevent Fraud and Protect Customers

Order, payment, device and transaction information may be used to identify suspicious activity, prevent unauthorised purchases, protect the website and investigate chargebacks or disputes. This may be necessary for our legitimate interests in protecting customers and the business, and for compliance with obligations placed on payment providers.

To Send Marketing Communications

We will send electronic marketing only where permitted. This will generally be based on your consent or, where the law allows, another applicable basis such as the customer soft opt-in. Every marketing email should provide a straightforward way to unsubscribe.

You may withdraw consent or object to direct marketing at any time. We will stop the affected marketing as soon as reasonably practicable, although we may retain a minimal suppression record to ensure that your preference continues to be respected.

When Providing Information Is Required

Certain information is needed to enter into and perform a purchase contract. For example, without a name, delivery address, contact details and successful payment confirmation, we may be unable to accept or deliver an order.

Other information is optional. Where information is requested for marketing, analytics or another optional purpose, you can normally decline without losing access to the essential website or order service.

Who We May Share Personal Information With

We do not sell customer personal information. We share information only where needed for the purposes described in this policy, where you have requested a service, or where disclosure is legally required. Recipients may include the following.

• Website, hosting, account, security and e-commerce providers, including Wix

• Payment processors, banks and fraud-prevention providers, including the payment option selected at checkout

• Delivery and logistics providers that need a name, address and contact details to deliver and track a parcel

• Analytics, communications and marketing providers where those services are enabled and the required permissions have been obtained

• IT, professional, legal, accounting or insurance advisers who assist us under appropriate confidentiality duties

• Government bodies, regulators, courts, law-enforcement organisations or other parties where disclosure is required or permitted by law

• A purchaser, investor or professional adviser involved in a genuine sale, restructuring or transfer of all or part of the business, subject to appropriate safeguards

Orders are commonly dispatched through Royal Mail or another suitable tracked delivery provider. Delivery partners process the information needed to transport, deliver and track the parcel under their own responsibilities. You can review the Royal Mail privacy notice for information about its data practices.

International Transfers

Some website, payment, analytics, communications or support providers may process information in countries outside the United Kingdom. Data-protection laws in those countries may differ from UK law.

Where personal information is transferred internationally, we take reasonable steps to ensure that the transfer is permitted and that an appropriate level of protection is available. Depending on the destination and provider, this may involve UK adequacy regulations, approved contractual safeguards or another legally recognised transfer mechanism.

Third-party providers may describe their locations and international-transfer arrangements in their own privacy notices, including the Wix, PayPal, Square and Google privacy information linked within this policy.

How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security, dispute-resolution and record-keeping requirements. Retention periods may vary according to the type of record and the circumstances.

• Order, transaction, refund and accounting records may generally be retained for up to six years after the relevant transaction or the end of the applicable accounting period, and longer where a dispute or legal requirement makes this necessary

• Customer-service enquiries and complaint records are generally retained for a period proportionate to the enquiry, often up to two years after the matter is closed, unless they form part of an order, legal claim or continuing issue

• Account information may be kept while the account remains active and for a limited period after closure where needed for security, order records or legal obligations

• Marketing contact information is retained until consent is withdrawn, an objection is made or the record is no longer needed, with a limited suppression record retained where necessary to respect an opt-out

• Technical, security and analytics records are retained according to their purpose, risk and provider settings, while cookie durations are explained in the Cookie Policy

When information is no longer required, we aim to delete it, anonymise it or securely restrict further use. Anonymised information that can no longer identify an individual may be retained for statistical or business-analysis purposes.

How We Protect Personal Information

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, alteration, misuse or disclosure. Measures may include secure website technology, access controls, encrypted connections, payment-provider security, account authentication, backups and limited staff access.

No website, email system or method of electronic storage can be guaranteed to be completely secure. You are responsible for keeping account credentials confidential, using a strong unique password and contacting us promptly if you believe an account or communication has been compromised.

Your Data Protection Rights

Depending on the circumstances and the lawful basis used, you may have rights in relation to your personal information. These can include:

• The right to be informed about how your information is used

• The right to request access to personal information held about you

• The right to ask for inaccurate or incomplete information to be corrected

• The right to request deletion in circumstances where the right to erasure applies

• The right to request restriction of processing in certain circumstances

• The right to receive certain information in a portable format where data portability applies

• The right to object to processing based on legitimate interests and an absolute right to object to direct marketing

• The right to withdraw consent at any time where consent is the lawful basis, without affecting earlier lawful processing

• Rights relating to certain decisions made solely by automated means where those decisions produce legal or similarly significant effects

These rights are not absolute and may be subject to legal conditions, exemptions or the need to preserve information for a contract, legal obligation or claim. The Information Commissioner’s Office guidance on personal-data rights provides further general information.

The Girth Guru does not currently make decisions about customers solely through automated processing where the decision would have a legal or similarly significant effect. Payment providers may use automated fraud and risk tools under their own policies.

How to Exercise Your Rights

To make a data-protection request, use our contact page or email Girthguru@outlook.com. Please clearly explain what you are requesting and provide enough information for us to locate the relevant records.

We may need to verify your identity before releasing, changing or deleting personal information. This protects customers against unauthorised requests. We will respond within the period required by data-protection law and will tell you if additional time is lawfully needed because a request is complex or numerous.

There is normally no fee for exercising a data-protection right. A reasonable fee may be charged, or a request may be refused, only where the law permits this, such as when a request is manifestly unfounded or excessive.

Data Protection Complaints

If you are unhappy with the way we have used personal information, you can raise a data-protection complaint through our Contact The Girth Guru page or by emailing Girthguru@outlook.com. Please include a clear description of the issue and any relevant order or communication reference.

We will provide a clear route for complaints, acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate it without undue delay, keep you informed where necessary and communicate the outcome.

You also have the right to complain to the UK supervisory authority. Information about making a complaint is available through the Information Commissioner’s Office. We would appreciate the opportunity to address your concern directly first, but contacting us does not remove your right to approach the ICO.

Cookies and Similar Technologies

The website may use essential cookies for security, accounts, baskets and checkout, together with optional analytics, functional or marketing technologies. Where consent is legally required, non-essential technologies should not operate until an appropriate choice has been made.

You can read full details and learn how to manage your choices in our Cookie Policy. Browser settings may also allow cookies to be viewed, deleted or blocked, although blocking essential cookies can prevent parts of the website from working correctly.

Third-Party Websites and Services

Our website may contain links to websites, payment services, delivery providers or embedded tools operated by third parties. The Girth Guru does not control the privacy practices of those organisations. When you leave our website or choose a third-party service, review the privacy information supplied by that provider.

Links are provided for convenience and do not make The Girth Guru responsible for the content, security or data practices of an external website.

Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, suppliers, business practices or legal obligations change. The revised policy will be published on this page and the “Last updated” date will be amended.

Where a change materially affects how existing personal information is used, we will take any additional steps required by law, which may include providing a prominent notice or requesting a new choice.

Contact The Girth Guru

Questions about this policy, privacy rights, marketing preferences, account information or a data-protection complaint can be submitted through our customer support page or sent to Girthguru@outlook.com.

For information about purchasing, payment, delivery and customer responsibilities, please also review our Terms and Conditions and Returns, Refunds and Cancellation Policy. Answers to common order and service questions are available in our Frequently Asked Questions.