Privacy policy

Privacy Policy

Last updated: August 10, 2026

David Wolfe UK operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the "Services"). David Wolfe UK is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services.

1. Personal Information We Collect

We may collect or process the following categories of personal information depending on how you interact with the Services:

  • Contact Details: Name, address, billing address, shipping address, phone number, and email address.
  • Financial Information: Credit card, debit card, financial account numbers, transaction details, and payment confirmation.
  • Account Information: Username, password, security questions, preferences, and settings.
  • Transaction Information: Items you view, put in your cart, purchase, return, exchange, or cancel.
  • Device & Usage Information: Information about your device, browser, IP address, and how you interact with or navigate the Services.

2. How We Use Your Data & Our Lawful Basis (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we must have a valid legal reason to process your personal data. We use your information for the following purposes:

  • To Provide, Tailor, and Improve Services: To perform our contract with you, process payments, fulfill orders, arrange shipping, manage your account, and facilitate returns. Lawful Basis: Performance of a Contract & Legitimate Interests.
  • Marketing and Advertising: To send promotional communications by email or text and to show you targeted online advertisements. Lawful Basis: Consent (for direct marketing) & Legitimate Interests.
  • Security and Fraud Prevention: To authenticate your account, detect or investigate fraudulent and illegal activity, and secure our checkout experience. Lawful Basis: Legitimate Interests.
  • Legal Reasons: To comply with applicable laws or respond to valid legal requests from law enforcement. Lawful Basis: Compliance with a Legal Obligation.

3. Cookies and Tracking (PECR Compliance)

In accordance with the UK's Privacy and Electronic Communications Regulations (PECR), we only deploy non-essential cookies (such as those used for Shopify's targeted advertising and analytics) with your explicit consent. You can manage or withdraw your consent at any time via the cookie banner on our website.

4. How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate purposes, including:

  • With Shopify, vendors, and third parties who perform services on our behalf (e.g., IT management, payment processing, cloud storage, fulfillment, and shipping).
  • With business and marketing partners to provide targeted advertising. You can exercise your right to opt-out of those uses.
  • In connection with a business transaction (such as a merger) or to comply with any applicable legal obligations.

5. Security and Data Retention

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security". We retain your personal information based on the following strict guidelines to comply with UK law:

  • Financial & Transactional Data: Retained for 6 years from the date of the transaction to comply with UK tax laws and HMRC requirements.
  • Marketing Data: Retained until you withdraw your consent or opt out of receiving communications.
  • Account Data: Retained for as long as your account is active or as needed to resolve disputes and enforce applicable policies.

6. Your UK GDPR Rights

Depending on where you live, you have specific rights regarding your personal information. Residents of the UK can exercise the following rights:

  • Right to Access / Know: Request access to the personal information we hold about you.
  • Right to Correct or Delete: Request that we correct inaccurate data or delete personal information we maintain.
  • Right of Portability: Receive a copy of your personal data to transfer to a third party.
  • Objection & Restriction: Ask us to stop or restrict our processing of your personal information.
  • Withdrawal of Consent: Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

7. International Transfers

We may transfer, store, and process your personal information outside the country you live in. If we transfer your personal information out of the United Kingdom, we will rely on recognized transfer mechanisms, such as the UK’s International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses, to ensure an adequate level of protection.

8. Complaints

If you have complaints about how we process your personal information, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO).

9. Contact Information

For the purpose of applicable data protection laws, we are the data controller of your personal information. Should you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: uk@davidwolfe.com or jim@thefireconsultants.com.au
  • Address: Wild FireHouse Nutrition Limited, 205 Lavender Hill, London SW11 5TB, United Kingdom