Privacy policy
What personal and health data we collect, why we hold it, and the rights you have over it.
Last updated 13 August 2026
Who we are
Lose Weight Fast is the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office.
What we collect
Account data
Your name, email address, phone number, delivery addresses and password (stored only as a one-way hash. We can never see your actual password).
Health data
Your height, weight, medical history, current medication, allergies and consultation answers. This is special category data under UK GDPR and receives additional protection.
Order data
What you bought, when, where it was delivered and your subscription schedule. Card details are never stored on our systems, payments are handled entirely by Stripe and PayPal.
Technical data
IP address, browser type and pages visited, used to keep the service secure and working.
Why we hold it
- To provide treatment: a prescriber cannot assess suitability without your health data. Lawful basis: contract, and for health data, the provision of health care under Article 9(2)(h).
- To meet legal obligations: pharmacy and prescribing records must be retained under UK medicines legislation.
- To improve the service: aggregated and anonymised only. Lawful basis: legitimate interests.
- Marketing: only where you have opted in, and you can withdraw at any time.
Who sees your data
Your health data is visible only to registered clinical staff involved in your care. We share the minimum necessary with our dispensing pharmacy, our delivery partner (name and address only, never clinical detail), and our payment processors. We never sell your data, and we never share health data for advertising.
How long we keep it
Clinical records are retained for ten years from your last interaction, as required for prescription-only medicines. Order records are kept for seven years for tax purposes. Marketing preferences are kept until you withdraw them.
Your rights
You can request a copy of your data, correct anything inaccurate, ask us to delete data we are not legally required to keep, object to processing, or withdraw consent for marketing. Email privacy@loseweightfast.co.uk and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use a small number of cookies: one to keep you signed in, one to remember your basket, and analytics cookies only if you accept them. See our cookies policy for the full list.