Privacy Policy

Last updated: September 2026

1. Who we are

Positive 4 You is operated by Positive 4 Network, a sole trader business run by Richard Leslie, based in Denton, Manchester, United Kingdom. For the purposes of UK data protection law, we are the "data controller" of the personal information described in this policy.

Contact us about privacy matters at shop@positive4you.com or via our Contact page.

2. What information we collect

• Order information: name, email address, delivery and billing address, phone number (if provided), and details of what you've ordered.
• Payment information: we do not see or store your full card details. Payments are processed securely by Stripe, our payment provider.
• Contact form messages: your name, email address, and the content of any message you send us.
• Newsletter sign-ups: your email address, if you choose to subscribe.
• Technical information: basic, non-identifying browsing information (such as your browser type) that's automatically part of any website visit.

3. How we use your information

• To process and fulfil your order, including passing your delivery details to the relevant supplier so they can dispatch your item(s) — see "Who we share your information with" below.
• To communicate with you about your order (confirmations, shipping updates, and handling any issues or returns).
• To respond to enquiries sent via our contact form.
• To send you marketing updates, but only if you've actively signed up to receive them — you can unsubscribe at any time.
• To keep our site secure and prevent fraud.

4. Our legal basis for processing

We process your order and delivery information because it's necessary to perform our contract with you (fulfilling the order you placed). We send marketing communications based on your consent, and we may process limited information on the basis of our legitimate business interests, such as preventing fraud or improving our service.

5. Who we share your information with

We share the minimum information necessary with:

• Stripe — to process your payment securely.
• Our fulfilment suppliers — your name and delivery address are shared with the relevant supplier so they can make and/or dispatch your order directly. We work with a small number of vetted suppliers in the UK, US, and internationally, depending on the item and your delivery location.
• Email delivery services — to send order confirmations and, if you've subscribed, newsletter emails.

We do not sell your personal information to anyone, for any reason.

6. International transfers

Some of the suppliers and service providers listed above may process data outside the UK/EU (for example, in the United States or China). Where this happens, we rely on providers who maintain appropriate safeguards, such as Standard Contractual Clauses, to protect your information to UK standards.

7. Cookies

Our website currently uses only essential cookies and browser storage needed for core functionality — for example, remembering what's in your shopping basket between pages. We do not currently use analytics or advertising cookies. If that changes in future, we will update this policy and add a cookie consent option.

8. How long we keep your information

We keep order records for as long as necessary to meet our legal and accounting obligations (typically at least 6 years for UK tax purposes). Contact form messages and newsletter sign-ups are kept only for as long as needed for the purpose they were collected, or until you ask us to delete them.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information, where applicable
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent for marketing at any time

To exercise any of these rights, contact us. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), though we'd appreciate the chance to resolve any concern directly first.

10. Security

We use industry-standard measures to protect your information, including secure (HTTPS) connections and PCI-compliant payment processing via Stripe. No online service can guarantee absolute security, but we take reasonable steps to protect your data against unauthorised access, loss, or misuse.

11. Children's privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time, for example as our business or the law changes. We'll update the "last updated" date at the top of this page when we do.