Privacy policy

Last updated: 14 October 2026

This policy explains how IRONKIND looks after your personal data when you visit ironkind.com, buy from us, take our protein quiz, join our referral programme, or contact us about coaching. We try to say it in plain English. If anything is unclear, email us at hello@ironkind.com.

1. Who we are

IRONKIND ("we", "us", "our") is the "controller" of your personal data, which means we decide how and why it is used.

• Company: IRONKIND LTD, registered in England and Wales, company number 16876360
• Registered office: Bank Farm Buildings, Chester Road, Chester, CH3 6HJ
• Email: hello@ironkind.com

2. What this policy covers

This policy covers ironkind.com and the things you can do through it: shopping, the protein quiz, the referral programme, our email list, and contacting us (including about coaching). It does not cover other websites that we link to, such as payment pages or social media. Please read their policies too.

3. The personal data we collect, and why

We only collect what we need. Below, "lawful basis" is the legal reason the law lets us use your data.

When you buy from us

• What: your name, delivery and billing address, email address, phone number (if you give it), what you ordered, and delivery details. Your card or payment details go straight to our payment provider. We do not see or store your full card number.
• Why: to take your order, deliver it, give you receipts and support, and keep our accounts.
• Lawful basis: performing our contract with you; and legal obligation (keeping accounting and tax records).

The protein quiz

• What: your email address (only if you want the full result and a code); your age group (under 18, 18 to 64, or 65 and over); your training type and how many days a week you train; and the result we calculate (your daily protein target). We also record that you ticked the box to hear from us, and when.
• Your weight is typed into the quiz to work out your result, but we do not keep it. We store the result, not your weight.
• The health question: the quiz asks whether you are pregnant or breastfeeding, have kidney problems, or have been told by a doctor to limit protein. If you say yes, or you are under 18, the quiz stops and we do not ask for your email or keep your answers.
• Why: to show you your result, make you a code for 15% off your next order that works once and expires after seven days, email your plan and code to you, and send you one reminder shortly before the code runs out.
• Lawful basis: your consent (the box you tick), and our legitimate interest in giving you what you asked for. You can withdraw consent at any time (see "Marketing choices").
• Automated calculation: your result is worked out automatically from your answers using a published formula. It does not make any legal decision about you or have a similar significant effect. It is general guidance and not medical advice.

The referral programme

• What (people who join): your email address and the private link we create for you. We record how many friends have confirmed through your link, any rewards you unlock, the flavour you choose, and delivery details for rewards.
• What (friends who use a link): the email address you enter, and a note of which link you came from. We email you once to confirm it is really you, and may send one reminder. We do not tell the person who invited you your email address.
• Why: to run the programme, count confirmed friends, send rewards and codes, and stop abuse.
• Lawful basis: performing the programme terms you joined under; our legitimate interest in preventing misuse; and your consent for marketing emails.

Coaching and enquiries

• What: your name, contact details, and anything you tell us about your training, goals and lifestyle when you get in touch or book a free fit call.
• Health information: coaching may involve information about your health or injuries, which the law treats as "special category" data. We will only ask for what we need, and only use it with your explicit consent, to give you coaching.
• Lawful basis: taking steps at your request before a contract, and performing the contract once you join; and your explicit consent for any health information.

Wholesale (trade customers)

• What: your business name and type, your name, email, phone number, delivery address, VAT number (if you give one), website, how you plan to sell, and what you tell us about expected orders. If you buy from us: your orders, invoices, payments, delivery details and any sample pack. When you sign in, we keep a record of the one-time link we sent (stored as a fingerprint, not the link) and when you signed in.
• Why: to decide whether to open an account, supply and deliver your orders, send invoices and reminders, keep our accounting and food-traceability records, and answer your questions.
• Lawful basis: taking steps at your request before a contract, and performing the contract once you buy; legal obligation (accounting, tax and food-safety records); and our legitimate interest in running our trade business and contacting business customers about their accounts.
• Who sees it: invoices are kept as PDFs in a private Google Drive folder, emails go through Brevo, and orders are delivered by Royal Mail or another carrier.

Our email list and marketing

• What: your name (if given), email address, and what you have signed up to.
• Why: to send you news, offers and information about IRONKIND.
• Lawful basis: your consent. If you have bought from us before, we may also email you about similar products on the basis of our legitimate interests, and you can always say no.

