Privacy Policy

The Body Blueprint (Dr Surinder Sandhu) ("we", "us", "our") operates the digital library at thebodyblueprint.online. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is The Body Blueprint (Dr Surinder Sandhu), Bedford, United Kingdom. Contact: hello@thebodyblueprint.online.

2. Information We Collect

Information you provide directly: name, email address, billing details when making a purchase, and topic selections submitted via our guide finder tool.

Information collected automatically (with consent): IP address, browser type, pages visited, referral source — collected via Google Analytics 4, Meta Pixel and TikTok Pixel if you consent to analytics and marketing cookies.

3. How We Use Your Data

• To process and fulfil orders and deliver digital products.
• To provide access to your My Library account.
• To send order confirmations and download links.
• To send marketing communications, where you have opted in.
• To improve our website and product offerings (analytics, with consent).
• To comply with legal and accounting obligations.

4. Legal Basis for Processing

We process your data on the basis of: contract performance (to fulfil orders); legitimate interests (to improve our services); consent (marketing emails and analytics cookies); and legal obligation (accounting records).

5. Data Sharing

We do not sell your personal data. We share data only where necessary: with Stripe (payment processing); with our email delivery provider (transactional emails); and with Google, Meta and TikTok (analytics and advertising, only with your cookie consent).

6. Data Retention

Account and purchase records are retained for 7 years to meet UK accounting requirements. Email marketing preferences are retained until you unsubscribe. Analytics data is retained for 14 months (GA4 default).

7. Your Rights Under UK GDPR

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: request that we limit processing of your data.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: at any time, without affecting prior processing.

To exercise any of these rights, email hello@thebodyblueprint.online. We will respond within 30 days.

8. Cookies

For full details of how we use cookies and how to manage your preferences, see our Cookie Policy.

9. Complaints

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.

The Body Blueprint · Bedford, United Kingdom · hello@thebodyblueprint.online