Privacy Policy
Last updated: June 2026
1. Who we are
GF Yourself! is a UK-based gluten-free subscription box service. Our website is subscribe.gfyourself.co.uk. When we refer to "we", "us" or "our" in this policy, we mean GF Yourself!
2. What data we collect
We collect the following personal data when you place an order or subscribe:
- Name and email address
- Delivery address
- Payment information (processed securely by Shopify Payments — we never store card details)
- Subscription preferences and order history
- Device and browsing data (via cookies — see section 6)
3. How we use your data
We use your data to:
- Process and fulfil your subscription orders
- Send order confirmations and shipping notifications
- Manage your subscription via Skio
- Respond to customer service enquiries
- Improve our website and marketing (with your consent)
4. Legal basis for processing
We process your data on the basis of contract performance (to fulfil your order), legitimate interests (to improve our service), and consent (for marketing communications).
5. Who we share data with
We share data only with trusted third parties necessary to run our service:
- Shopify — our e-commerce platform and payment processor
- Skio — subscription management
- DPD — delivery partner
- Klaviyo / Shopify Email — email marketing (with consent)
- Meta / Google / TikTok — advertising platforms (anonymised/hashed data only)
We never sell your personal data.
6. Cookies
We use cookies to improve your experience and for advertising attribution. These include:
- Essential cookies — required for the site and checkout to function
- Analytics cookies — Google Analytics 4 (GA4) to understand site usage
- Advertising cookies — Meta Pixel, Google Ads, TikTok Pixel for ad measurement
You can manage cookie preferences via your browser settings.
7. Your rights
Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data. To exercise any of these rights, contact us at hello@gfyourself.co.uk.
8. Data retention
We retain your data for as long as your account is active or as required by law (typically 7 years for financial records).
9. Contact
For any privacy queries: hello@gfyourself.co.uk