Using our website

• What: technical data such as your IP address, browser and device type, pages you view and how you arrived, and whether you saw an advert of ours. This is collected through cookies and similar tools (see section 4).
• Why: to keep the site secure and working, understand what is useful, and measure our advertising.
• Lawful basis: our legitimate interest in running a secure site (for essential cookies); and your consent for analytics and advertising cookies.

When you contact us

• What: your name, email and the contents of your message.
• Why: to reply and keep a record.
• Lawful basis: our legitimate interest in answering you, or taking steps at your request.

4. Cookies and similar technologies

When you first visit ironkind.com you will see a cookie banner. You can accept all, decline non-essential cookies, or manage them. Essential cookies keep the site and checkout working and cannot be switched off. Others are used only if you agree:

• Analytics: Google Analytics and Google Tag Manager, to understand how the site is used.
• Advertising: the Meta (Facebook and Instagram) pixel, to measure and improve our adverts and show them to people who may be interested.
• Quiz and referral memory: in your browser's own storage (not a cookie) we keep a short note that you have already signed up to the quiz, and, if you came through a friend's referral link, a note of that link for up to 30 days so the referral can be counted. Clearing your browser data removes these.

You can change your cookie choices at any time using the cookie settings on the site, or through your browser settings.

5. Who we share your data with

We do not sell your personal data. We share it only with companies that help us run IRONKIND, and who may only use it on our instructions:

• Squarespace (website, online shop, our customer and email contact list).
• Payments: Squarespace Payments, which processes your card or wallet payment for us.
• Delivery: Royal Mail, who deliver our orders.
• Google (Google Workspace for our email, Google Sheets and Apps Script, which run the referral programme records, and Google Analytics and Tag Manager).
• Brevo (an email sending service in the EU, which sends your quiz plan and code).
• Meta (the advertising pixel, if you accept advertising cookies).
• Professional advisers such as accountants, insurers and lawyers, where needed.

We may also share data if the law requires it (for example with the police or a regulator), or to protect our rights, or if the business is ever sold, in which case the new owner would have to protect your data in line with this policy.

6. Sending data outside the UK

Some of the companies above are based, or store data, outside the UK, for example in the United States or the EU. When that happens we make sure it is protected, using one of the safeguards the law allows: a UK adequacy decision (the EU and the UK-US data bridge for certified US companies are examples), or standard contract clauses approved for the UK. You can ask us for more detail using the contact details above.

7. How long we keep your data

We keep your data only for as long as we need it for the reasons above, and we review the records we hold at least once a year and delete what we no longer need. These are the longest periods we expect to keep things:

If you ask us to delete your data, we will do so unless the law says we must keep it (for example, accounting records).

8. Your rights

Under the UK GDPR you have the right to:

• be told what we do with your data (this policy);
• access the personal data we hold about you;
• correct anything that is wrong;
• erase your data, in some situations;
• restrict how we use it, in some situations;
• object to us using it for our legitimate interests or for direct marketing, which we will always stop;
• take it with you (portability), for data you gave us and that we process by consent or contract;
• withdraw your consent at any time, without affecting what we did before; and
• not be subject to a solely automated decision that has a legal or similarly significant effect on you. We do not make decisions like this.

To use any of these rights, email hello@ironkind.com. We will reply within one month. We may need to check who you are first. It is free, unless a request is clearly unreasonable or repeated.

If you are unhappy, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

9. Marketing choices

You can stop marketing emails at any time by clicking Unsubscribe at the bottom of any email, or by emailing us. If you unsubscribe, we will still send emails that you need, for example about an order you have placed. If you used a code from the quiz, unsubscribing does not cancel it.

10. Children

Our website and shop are not aimed at children, and the protein quiz is for adults aged 18 and over. We do not knowingly collect data from anyone under 18 through the quiz. If you think a child has given us their data, please contact us and we will delete it.

11. Keeping your data safe

We use sensible technical and organisational measures: secure, password-protected accounts with the companies above, limited access, and keeping your card details with our payment provider and not on our systems. No system is perfectly secure, so please take care too, for example by keeping the private links we email to you to yourself. If there is ever a breach that puts you at risk, we will tell you and the ICO as the law requires.

12. Changes to this policy

We may update this policy from time to time. We will put the new version on this page with a new "last updated" date, and if the change is important we will tell you by email.

13. Contact us

Questions about this policy or your data: hello@ironkind.com, or write to IRONKIND LTD, Bank Farm Buildings, Chester Road, Chester, CH3 6HJ.