Alluvi
Privacy
Policy
Full transparency. No data sold. Ever.
Alluvi Healthcare is committed to protecting your personal data. This policy explains exactly what we collect, why we collect it, how long we keep it, and your full rights under UK GDPR and the Data Protection Act 2018.
We are not a faceless company. We are a UK-operated, contactable business at alluvistore.co.uk — and we take your privacy as seriously as we take the quality of our research compounds.
We collect only what we need to process your order. We never sell your data to anyone. You can ask us to delete everything we hold about you at any time (subject to legal obligations like HMRC records). Your rights under UK GDPR are real — we respect them. If you ever feel we’re not, you can complain directly to the ICO at ico.org.uk. Full detail in every section below.
Overview & Scope
What this policy covers and when it applies.
This Privacy Policy explains how Alluvi Healthcare (trading at alluvistore.co.uk) collects, uses, stores and protects your personal data. We are committed to the highest standards of data protection and operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies when you:
- Visit or use alluvistore.co.uk including browsing our Research Blog
- Place an order for Retatrutide pens, Tirzepatide, BPC-157, NAD+ or any other product via our shop
- Contact us via email, WhatsApp or Telegram
- Proceed to checkout and complete a purchase
- Track an order via My Orders
- Subscribe to our newsletter or marketing communications
Who We Are
The data controller responsible for your information.
Alluvi Healthcare is a UK-based business operating at alluvistore.co.uk. We are the data controller for personal data collected through our website and communications. As data controller, we are responsible for deciding how and why your personal data is processed.
We are not an anonymous overseas operation. We are a contactable, transparent UK business — one of the reasons thousands of UK researchers and customers trust us as their Retatrutide UK source. Read our full transparency statement at About Alluvi Healthcare →
- Business name: Alluvi Healthcare
- Website: alluvistore.co.uk
- Email: sales@alluvistore.co.uk
- WhatsApp: +44 7537 823566
- Telegram: Join our channel
- Operating jurisdiction: United Kingdom
- Regulatory framework: UK GDPR · Data Protection Act 2018 · ICO oversight
Data We Collect
Only what is necessary to serve you well.
We apply the principle of data minimisation — we only collect what is genuinely necessary to process your order, provide support, and comply with legal obligations. We do not collect sensitive personal data beyond what is required.
Information you provide directly:
- Full name — to address your order, correspondence and delivery label
- Email address — order confirmations, payment instructions, dispatch notifications and support
- Delivery address — used exclusively to dispatch your Alluvi Healthcare order. Never used for marketing without consent.
- Phone / WhatsApp / Telegram handle — only if provided voluntarily; used solely for order communication
- Payment reference — we do not collect card details. Payments are via crypto or bank transfer using unique per-order instructions. No wallet addresses or bank account numbers are stored after confirmation.
- Order details — products ordered (e.g. Retatrutide 20mg, 40mg pen), quantities, discount codes used
- Support communications — messages sent via email, WhatsApp or Telegram for the purpose of resolving queries
Information collected automatically:
- IP address — retained for security, fraud prevention and legal compliance
- Browser and device info — collected via standard web server logs
- Pages visited — via analytics software (see Cookies section)
- Referral source — how you arrived at alluvistore.co.uk (e.g. search engine, social media)
- Session data — time on site, pages viewed; anonymised before retention
How We Use Your Data
Specific, documented, lawful purposes only.
Every use of your personal data has a documented, lawful purpose. We do not use your data in ways you would not reasonably expect.
- Order processing — to receive, confirm, fulfil and dispatch your order from alluvistore.co.uk and send tracking information via My Orders
- Payment communication — to send you unique, order-specific payment instructions securely. Instructions are sent to your verified email only.
- Customer support — to respond to queries, resolve disputes and assist with order issues within 1–2 hours
- Order history — to assist with repeat orders, disputes, wholesale pricing and HMRC compliance
- Newsletter & marketing — only where you have explicitly opted in. You can unsubscribe at any time via email or by contacting us directly.
