Privacy policy
Last updated: 22 July 2026
1. Who we are
EdgesLabs LTD, trading as Edges.Club, is the data controller for the personal information described in this policy.
- Registered in England and Wales, company number 15628569
- Address: Unit 2a Trinity Business Centre, Hoyle Street, Warrington, Cheshire, WA5 0LW, United Kingdom
- Email: support@edges.club
- ICO registration number: ZB843780
This policy explains what personal information we collect, why, what we do with it, and what rights you have. It applies to our website www.edges.club and to any dealings you have with us.
2. What we collect
Information you give us
| What | When |
|---|---|
| Name, email, delivery and billing address, phone number | When you place an order |
| Order and payment confirmation details | When you buy |
| Account username and password | If you create an account |
| Subscription preferences and delivery schedule | If you subscribe |
| Marketing preferences | When you sign up or update them |
| Correspondence, including any health information you choose to tell us | When you contact support |
| Reviews, photographs and comments | When you submit them |
A note on health information. You do not need to tell us anything about your health to buy from us. If you choose to mention a health condition, allergy or medication when contacting support, we will use that only to answer your question and handle any safety issue. Health data is "special category" data and we rely on your explicit consent, or on our obligations relating to product safety, to process it. We keep it to the minimum necessary.
Information we collect automatically
When you visit the Site we may collect device and browser information, IP address, approximate location derived from IP address, pages viewed, referring site, and interaction data. We collect this through cookies and similar technologies — see our Cookie Policy and section 6 below. Non-essential cookies are only used if you consent via our cookie banner.
Information from others
- Shopify, which hosts our store and processes orders on our behalf
- Payment providers (Shopify Payments, PayPal, Klarna), which confirm payment and provide fraud signals. We never see or store your full card number.
- Delivery carriers, which provide tracking and delivery status
- Advertising and analytics platforms, where you have consented to cookies
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, handling returns and refunds | Contract — necessary to perform our contract with you |
| Managing your account and subscription | Contract |
| Taking payment and preventing fraud | Contract, and legitimate interests in preventing fraud and loss |
| Customer support and complaints | Contract, and legitimate interests in running our business well |
| Product safety, including investigating adverse reactions and managing recalls | Legal obligation under food safety law, and vital interestswhere someone's health is at risk |
| Keeping accounting and tax records | Legal obligation |
| Marketing emails and SMS | Consent, or the soft opt-in for existing customers (see section 5) |
| Advertising and analytics cookies, and audience matching with ad platforms | Consent |
| Publishing reviews you submit | Consent |
| Improving our products, site and service | Legitimate interests in developing our business |
| Defending legal claims and enforcing our terms | Legitimate interests in protecting our position |
Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights. You can ask us for details of that assessment, and you can object — see section 8.
4. Who we share it with
We share personal information with the following categories of recipient, only as needed:
| Recipient | Purpose |
|---|---|
| Shopify Inc. | E-commerce platform, hosting, order processing, customer accounts |
| Shopify Payments / PayPal / Klarna | Payment processing and fraud prevention |
| Delivery carriers: Royal Mail, DPD, Evri, Fedex, Yodel | Delivering your order |
| Email and SMS marketing platform: Shopify email | Sending communications you have agreed to receive |
| Product review platform: Judg.me/Trustpilot | Collecting and displaying reviews |
| Affiliate platform (Affiliatery) | Operating our affiliate programme |
| Analytics and advertising platforms — Google, Meta | Measuring site performance and, with your consent, advertising |
| Our accountants and professional advisers | Accounting, tax and legal advice |
We may also disclose information where required by law, to a regulator or law enforcement, to establish or defend legal claims, or in connection with a sale or restructuring of our business.
We do not sell your personal information.
5. Marketing
We will send you marketing emails or texts only where:
- You have opted in — for example by ticking the newsletter box or entering your email into our signup form; or
- You are an existing customer who bought a similar product from us, we collected your details during that sale, and we gave you an easy chance to opt out at that point and in every message since (the "soft opt-in" permitted under the Privacy and Electronic Communications Regulations).
