Privacy Policy
Last updated: 21 July 2026
1. Who We Are
Sable Nutrition Ltd ("Sable Nutrition", "we", "us", "our") is the data controller for personal data collected through this website (https://reviveflexible.world/) and in connection with the sale of our products, including Wellaray Coffee.
Registered address: 12 Blackfriars Road, London SE1 8EZ, United Kingdom.
Company No. / VAT: 09473628 / GB518294736.
Contact email: info@reviveflexible.world
2. What Data We Collect
We may collect and process the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity data | Full name | You - order form / contact form |
| Contact data | Phone number, email address | You - order form / contact form |
| Transaction data | Order details, quantity, SKU, price | You - order form |
| Marketing/tracking data | UTM parameters, Google Click ID (gclid) | Automatically - URL parameters |
| Technical data | IP address, browser type, device type, pages visited, time on site | Automatically - cookies and server logs |
| Usage data | How you interact with our website | Automatically - Google Analytics (if consented) |
| Communications data | Content of enquiry messages | You - contact form |
We do not collect special category data (health, biometric, genetic, racial or ethnic origin data) through this website. If you voluntarily disclose health information in a message, we will use it only to respond to your enquiry and will not process it for any other purpose.
3. How We Use Your Data
| Purpose | Legal basis (UK GDPR) |
|---|---|
| To process and fulfil your order | Article 6(1)(b) - performance of a contract |
| To respond to contact form enquiries | Article 6(1)(b) - pre-contractual steps / Article 6(1)(f) - legitimate interests |
| To comply with legal and tax obligations | Article 6(1)(c) - legal obligation |
| To analyse website performance (Google Analytics) | Article 6(1)(a) - consent (via cookie banner) |
| To serve targeted advertising (Google Ads) | Article 6(1)(a) - consent (via cookie banner) |
| To prevent fraud and misuse (honeypot, server logs) | Article 6(1)(f) - legitimate interests |
| To send direct marketing (if applicable) | Article 6(1)(a) - consent |
4. Cookies and Tracking Technologies
We use cookies and similar technologies. Consent Mode v2 is implemented: all advertising and analytics cookies are set to denied by default until you give explicit consent via our cookie banner. Strictly necessary cookies are active at all times. Full details are in our Cookie Policy.
5. Google Services
We use the following Google services, subject to your consent choices:
- Google Analytics 4 - website usage analytics. Data is pseudonymised and retained for 14 months. Google acts as a data processor.
- Google Ads / Google Tag - conversion tracking and remarketing. Activated only upon consent. Subject to Google's EU User Consent Policy.
Google's privacy policy is available at https://policies.google.com/privacy. Google may transfer data to servers in the United States under Standard Contractual Clauses.
6. Data Sharing and Transfers
We do not sell your personal data. We may share your data with:
- Order fulfilment and logistics partners - to deliver your order (name, delivery address, phone number).
- Payment processors - if applicable (subject to their own privacy policies).
- IT service providers and hosting - under appropriate data processing agreements.
- Google LLC - for Analytics and Ads, subject to consent (see Section 5).
- Legal authorities - where required by law, court order or regulatory obligation.
Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or UK adequacy decisions).
7. Data Retention
| Data type | Retention period |
|---|---|
| Order records (name, phone, product, price) | 7 years (HMRC requirement) |
| Contact form enquiries | 3 years from last contact |
| Marketing consent records | 3 years from withdrawal or last activity |
| Google Analytics data | 14 months (configured in GA4) |
| Server access logs | 90 days |
| Cookie consent records | 13 months |
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access - to request a copy of the data we hold about you (Subject Access Request).
- Right to rectification - to correct inaccurate or incomplete data.
- Right to erasure - to request deletion of your data where there is no overriding legal basis for retention.
- Right to restrict processing - to limit how we use your data in certain circumstances.
- Right to data portability - to receive your data in a structured, machine-readable format (where processing is based on consent or contract).
- Right to object - to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent - to withdraw any previously given consent at any time (via the cookie banner or by contacting us). Withdrawal does not affect the lawfulness of processing before withdrawal.
- Rights related to automated decision-making - we do not use solely automated decision-making that produces legal or similarly significant effects.
To exercise any of these rights, contact us at info@reviveflexible.world. We will respond within one calendar month. We may need to verify your identity before acting on your request.
9. Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: https://ico.org.uk
- Telephone: 0303 123 1113
- Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would, however, appreciate the opportunity to address your concerns before you contact the ICO - please reach out to us first.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our website uses HTTPS (TLS) encryption. Access to personal data is restricted to personnel who need it to perform their duties.
11. Children's Privacy
Our website and products are intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.
12. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any third-party sites you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated via a notice on our website. Continued use of our website after any changes constitutes acceptance of the updated policy.
14. Contact
For any questions or requests relating to this Privacy Policy or our data processing activities, please contact:
Sable Nutrition Ltd · 12 Blackfriars Road, London SE1 8EZ, UK
Email: info@reviveflexible.world