Privacy Policy

1. Who we are

This website, , is operated by YOUR_REGISTERED_COMPANY_NAME (company number YOUR_COMPANY_REGISTRATION_NUMBER, VAT YOUR_VAT_OR_TAX_NUMBER), the data controller for the personal data described here.

Registered address:
YOUR_STREET_ADDRESS
YOUR_CITY, YOUR_POSTCODE
YOUR_COUNTRY

Privacy contact: privacy@recoverytechlabs.com

2. What we collect

Category	Examples	Where it comes from
Identity & contact	Name, email address, phone number, delivery and billing address	You, when you order or fill in a form
Order data	Compounds and sizes ordered, order value, order history, correspondence about your order	You, and our order records
Age confirmation	The fact that you confirmed you are over 21, and when	The age verification popup, stored in your browser
Application data	Details you submit to the athlete program or affiliate program, including role, audience and jersey size	You, via those forms
Payment data	Confirmation of payment and the last four digits of a card, where applicable	Our payment processor — we never see or store full card numbers
Technical data	IP address, browser type and version, device type, pages viewed, referring site	Automatically, via server logs and analytics
Communications	Emails, WhatsApp and Telegram messages you send us	You

We do not knowingly collect special category data (health, biometric, racial or ethnic origin, political opinions, religion, sex life or sexual orientation). Please do not send us information about your health or medical history. We are not clinicians, we cannot act on it, and we do not want it in our records. If you send it anyway, we will delete it.

3. Why we use it, and our legal basis

Purpose	Legal basis
Processing and delivering your order, and providing customer support	Performance of a contract with you
Verifying you meet the minimum age of 21	Legal obligation and legitimate interests (responsible supply)
Preventing fraud, misuse and unlawful resale	Legitimate interests
Keeping accounting, tax and customs records	Legal obligation
Assessing athlete program and affiliate applications, and administering those programs	Steps at your request prior to entering a contract, and performance of that contract
Sending marketing emails or messages about products and offers	Consent, which you can withdraw at any time
Improving the website and understanding how it is used	Consent for non-essential analytics cookies; legitimate interests for aggregate server logs

4. Cookies and local storage

We keep this deliberately minimal.

• Age confirmation (essential). When you confirm your age, we store a timestamp in your browser's local storage under the key rtl_age_ok_v1 so the popup does not reappear on every page for 30 days. This never leaves your device and contains no personal information.
• Affiliate attribution (functional). If you arrive through an affiliate link, we may store the referring code for 60 days so that the referrer is credited.
• Analytics (optional). If analytics are enabled on this site, they are used only to understand aggregate traffic patterns. You can block them in your browser without losing any functionality.

You can clear local storage and cookies at any time through your browser settings. Clearing them means the age confirmation popup will appear again.

5. Who we share it with

We do not sell your personal data. We never have and we will not. We share it only with:

• Shipping and courier partners — name, delivery address and phone number, so your order can be delivered and tracked.
• Payment processors — to take payment. They are separate controllers of the payment data they handle.
• Customs and border authorities — the declaration information legally required for international shipments.
• IT and hosting providers — who host this website and our email, acting as processors under contract.
• Professional advisers and authorities — accountants, lawyers, insurers, or a regulator or law enforcement body where we are legally required to disclose.

6. International transfers

Our products are sourced from Sweden and we ship worldwide, so order data necessarily crosses borders. Where personal data is transferred outside the UK or European Economic Area, we rely on an adequacy decision where one exists, or on Standard Contractual Clauses with appropriate supplementary measures. You can request a copy of the safeguards we use.

7. How long we keep it

Data	Retention
Order and transaction records	Six years after the order, to meet tax and accounting obligations
Customer support correspondence	Two years after the matter is closed
Unsuccessful program or affiliate applications	Twelve months, then deleted
Marketing consent records	Until you withdraw consent, plus two years as proof it was given
Age confirmation timestamp	30 days, in your browser only
Server logs	Typically 30–90 days

8. Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, where we have no overriding legal reason to keep it;
• restrict or object to how we process it, including objecting to direct marketing at any time;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out;
• not be subject to a decision based solely on automated processing — we do not make any.

To exercise any of these, email privacy@recoverytechlabs.com. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to verify your identity first.

If you are unhappy with our response you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EU it is the supervisory authority of the country you live in.

9. Security

This site is served over HTTPS. Access to order and customer data is limited to staff who need it, protected by unique accounts and multi-factor authentication. Payment card details are handled entirely by our payment processor and never touch our servers. No system is perfectly secure; if a breach occurs that is likely to result in a risk to your rights, we will notify the relevant authority within 72 hours and notify you without undue delay where the risk is high.

10. Age restriction

This website is not intended for anyone under 21 and we do not knowingly collect data from anyone under that age. If you believe a minor has provided us with personal data, contact us and we will delete it.

11. Changes and contact

We may update this policy. The "last updated" date at the top always reflects the current version, and material changes will be notified on the website. Questions, requests or complaints:

YOUR_REGISTERED_COMPANY_NAME
YOUR_STREET_ADDRESS
YOUR_CITY, YOUR_POSTCODE
YOUR_COUNTRY
Email: privacy@recoverytechlabs.com
General enquiries: support@recoverytechlabs.com
Phone: +00 000 000 0000