You can opt out at any time. Use the unsubscribe link in any email, reply STOP to any text, or email support@edges.club. We will action it promptly and at no cost to you.
If you opt out of marketing, we will still send you service messages about orders you have placed — order confirmations, dispatch notices, subscription renewal reminders and refund confirmations. You cannot opt out of these while you have an active order or subscription.
We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.
6. Cookies
We use cookies and similar technologies. Strictly necessary cookies — those that make the basket, checkout, login and security work — are always on, because the Site cannot function without them.
All other cookies, including analytics and advertising cookies, are set only after you consent via our cookie banner. Rejecting is as easy as accepting, and you can change your mind at any time through the cookie settings link in our footer.
Full details of the cookies we use are in our Cookie Policy.
7. How long we keep it
| Information | Retention period |
|---|---|
| Order records, invoices and transaction data | 6 years from the end of the financial year, to meet HMRC requirements |
| Customer account details | While your account is active, then 2 years after your last order, then deleted or anonymised |
| Marketing contact details and consent records | Until you opt out, then 2 years to record that you opted out (so we do not contact you again) |
| Customer support correspondence | 2 years from resolution |
| Product safety and adverse reaction reports | 10 years |
| Website analytics data | 26 months |
Where we no longer need information, we delete it or irreversibly anonymise it.
8. Your rights
Under UK GDPR you have the right to:
- Be informed about how we use your data — this policy
- Access a copy of the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure of your data in certain circumstances
- Restrict processing in certain circumstances
- Data portability — receive data you gave us in a machine-readable format, or have it sent to another controller
- Object to processing based on legitimate interests, and to direct marketing at any time (for direct marketing this is absolute — we must stop)
- Withdraw consent at any time where we rely on it. This does not affect processing carried out before you withdrew.
To exercise any right, email support@edges.club. We will respond within one month. We may extend this by two further months for complex requests, and will tell you if we do.
There is no charge. We may ask you to verify your identity before we act, and we may refuse or charge for requests that are manifestly unfounded or excessive — we will explain why if so.
You can appoint someone to act for you. We will ask for evidence of their authority.
9. Complaints
If you are unhappy with how we have handled your personal information, please contact us first at support@edges.club so we can try to put it right.
You also have the right to complain to the UK regulator at any time:
Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 ico.org.uk/make-a-complaint
If you are in the EEA, you may instead complain to your local data protection authority.
10. International transfers
Some of our suppliers, including Shopify and our advertising and analytics partners, process data outside the UK — principally in Canada, the United States and the EEA.
Where we transfer personal data outside the UK, we rely on one of the following safeguards:
- The country is covered by UK adequacy regulations (this includes the EEA and Canada for commercial organisations)
- The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses
- The UK Extension to the EU–US Data Privacy Framework, where the recipient is certified
You can ask us for details of the safeguards applying to a specific transfer by emailing support@edges.club.
11. Security
We take appropriate technical and organisational measures to protect your information, including encryption in transit (TLS), access controls, and using reputable providers who are contractually bound to protect it. Payment card data is handled by PCI-DSS compliant payment providers and is never stored on our systems.
No system is perfectly secure, and we cannot guarantee the security of information sent to us over the internet. Please do not send sensitive information such as card details by email — we will never ask you to.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours and tell you where the law requires.
12. Children
Our products are for adults and the Site is not intended for children. You must be 18 or over to buy from us.
We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact support@edges.club and we will delete it.
Under UK GDPR, children aged 13 and over can consent to online services in their own right, but this does not change our own 18+ purchase requirement.
13. Third-party sites
Our Site links to other websites, including social media platforms and our affiliate platform. This policy does not cover them. We are not responsible for their privacy practices — please read their own policies before providing information.
14. Changes to this policy
We may update this policy. We will post the updated version here and change the "Last updated" date. If we make a significant change to how we use your information, we will tell you directly by email where we hold your address.
15. Contact us
EdgesLabs LTD trading as Edges.Club Unit 2a Trinity Business Centre, Hoyle Street, Warrington, Cheshire, WA5 0LW, United Kingdom Email: support@edges.club