Introduction

Welcome to Tier One Supplements. We are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR). This privacy policy outlines how we collect, use, and protect your personal data when you interact with our website, services, and marketing communications.

By using our website or services, you agree to the collection and use of information as described in this policy.

Who We Are

Tier One Supplements (“we”, “us”, “our”) is a company registered in [Insert Country/State]. Our primary business activity is providing high-quality nutritional supplements.

Contact Information

If you have any questions about this Privacy Policy, please contact us at:

• Email: team@tieronesupplements.com
• Tier One Supplements, Hereford, United Kingdon

Information We Collect

We collect various types of information when you visit our website, place an order, subscribe to our newsletters, or engage with our services. This includes:

1. Personal Information: Information such as your name, email address, phone number, shipping address, and payment details when you make purchases or subscribe to our services.
2. Usage Data: Information collected automatically when you visit our website, including IP address, browser type, device information, and browsing patterns (such as pages visited).
3. Cookies: We use cookies and similar tracking technologies to enhance your browsing experience. Cookies help us improve website functionality, understand user behavior, and deliver personalized content.

How We Use Your Data

We use your personal data in the following ways:

1. To Provide Services: Processing orders, delivering products, and providing customer support.
2. Email Marketing: If you have opted in, we use your email address to send you promotional emails, product updates, and newsletters. We use Brevo (formerly Sendinblue) for email marketing, which ensures your data is handled securely and in compliance with GDPR.
3. Analytics: We use Google Analytics to collect information about website usage. This helps us analyze trends, improve website performance, and enhance user experience. The data collected by Google Analytics is anonymized, and no personally identifiable information (PII) is shared.
4. Compliance with Legal Obligations: We may use or share your data to comply with legal requirements, such as fraud prevention or responding to lawful requests from authorities.

Legal Bases for Processing

We process personal data based on the following lawful bases:

• Consent: When you subscribe to our email list or consent to the use of cookies.
• Contractual Obligation: When necessary to process orders and deliver products.
• Legitimate Interest: For analytics, customer support, and marketing communications (where legally permitted).

Third-Party Services

We use trusted third-party services to manage parts of our business operations. These include:

• Google Analytics: We use Google Analytics to track and report website traffic. Google may collect data such as your IP address, location, and browsing activity. You can opt-out of Google Analytics tracking via Google’s Opt-Out Tool.
• Brevo (formerly Sendinblue): We use Brevo for email marketing, which processes personal data like your email address, engagement with emails (opens, clicks), and other marketing activities. Brevo complies with GDPR and ensures secure data handling.

For more information on how these services handle your data, you can review their privacy policies:

• Google Analytics Privacy Policy
• Brevo Privacy Policy

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, such as fulfilling legal, accounting, or reporting obligations. We securely delete or anonymize data when it is no longer required.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

1. Right to Access: You can request access to the personal data we hold about you.
2. Right to Rectification: You have the right to correct any inaccurate or incomplete personal data.
3. Right to Erasure: You can request that we delete your personal data in certain circumstances (e.g., when it’s no longer necessary for the purpose it was collected).
4. Right to Restrict Processing: You have the right to request the restriction of the processing of your data in certain situations.
5. Right to Object: You can object to the processing of your personal data for marketing purposes.
6. Right to Data Portability: You can request the transfer of your data to another service provider in a structured, commonly used, and machine-readable format.
7. Right to Withdraw Consent: If we process your data based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at team@tieronesupplements.com. We will respond to your request within one month.

Data Security

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no online service is completely secure, and we cannot guarantee absolute security.

International Data Transfers

If your data is transferred outside of the European Economic Area (EEA), we ensure that it is protected with appropriate safeguards, such as Standard Contractual Clauses (SCCs) or similar mechanisms, to ensure the same level of data protection as required by GDPR.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. Any updates will be posted on this page, and, where appropriate, we will notify you by email. Please check back regularly to stay informed of any changes.

Complaints

If you believe your rights under GDPR have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence.