Privacy Policy

Last updated: 5 October 2026

ELEAT is a trading name of H2NUTRITION LTD, company number 13212835. We are the data controller for personal information used to run our business. Contact us about privacy or your data at hello@eleatcereal.com or H2NUTRITION LTD, 100 Cambridge Street, London, SW1V 4QG, United Kingdom.

This policy explains how we use personal information when you visit eleatcereal.com, place an order, manage a subscription, sign up for marketing or contact us.

Information we collect

We collect:

• Contact and delivery details, such as your name, email, phone number and addresses.
• Order, payment and subscription information, including purchases, refunds, payment status, delivery preferences and subscription changes. Payment providers process payment-card details securely.
• Account details, preferences, reviews and messages you send us.
• Technical and browsing information, such as IP address, device and browser details, pages viewed, cart activity and cookie preferences.

We obtain information directly from you, automatically through the website, and from Shopify and providers that process payments, subscriptions, deliveries, marketing and customer support. Public reviews and information you share through connected services may also be visible to us. Please do not send sensitive information that is unnecessary for your enquiry.

Why we use information

We rely on the following UK data-protection lawful bases:

• Contract: to take payment, fulfil orders, manage accounts and subscriptions, provide order updates and handle returns.
• Legitimate interests: to answer enquiries, improve our products and service, maintain security, prevent fraud, manage complaints and protect legal rights. These interests are balanced against your rights.
• Legal obligation: to maintain required accounting records, meet product-safety duties and respond to lawful requests.
• Consent: for marketing communications and advertising or other tracking where consent is required.

Where the law permits, we may use our legitimate interest in promoting our products to send existing customers messages about similar ELEAT products, provided an opt-out was offered when their details were collected and in each message.

We need certain contact, delivery and payment information to fulfil an order. Without it, we may be unable to complete your purchase. Marketing consent is optional.

Marketing and cookies

You can unsubscribe from marketing emails using the link in any message, or contact us to stop marketing. Order and subscription service messages continue where needed.

We use cookies and similar technologies to operate the cart and checkout, remember preferences, measure website performance and support advertising. Essential technologies support the service you request. We ask for consent before using advertising technologies and other technologies that legally require it. Your browsing and purchase activity may be used to tailor advertisements and recommendations.

You can change cookie choices through the website's cookie preferences, where available, or contact us for help. Browser settings also let you delete or block cookies, although this may affect website functions. Withdrawing consent does not affect earlier lawful use.

Who we share information with

We share relevant information with providers that help operate the business: Shopify for our store and checkout; payment providers; Skio for subscriptions; delivery and fulfilment partners; customer-support, review and IT providers; and marketing providers, including Klaviyo and Alia. Advertising and analytics partners receive information according to your choices and applicable law.

We may also share information with professional advisers, authorities where legally required, or parties involved in a proposed business sale or restructuring, subject to appropriate protections.

Shopify's role

Shopify hosts our store and processes information about visits and purchases to provide and improve its services. Information is shared with Shopify and service providers that may be located outside the UK.

We use Shopify enhanced features that can combine information about your interactions with ELEAT, other merchants and Shopify to help protect, grow and improve our business. For these purposes Shopify acts as a separate controller and handles requests about its use of that information. Advertising based on this activity is subject to your consent where required. Read Shopify's Consumer Privacy Policy and use the Shopify Privacy Portal to exercise rights, withdraw consent or object.

International transfers and retention

Some providers process information outside the UK. Where required, transfers use UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to EU standard contractual clauses. Contact us for details or a copy of the relevant safeguards.

We keep information only as long as necessary for its purpose. We consider active orders, accounts and subscriptions; accounting and legal requirements; complaint and claim periods; and whether you still want marketing. We retain a minimal suppression record when you unsubscribe so we can respect your choice. We then delete or anonymise information that is no longer needed.

Your rights and complaints

Depending on the circumstances, you can request access to your information, correction, deletion, restriction or a portable copy. You can withdraw consent at any time.

You can object at any time to direct marketing, including associated profiling. You can also object to processing based on legitimate interests.

Email hello@eleatcereal.com to exercise your rights or ask about decisions affecting you. We may need to verify your identity. We respond within the period required by law, normally one month, and explain any lawful extension or limitation.

We use appropriate measures to protect information. Our website is intended for customers rather than children. If a child has supplied personal information without appropriate permission, contact us.

We will update this policy when our practices change and give further notice where required.