Last updated: 9 September 2026
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.togetherhealth.co.uk (the "Site") or use our supplement recommender.
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as "Device Information".
We collect Device Information using the following technologies:
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information".
When you use our supplement recommender, we collect the answers you give to the recommender questionnaire. This may include your gender, age range and life stage; your diet and any dietary notes; lifestyle information such as how much fruit, vegetables, dairy and oily fish you typically eat; the wellbeing goals you select (for example energy, sleep, digestion, immunity or stress); nutrients you tell us you are concerned about; supplements you currently take; and anything you choose to tell us in your own words. Anything you type in your own words is automatically screened to remove identifying details such as names, places, dates and references to a doctor, and only that screened version is stored. The recommender never asks for your name. It does not ask for your email address unless, once your recommendations are on screen, you choose to have them emailed to you; that step is optional and you can skip it. When you give your consent at the start of the recommender we also record the date and time, the wording you agreed to, a shortened version of your IP address (with the final part removed) and your browser type, as evidence that consent was given. Your saved results are identified by a random reference. If you go on to place an order, we attach that reference to the order so that we can tell it came from the recommender, and we remove it from the order once the order has been recorded. The technical logs of the recommender service, which include the address of any results page you open, are kept for a few days for troubleshooting. We refer to all of this as "Recommender Information".
When we talk about "Personal Information" in this Privacy Policy, we are talking about Device Information, Order Information and Recommender Information.
We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
We use Recommender Information to generate and save your personalised supplement recommendations and to keep the recommender working, including diagnosing technical errors. The recommender provides general dietary support based on the answers you give; it is not medical advice and is not a substitute for advice from a qualified healthcare professional.
If you ask us to email your recommendations to you, we send your email address, the list of products we recommended and a link to your results page to our email platform (Klaviyo), which sends you that email. If you also tick the newsletter box at that step, Klaviyo adds you to the Together for Life newsletter; that box is unticked unless you choose it. Your answers are not sent. We do not use the products we recommended to you to target or segment any other marketing; the only email built from them is the one you asked for. You can unsubscribe from the newsletter at any time. We do not otherwise use your Recommender Information for marketing.
We also use your answers to understand how the recommender is used and to improve it and our product range (analytics and service improvement); after 30 days we keep them in anonymised form only.
We collect certain information that is classified as Special Category data under data protection law. This includes sensitive health information that you choose to provide when you use the Together Health supplement recommender, or when you contact our Customer Services team, such as your wellbeing goals, nutrients you are concerned about, or any health concerns or symptoms you share with us.
We will only collect and process this data where you have given your explicit consent.
When you submit this information through the recommender, it is securely stored in the database that holds your recommender submission (Supabase). Your answers are not copied to our email or marketing platform. If you ask for your recommendations by email, only the products we recommended and a link to your results are sent to it, as described above.
We use this data strictly for the following purposes:
This may involve limited profiling in order to match your responses to relevant products or information. This profiling is restricted to the context of your recommender responses and is not used for automated decision-making with legal or similarly significant effects.
Your Special Category data will not be used for:
We only share this data with the trusted service providers who run the recommender for us (our AI provider Anthropic, our hosting provider Cloudflare, and our database provider Supabase), and only where necessary to deliver the services described above. Klaviyo, our email platform, never receives your answers; if you ask for your recommendations by email it receives the recommended products and a link to your results, and nothing else about the recommender. If you place an order, the order briefly carries the random reference described above so that we can tell the order came from the recommender, and we remove it once the order has been recorded. None of your answers are ever written into Shopify.
Retention. We automatically delete your recommendation results 30 days after you take the recommender, the point at which your saved-results link also expires. At the same time we delete any email address you gave us, remove the link between your answers and any order you placed, remove the technical identifiers (the shortened IP address and browser type) recorded when you gave consent, and replace the random reference with a new one, so that nothing that carried the old reference, such as an order, an email or a saved link, can be matched to your answers again.
What is left is your set of questionnaire answers, along with any comments you typed in the screened form described above, and nothing attached that identifies you or gives a route back to you. At that point the information is anonymised and is no longer personal data, and we keep it indefinitely to understand how the recommender is used and to improve it and our products.
If you asked for your recommendations by email, your email address, the products we recommended and the results link (which stops working after 30 days) remain on the profile Klaviyo holds for you until you ask us to delete them or, if you joined the newsletter, until you unsubscribe.
Because of this, please make any request to delete your recommender answers within 30 days of taking the recommender, quoting your order number, the reference shown on your results page, or the email address you gave us. After 30 days we are no longer able to identify which submission was yours, so we cannot retrieve or delete it individually.
You may withdraw your consent at any time, or request deletion of this data, by contacting our Privacy Compliance Officer at hi@togetherhealth.co.uk. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdraw it.
We will always handle your personal data with care and in accordance with applicable data protection laws.
We share your Personal Information with third parties to help us use your Personal Information, as described above:
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Some of our service providers process personal data outside the United Kingdom. This includes processing in the United States (for example by Anthropic, Cloudflare, Supabase and Klaviyo), in Canada (for example by Shopify), and in the European Economic Area.
Whenever we transfer personal data outside the United Kingdom, we take steps to ensure that the transfer is lawful and that the information receives an appropriate level of protection. Depending on the destination and the recipient, we may rely on:
Where required, we may also complete a transfer-risk assessment and put additional contractual, organisational or technical safeguards in place. You may contact us for further information about the safeguards used for a particular international transfer.
As described above, we use Device Information and Order Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We do not use Recommender Information for this purpose. For more information about how targeted advertising works, and about the privacy settings available to you, you can visit the Network Advertising Initiative's ("NAI") guidance at thenai.org/how-to-opt-out.
You can opt out of targeted advertising by using the links below:
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at optout.aboutads.info.
Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.
If you are in the United Kingdom, you have the rights set out below under UK data protection law. If you are in the European Economic Area, you have equivalent rights under the EU GDPR.
To exercise any of these rights, please contact our Privacy Compliance Officer using the details below. You will not normally need to pay a fee. We may need to ask for information to confirm your identity before responding, so that personal data is only shared with the person entitled to receive it. We aim to respond to all valid requests within one month; if your request is particularly complex we will let you know and keep you updated.
We process your information in order to perform contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue the legitimate business interests listed above, or to comply with a legal obligation. For your Recommender Information, including any health-related answers, we rely on your explicit consent, which you give before the recommender begins. If you ask for your recommendations by email, we send that email because you asked for it, and we add you to our newsletter only on the separate consent you give by ticking the newsletter box at that step. You can withdraw either at any time; unsubscribing from the newsletter withdraws the second.
If you have a concern about how we use your personal data, please contact us first using the details below and we will do our best to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
We delete your recommendation results, and any email address you gave us for them, 30 days after you take the recommender, and from then on keep only an anonymised version of your answers, which we retain indefinitely for analytics and to improve our products, as described in the Special Category Data section above. Requests to delete an individual submission need to reach us within those 30 days.
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. The date at the top of this policy shows when it was last updated. Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention.
The Site is not intended for individuals under the age of 18, and the supplement recommender is not intended for, and should not be used by, individuals under the age of 18.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact our Privacy Compliance Officer at hi@togetherhealth.co.uk or mail us at:
Together Health Ltd, Re: Privacy Compliance Officer, No. 1 Aire Street, Leeds, LS1 4PR, United Kingdom.