Legal

Privacy

How ELIXYR handles personal data, under UK GDPR and the Data Protection Act 2018. Last updated 03/07/2026.

1. Controller

ELIXYR London Limited, Company No. 17160325, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, is the data controller. Contact: hello@elixyr.uk.

2. What we collect

3. Why we process it

To fulfil your order (contract), to answer you when you write to us (legitimate interest), and to send the ritual list when you have asked for it (consent, withdraw any time).

4. Who receives it

Stripe (payments), Beehiiv (email list), Royal Mail (delivery) and Vercel (hosting) process data on our behalf. Where a processor handles data outside the UK, the transfer rests on UK adequacy or the UK International Data Transfer Addendum to their standard contractual clauses.

5. Retention

Order records are kept for six years from the end of the relevant tax year, as HMRC requires. Ritual list data is kept until you unsubscribe. Correspondence is kept for two years, then deleted.

6. Your rights

Access, rectification, erasure, restriction, portability, objection, and complaint to the ICO at ico.org.uk. Write to hello@elixyr.uk to exercise any of them.