- Website improvement — anonymised analytics to understand how our Research Blog and product pages are used
- Legal compliance — tax records, trading standards obligations, anti-fraud duties
- Fraud prevention — to detect and prevent fraudulent orders, chargebacks or abuse of discount codes
- MHRA compliance awareness — in accordance with MHRA guidance, we document R&D compound sales appropriately
Legal Basis for Processing
Why we are lawfully permitted to process your data.
Under UK GDPR Article 6, we must have a lawful basis for processing personal data. We rely on the following:
- Contract performance (Art. 6(1)(b)) — order processing, dispatch, payment communication and after-sales support are all necessary to fulfil our contract with you when you place an order
- Legitimate interests (Art. 6(1)(f)) — fraud prevention, security monitoring and anonymised analytics, where not overridden by your fundamental rights. We conduct a Legitimate Interests Assessment (LIA) for each such use.
- Legal obligation (Art. 6(1)(c)) — HMRC tax records (7-year retention), trading standards compliance and any law enforcement requests made under lawful authority
- Consent (Art. 6(1)(a)) — email newsletters and direct marketing, where you have given explicit, informed, freely-given consent. Withdrawable at any time with no detriment.
Data Sharing
Who sees your data and why.
We share data only where strictly necessary:
- Delivery partners — your name and delivery address are shared with couriers (Royal Mail, DPD or similar) solely to dispatch your Alluvi Healthcare order. Couriers are bound by their own GDPR obligations.
- Hosting & infrastructure providers — our UK hosting provider processes data under a Data Processing Agreement (DPA) compliant with UK GDPR Article 28
- Analytics — we use anonymised, aggregated data only. No personally identifiable information is shared with analytics providers.
- Legal authorities — only where required by law, valid court order, or lawful regulatory request. We will notify you unless legally prohibited from doing so.
- Payment processors — we do not use online card processors. Payments are via crypto or bank transfer. No card data or banking credentials are ever collected or shared.
We do not use your data for advertising, profiling or automated decision-making. We are not affiliated with any data brokers.
Data Retention
How long we keep your data and why.
We retain personal data for the minimum period necessary for each purpose. The following schedules apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Order records (name, address, products) | 7 years | HMRC requirement |
| Support communications | 2 years from last contact | Dispute resolution |
| Marketing consent records | Until consent withdrawn + 1 year | GDPR compliance evidence |
| Analytics data | 26 months (then auto-deleted) | Website improvement |
| Fraud prevention logs | 3 years | Security |
| Payment references | 7 years | HMRC requirement |
Your Rights
Under UK GDPR, you have powerful, enforceable rights.
UK GDPR gives you significant rights over your personal data. We take these seriously and respond to all requests within 30 days. Here are all your rights in full:
| Your Right | What It Means in Practice |
|---|---|
| Right of Access | Request a full copy of all personal data we hold about you (Subject Access Request / SAR). We will provide this within 30 days, free of charge. |
| Right to Rectification | Ask us to correct any inaccurate or incomplete personal data. We will action this promptly. |
| Right to Erasure | Request deletion of your data where no legal basis to retain it exists. Known as the “right to be forgotten”. |
| Right to Restriction | Ask us to pause or limit processing of your data in certain circumstances (e.g. while accuracy is disputed). |
| Right to Portability | Receive your personal data in a structured, commonly-used, machine-readable format (e.g. CSV) so you can transfer it to another controller. |
| Right to Object | Object to processing based on legitimate interests or direct marketing. We will stop unless we can demonstrate compelling grounds. |
| Right to Withdraw Consent | Withdraw marketing consent at any time. This does not affect the lawfulness of processing before withdrawal. No detriment to your order. |
| Right to Complain | Lodge a complaint with the ICO (Information Commissioner’s Office) if you believe we have breached your rights. ico.org.uk | 0303 123 1113 |
To exercise any of these rights, contact us at sales@alluvistore.co.uk or via WhatsApp. We will verify your identity before actioning the request. Full guidance on all rights: ico.org.uk/for-the-public/ →
Cookies & Tracking
What cookies we use and how to control them.
