Privacy Policy

Who we are

The Lifting Lab is a trading name of THE LIFTING LAB LTD, registered in England and Wales, company number 17497631, registered office 82a James Carter Road, Mildenhall, IP28 7DE. You can contact us at help@theliftinglab.co.uk.

What data we collect

• Email address — collected when you sign in via magic link. Used to authenticate your site account and communicate about it.
• Contact enquiries — your name, email and message when you submit the contact form, held for staff review. Please do not include payment card details or health records.
• Shop orders — Shopify handles checkout, payments, purchase accounts and order communications. Orders include your name, contact details, delivery address and purchased items.
• Usage data — if you accept optional analytics, Google Analytics 4 (GA4) collects page visits and feature interactions, browser/device information and browser/session identifiers. Analytics is off before you accept and after you reject or withdraw.
• Stack and favourites data — products you save or add to your stack, stored in our database linked to your account.

Why we collect it

• To provide and improve the service (account features, stack builder, favourites)
• To understand how the site is used and improve the product (analytics)
• We do not sell your data to third parties

Legal basis

We process your email address on the basis of contract (to provide the service you signed up for). Optional analytics runs on the basis of your consent. Use Analytics preferences in the footer of any page to accept, reject or withdraw. Withdrawing stops future collection; it does not undo information already sent to Google.

How long we keep it

Your account and associated data is retained for as long as your account is active. If you request deletion, we will remove your account and associated data within 30 days. Your analytics choice is saved in this browser for up to 180 days. Google processes information already collected under its own service terms and privacy policy; this page does not specify a verified GA property retention period.

Third-party services

• Supabase — our authentication and database provider. It stores site account identifiers, saved stacks and favourites, and contact submissions. Where the planned shop integration is activated, private order records needed for fulfilment are also held there. See Supabase Privacy Policy.
• Shopify — provides the shop at shop.theliftinglab.co.uk. TLL receives order information needed to fulfil purchases and handle support and refunds; Shopify processes payments through its payment providers. TLL does not require your full payment card details. See Shopify Privacy Policy.
• Suppliers and couriers — fulfilment requires sharing the delivery name, address, necessary contact details and ordered items with the supplier fulfilling that order and its courier. Suppliers do not need your saved stack or full payment card details. Sharing for the planned automated integration remains subject to activation and review.
• Google Analytics 4 — optional usage analytics, enabled only after you accept. See Google Privacy Policy.
• Amazon Associates — we may earn a commission from qualifying purchases via Amazon links. See our Affiliate Disclosure.

Shop data and review outstanding

Purchase and delivery data is used to perform the sales contract; records required for tax and accounting are retained to meet legal obligations. Account deletion does not automatically erase records we must keep. Contact enquiries are used to respond to your request. TODO for Toby/Lifty: confirm the enquiry lawful basis, order and enquiry retention periods, supplier and courier recipients, Supabase hosting region, service agreements and any international transfer safeguards before publication. This draft does not claim that all data stays in the UK or that a unified site/shop account is active.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email help@theliftinglab.co.uk.

Cookies

We use storage needed for account authentication and saved-stack features. Optional Google Analytics uses _ga and _ga_R3YMG6TYXF cookies to distinguish browsers and sessions after acceptance. New analytics cookies are limited to this website host. Rejecting or withdrawing removes these app-owned cookies, including legacy parent-domain variants, without removing authentication or cart cookies. Your choice is saved separately in local storage (tll.analytics-choice.v1); a necessary preference cookie may remember rejection if local storage cannot be updated. If your browser cannot save a choice, analytics stays off. The Shopify shop has its own storage and privacy controls; this website choice does not configure Shopify.