Privacy Policy
Last updated: 1 July 2026
BlendMade respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and share your personal data when you visit our website www.blendmade.com (“Website”), place an order, or otherwise interact with us.
We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
BlendMade is a trading name of BlendMade Nutrition Ltd, a company registered in England and Wales (company number 17182700).
For the purposes of data protection law, we are the “controller” of the personal data we process about you.
Contact details:
- Email: hello@blendmade.com
- Address: 3 Mayhew Road, Rendlesham, Suffolk, IP12 2GT, United Kingdom
If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us using the details above.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would appreciate the chance to resolve your concerns before you contact the ICO.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity Data | First name, last name |
| Contact Data | Email address, delivery address, billing address, phone number |
| Financial Data | Payment card details (processed by our payment provider; we do not store full card numbers) |
| Transaction Data | Details of products you have ordered, order history, amounts paid |
| Technical Data | IP address, browser type and version, time zone, operating system, device type |
| Usage Data | How you use our Website, pages visited, blend configurations created |
| Marketing & Communications Data | Your preferences for receiving marketing and how you prefer to be contacted |
We do not knowingly collect any Special Category Data (such as health data, race, religious beliefs or political opinions) about you.
We do not knowingly collect personal data from children under the age of 18.
3. How We Collect Your Data
We collect personal data through:
- Direct interactions: when you create an account, place an order, subscribe to emails, contact us, or provide feedback.
- Automated technologies: as you browse our Website, we automatically collect Technical and Usage Data using cookies and similar technologies. See our Cookie Policy (section 9) for details.
- Third parties: we may receive data from analytics providers (such as Google Analytics), payment providers (such as Shopify Payments), and delivery partners.
4. How We Use Your Data and Our Legal Basis
We only use your personal data when the law allows us to. The table below sets out the purposes for which we process your data and the legal basis we rely on:
| Purpose | Legal Basis |
|---|---|
| To register you as a customer and manage your account | Performance of a contract |
| To process and fulfil your orders (including payment, packaging, dispatch and delivery) | Performance of a contract |
| To communicate with you about your orders (dispatch notifications, delivery updates) | Performance of a contract |
| To respond to your queries and complaints | Performance of a contract / Legitimate interest |
| To send you marketing communications (where you have opted in or are an existing customer) | Consent / Legitimate interest (soft opt-in under PECR) |
| To improve our Website, products and services | Legitimate interest |
| To administer and protect our business and Website (fraud prevention, security) | Legitimate interest / Legal obligation |
| To comply with legal and regulatory obligations (e.g. tax, food safety) | Legal obligation |
5. Who We Share Your Data With
We may share your personal data with the following categories of third parties, solely for the purposes described above:
- Shopify: our e-commerce platform, which processes orders and payments on our behalf.
- Payment processors: such as Shopify Payments, PayPal or Stripe, to process your payment securely.
- Delivery partners: such as Royal Mail or courier services, to deliver your order.
- Cloud hosting providers: such as Microsoft Azure, which hosts our pricing and product configuration services.
- Analytics providers: such as Google Analytics, to help us understand Website usage.
- Email service providers: to send order confirmations and, where you have consented, marketing emails.
- Professional advisors: including accountants, lawyers and auditors, where necessary.
- HMRC, regulators and law enforcement: where required by law.
We require all third parties to respect the security of your personal data and to process it in accordance with applicable law. We do not sell your personal data to any third party.
6. International Transfers
Some of our third-party service providers may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure that appropriate safeguards are in place, such as the use of the UK International Data Transfer Agreement or transfers to countries with an adequacy decision from the UK Government.
Please contact us if you would like further information about the safeguards we use.
7. Data Security
We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration or disclosure. These include:
- Use of HTTPS/TLS encryption across our Website;
- Secure payment processing through PCI-DSS compliant providers;
- Access controls limiting who can view personal data;
- Regular review of our security practices.
While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy legal, accounting and reporting requirements.
As a guide:
- Order and transaction data: retained for 7 years from the date of the transaction (for tax and accounting purposes as required by HMRC).
- Account data: retained for as long as your account is active. If your account is inactive for 3 years, we may contact you before deleting it.
- Marketing preferences: retained until you withdraw consent or unsubscribe.
- Website analytics data: typically retained in anonymised or aggregated form.
9. Cookies
Our Website uses cookies and similar technologies to provide functionality, analyse traffic and personalise your experience.
Types of cookies we use:
| Type | Purpose | Examples |
|---|---|---|
| Strictly necessary | Essential for the Website to function (e.g. shopping cart, checkout, security) | Shopify session cookies |
| Analytics | Help us understand how visitors use the Website | Google Analytics |
| Marketing | Used to show relevant advertising | Facebook Pixel (if enabled) |
You can manage your cookie preferences through Shopify’s cookie consent banner on the Website. You can also set your browser to refuse all or some cookies, but this may affect Website functionality.
For more information about cookies, visit www.allaboutcookies.org.
10. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your data where there is no compelling reason for us to continue processing it.
- Right to restrict processing: request that we suspend processing in certain circumstances.
- Right to data portability: request a copy of your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello@blendmade.com. We will respond within one month. We may need to verify your identity before processing your request.
There is no fee for exercising your rights. However, we may charge a reasonable fee if a request is clearly unfounded or excessive, or we may refuse to comply.
11. Marketing
We may send you marketing emails about products and offers we think you may be interested in. We will only do so where:
- you have given your explicit consent (e.g. by opting in at checkout); or
- you are an existing customer and we are marketing similar products (under the “soft opt-in” permitted by the Privacy and Electronic Communications Regulations 2003), and you have not opted out.
Every marketing email we send includes an unsubscribe link. You can also opt out at any time by contacting us at hello@blendmade.com.
Opting out of marketing will not affect service-related communications (e.g. order confirmations, delivery updates).
12. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.
13. Changes to This Policy
We may update this privacy policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to check this page periodically.
14. Contact Us
If you have any questions about this privacy policy, or wish to exercise your data protection rights, please contact us:
- Email: hello@blendmade.com
- Address: [Your Registered Address]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Helpline: 0303 123 1113