Privacy Policy

This policy explains how Leopard Supplements Ltd ("we", "us", "our") collects and uses your personal data when you visit our website, take the quiz, place an order, or join the Pride membership. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Leopard Supplements Ltd, a company registered in England & Wales. Contact: hello@leopard-fuel.com.

2. What we collect

• Account data — name, email address, password (hashed).
• Order data — billing and delivery address, order history, payment confirmation (we do not store card details).
• Quiz responses — answers you give during the supplement quiz, your derived archetype, recommended product, and stated biological sex (used to tailor recommendations).
• Usage data — IP address, device, browser, pages visited, cookies (see Cookie Policy).
• Communications — emails you send us and our replies.

3. Lawful basis for processing

• Contract — to fulfil your order and provide your account.
• Legitimate interests — to improve our products, prevent fraud, and personalise quiz recommendations.
• Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legal obligation — to keep accounting and tax records.

4. Who we share data with

• Payment provider — to process your payment securely.
• Hosting & database — Lovable Cloud (built on Supabase / AWS, EU region).
• Email & shipping providers — to deliver order confirmations and physical products.
• HMRC and authorities — where legally required.

We never sell your personal data.

5. International transfers

Your data is stored within the UK or EEA where possible. Where transfers outside the UK are necessary (e.g. some sub-processors), we rely on the UK International Data Transfer Agreement or adequacy regulations.

6. How long we keep your data

• Account & order records: 7 years (HMRC requirement).
• Quiz responses: 24 months from your last activity.
• Marketing list: until you unsubscribe.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent for marketing at any time.
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email privacy@leopard-fuel.com.

8. Security

We use encryption in transit (HTTPS) and at rest, row-level security on our database, and limit access to authorised personnel only. No system is perfectly secure, but we take reasonable steps to protect your data.

9. Changes

We may update this policy. Material changes will be notified by email or via a banner on the site.