Our website uses cookies to ensure it functions correctly and to help us understand how it is used. We do not use advertising cookies or third-party tracking for marketing purposes.
- Essential cookies — required for the website to function. Include session management, shopping cart functionality and security tokens. Cannot be disabled without breaking the site.
- Analytics cookies — collect anonymised data about pages visited, time on site and referral sources. Used to improve our content and user experience. Optional — manage in your browser.
- Preference cookies — remember your choices (e.g. currency, notification preferences). Optional.
- No advertising cookies — we do not use cookies for retargeting, behavioural advertising or third-party tracking. Your browsing behaviour is not sold to advertisers.
You can control cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies may affect site functionality including checkout and My Orders.
Data Security
The technical and organisational measures we use to protect your data.
We implement appropriate technical and organisational measures (TOMs) to protect your personal data against unauthorised access, loss, destruction or disclosure. As required by UK GDPR Article 32, these measures are proportionate to the risk.
- SSL/TLS encryption (HTTPS) — all pages of alluvistore.co.uk are served over HTTPS. Data in transit is encrypted using industry-standard TLS.
- No online card payments — we intentionally do not accept card payments. All orders use crypto or manual bank transfer with unique per-order payment references — eliminating card data breach risk entirely.
- Access controls — personal data is accessible only to team members with a documented need. Access is reviewed regularly.
- Secure communications — payment instructions are sent only to the verified email address provided at order time, never to third parties.
- Regular security reviews — our hosting, website and processes are reviewed regularly for vulnerabilities.
- Data never sold — no commercial arrangement involves the transfer of personal data to any third party for marketing or commercial gain.
- Cloudflare protection — our site is protected by Cloudflare’s DDoS mitigation and security stack, reducing the risk of malicious access.
Third-Party Links
External sites referenced from alluvistore.co.uk.
Our Research Blog and product pages contain links to trusted third-party sources including:
- New England Journal of Medicine — Retatrutide Phase 2 clinical trial data (22.5% weight loss)
- PubMed / NCBI — peer-reviewed research publications on Retatrutide and peptides
- ClinicalTrials.gov — registry of active and completed Retatrutide clinical trials
- MHRA / GOV.UK — Medicines and Healthcare products Regulatory Agency guidance
- NHS England — UK-approved obesity treatment pathways
- ICO — Information Commissioner’s Office, UK data protection authority
- NIHR — UK clinical trials research participation
These external sites have their own privacy policies. We are not responsible for their content or data practices. We link to them purely as authoritative scientific and regulatory references, not for commercial reasons.
Changes to This Policy
How we notify you of updates.
We review this Privacy Policy regularly and may update it to reflect changes in our practices, technology, or legal requirements. When we make changes:
- The “Last updated” date at the top of this page will be revised
- Material changes — those that significantly affect how we use your data — will be notified to customers with active order relationships by email
- Minor changes — wording, clarifications, link updates — will be updated silently
- The current version is always available at alluvistore.co.uk/privacy-policy/
We recommend reviewing this policy periodically. If you continue to use alluvistore.co.uk after a material change, you accept the updated policy. If you do not accept changes, you have the right to request erasure of your data — see Section 8.
Contact Us
Reach us about data, privacy or anything else.
For any data protection queries, Subject Access Requests, erasure requests or complaints, contact us using the details below. We respond to all data enquiries within 30 days.
Visit our shop, read our FAQs, or track your order. Use code ALLUVI10 for 10% off. Full price list here →
Use Code ALLUVI10
10% off your entire order — all customers. Use RD20 for 20% researcher discount. UK stock · batch-tested · 1–2hr support.