Legal
Privacy
How ELIXYR handles personal data, under UK GDPR and the Data Protection Act 2018. Last updated 03/07/2026.
1. Controller
ELIXYR London Limited, Company No. 17160325, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, is the data controller. Contact: hello@elixyr.uk.
2. What we collect
- Order and delivery details, processed by Stripe when you check out. We do not see or store your card number.
- Your email address, when you join the ritual list, processed by Beehiiv.
- On this device only: your ritual selection and quiz events, kept in your browser's local storage. They never leave your browser.
3. Why we process it
To fulfil your order (contract), to answer you when you write to us (legitimate interest), and to send the ritual list when you have asked for it (consent, withdraw any time).
4. Who receives it
Stripe (payments), Beehiiv (email list), Royal Mail (delivery) and Vercel (hosting) process data on our behalf. Where a processor handles data outside the UK, the transfer rests on UK adequacy or the UK International Data Transfer Addendum to their standard contractual clauses.
5. Retention
Order records are kept for six years from the end of the relevant tax year, as HMRC requires. Ritual list data is kept until you unsubscribe. Correspondence is kept for two years, then deleted.
6. Your rights
Access, rectification, erasure, restriction, portability, objection, and complaint to the ICO at ico.org.uk. Write to hello@elixyr.uk to exercise any of them.