Privacy policy

Last updated: 23 October 2026

This policy explains how RJC Health UK Limited, trading as HLTH Code ("we", "us"), collects, uses, shares and protects your personal data when you use gethlth.co.uk, buy from us, receive our emails or contact us.

Who we are

RJC Health UK Limited is the controller of your personal data. We are registered in England and Wales, company number 13922983, registered office 22 Blackhorse Drive, Old Stratford, Milton Keynes MK19 6FH. You can contact us about your data at info@gethlth.co.uk.

What we collect

  • Contact and order details: your name, email address, phone number, billing and delivery addresses, what you buy, your order history and any subscription you set up.
  • Payment details: payments are processed by our payment providers. We don't see or store your full card number; we see only limited details such as the card type and the last four digits.
  • Messages: what you tell us when you contact us, including through our contact form.
  • Reviews: your name, email address and anything you include in a review you submit.
  • Marketing preferences: whether you've signed up to our emails, and how you interact with them (for example whether you open them or click a link).
  • Browsing information: your IP address, device and browser type, approximate location, the pages and products you view, what you add to your basket or buy, and which site or ad brought you to us. Apart from what the store needs to work, we only collect this through cookies and similar tools if you allow them in our cookie banner.

We don't ask for health information. If you tell us about your health, for example in a message or a review, we use it only to reply to you or to publish the review you chose to submit, and we don't share it with our advertising partners.

How we use it, and our lawful basis

What we do Lawful basis
Process and deliver your orders, manage your subscription, handle returns and refunds, and reply to you about them Contract
Check orders for fraud and misuse of offers, and keep our site secure Legitimate interests (protecting our business and our customers)
Send you marketing emails Consent, or, if you bought from us and didn't opt out, our legitimate interest in telling you about similar products
Use analytics and advertising cookies, measure our ads and show you our ads on other sites Consent, through our cookie banner
Reply to messages that aren't about an order Legitimate interests (helping you)
Keep tax and accounting records, and respond to lawful requests Legal obligation

Who we share it with

We share personal data only as needed for the purposes above, with:

  • Shopify, which hosts our store and checkout, including Shop Pay.
  • Payment providers: Shopify Payments, PayPal, Klarna, Apple Pay and Google Pay, and the local payment methods shown at checkout, which process your payment and may run their own fraud and credit checks.
  • Loop Subscriptions, which manages Subscribe & Save orders and schedules.
  • Klaviyo, which sends our emails and, if you allow marketing cookies, records how you use our site.
  • Judge.me, which sends review requests after you order and publishes the reviews you submit.
  • Selleasy and Logbase, which show product suggestions in the store and basket. Selleasy measures how they're used only if you allow marketing cookies.
  • Quivo (Logsta UK Ltd), our warehouse, which packs your order, and DHL and Royal Mail, which deliver it.
  • EAS Project, which calculates and reports import VAT on orders to the EU.
  • Google (Google Analytics and Google Ads) and Meta (Facebook and Instagram), if you allow analytics or marketing cookies. Their tags record the pages you view and what you add to your basket or buy, so we can measure our ads and show our ads to you and to people like you. When you buy, this can include a scrambled (hashed) version of your email address or phone number, which lets the platform match the purchase to an account.
  • RJC Health Pty Ltd, our related company in Australia, which helps run HLTH Code.
  • Our professional advisers, such as our accountants and lawyers, where needed.
  • Police, regulators or courts, where the law requires it or to protect our rights.

We don't sell your personal data.

Cookies

Cookies and similar tools store or read small pieces of information on your device. When you first visit, our cookie banner lets you choose:

  • Required: always on. These run the basket, checkout, your account and security, and remember your cookie choice.
  • Analytics: Google Analytics, Shopify's own analytics and Judge.me's, to understand how people use our site.
  • Marketing: Google Ads and YouTube, Meta (Facebook and Instagram), Klaviyo's onsite tracking and Selleasy, to measure our ads and show you relevant ones.
  • Personalization: we don't currently use any beyond the required cookies.

Choose Accept to allow them all, Decline to keep only the required cookies, or Manage preferences to choose. Nothing in Analytics or Marketing runs until you agree. Two scripts load with every page but don't identify you: Klaviyo's, which shows our sign-up forms, and Logbase's, which shows product suggestions. You can change your mind at any time through the "Cookie preferences" link at the bottom of our pages.

Marketing emails

We send marketing emails if you've signed up for them, or if you've bought from us and didn't opt out when you gave us your email address. Every marketing email has an unsubscribe link. You'll still get emails about your orders and subscription.

Sending data outside the UK

Some of the services above, and RJC Health Pty Ltd in Australia, store or access personal data outside the UK, including in the United States and Australia. Where a country isn't covered by UK adequacy regulations, we use the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the provider's certification under the UK Extension to the EU-US Data Privacy Framework. You can ask us for a copy of the safeguard we use.

Automated checks. We use automated tools to flag orders that show signs of fraud or misuse of offers, using your order details, payment details and IP address. A person on our team looks at any flagged order before it is held or cancelled; we don't cancel orders by automated means alone. You can ask us to explain any decision about your order.

How long we keep it

We keep order and payment records for six years from the end of the financial year they relate to, as tax and company law require. We keep your marketing details until you unsubscribe; after that we keep a record that you opted out, so we don't email you again. Analytics and advertising data is kept for the periods the providers set. We delete other personal data once we no longer need it.

Your rights

You have the right to:

  • ask for a copy of your personal data;
  • ask us to correct it;
  • ask us to delete it;
  • ask us to restrict how we use it;
  • object to how we use it, including at any time to marketing;
  • ask for data you gave us in a format you can take elsewhere;
  • withdraw your consent at any time, for example by unsubscribing or changing your cookie preferences;
  • ask for a person to review a decision made solely by automated means that significantly affects you.

To use any of these rights, email info@gethlth.co.uk. There's usually no charge. We'll respond within one month, or tell you within that month if we need longer and why.

Complaints about your data

If you're unhappy with how we've handled your personal data, tell us: email info@gethlth.co.uk with "Data complaint" in the subject line, use our contact form, or write to us at our registered office. We'll acknowledge your complaint within 30 days, look into it, keep you updated, and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you live in the EU or EEA, you can complain to the data protection authority in your country.

Children

Our site isn't intended for children under 16, and we don't knowingly collect their personal data. If you think we have, contact us and we'll delete it.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If we make a significant change, we'll tell you on our site or by email.

RJC Health UK Limited (company number 13922983) trading as HLTH Code