Privacy policy
Last updated 23 September 2026
1. Who we are
Sirqulate Ltd, 41A Mill Lane, London NW6 1NB, is the data controller for personal data collected through this website. You can reach us at support@sirqulate.com.
This policy explains what we collect, why, how long we keep it and what you can do about it. It is written to the UK GDPR and the Data Protection Act 2018.
2. What we collect
When you order: your name, delivery and billing address, email address, phone number if you give one, and what you bought. Card details are handled by our payment provider and never reach our servers.
When you contact us: whatever you choose to put in the message.
When you browse: standard technical data — IP address, browser, pages viewed — and, only if you accept them, analytics cookies.
What we deliberately do not collect: we do not ask about your health, and we do not want you to tell us. Nothing on this site records a health condition against your name, and there is no health questionnaire anywhere in the purchase flow.
3. Why, and on what basis
- To fulfil your order — performance of a contract.
- To answer your questions — legitimate interests.
- To meet accounting and consumer-law obligations — legal obligation.
- To send marketing email — consent, which you give explicitly and can withdraw in one click.
- To understand how the site is used — consent, via the cookie banner.
5. How long we keep it
Order records for six years, because HMRC requires it. Support correspondence for two years. Marketing consent until you withdraw it. Analytics data for 14 months. After that it is deleted.
6. Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, and to receive it in a portable format. Email support@sirqulate.com and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security
The site is served over HTTPS with strict transport security. Card data is processed by our payment provider under PCI DSS and is never stored by us.