No Bloat

Privacy Policy
Last Updated: 14 April 2026

At No Bloat, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

No Bloat (operating as NO BLOAT LIMITED, Company No: 15419687) is the Data Controller for your personal information

  • Registered Office: 44 Grand Parade, Brighton, East Sussex, England, BN2 9QA.
  • Email: contact@nobloat.com
  • Data Protection Representative: Privacy Team (contactable via the main support email above).

2. What Information We Collect

We collect personal data through our website in the following locations:

  • The Contact Form: We collect your Full Name, Email Address, the Subject of your enquiry (such as product questions, allergen guidance, or media requests), and your Message content.
  • Special Category Data (Health Information): Because No Bloat focuses on gut health and Low FODMAP eating, you may voluntarily share health, dietary, or medical information with us within your contact form message.
  • Newsletter Subscribe Box:To provide you with product launches, Low FODMAP guidance, and bundle ideas, we collect your Name and Email Address.
  • Subscription & Order Data: If you purchase a subscription or bundle, we collect your billing address, shipping address, and payment information to fulfil your order. We also process Subscription Management Data (such as your order history, delivery preferences, and secure, passwordless portal access links) to allow you to manage, pause, or cancel your recurring deliveries.
  • Technical Data & Analytics:Through Google Analytics 4 (GA4) and cookies, we collect technical data about your visit, including your IP address, browser type, device type, and how you navigate our site. This helps us monitor site performance and security.

3. Why We Collect This Data (Lawful Basis)

Under UK GDPR, we must have a legal reason to process your data:

  • Consent:When you submit your details via the newsletter subscribe box or tick the optional marketing box on the contact form, you give us explicit consent to send you marketing updates via email. Our marketing is strictly granular; you must actively opt in to receive email communications. We do not currently use SMS marketing, but if we do in the future, it will require a completely separate opt-in.
  • Explicit Consent (Special Category Data):If you voluntarily share health or medical information in your enquiry, we process this strictly based on your explicit consent to help us answer your specific question accurately. We never use this health data for marketing.
  • Contractual Necessity: When you place an order or manage a subscription, we process your financial and shipping data to fulfil our contract with you.
  • Legitimate Interests: We process general and media enquiries to route your query to the correct department. We also use website technical data to improve our services and ensure our site remains secure.

How We Use and Store Your Data

  • International Transfers: We use trusted platforms like Shopify (for e-commerce, subscriptions, and marketing) and Google Analytics 4. Because these are global platforms, your data may be transferred and stored outside the UK and European Economic Area (EEA). We ensure these transfers are fully protected under UK law by utilising Standard Contractual Clauses (SCCs) and robust security measures.
  • Retention:We only keep your data as long as necessary.
    • Enquiry Data: Held for 2 years to assist with future customer service.
    • Financial & Customer Records:Held for 6 years to comply with UK tax and accounting laws.
    • Marketing Data:Held securely until you choose to unsubscribe.

5. Sharing Your Information

We respect your privacy and operate on a core principle of absolute transparency; we do not engage in consumer duping, nor do we sell, rent, or trade your personal information to external marketing agencies or data brokers. Your data is only shared under the following highly specific circumstances:

  • Trusted Data Processors: We share data with strictly vetted third-party service providers (such as Shopify, our CRM platforms, and email marketing software) who facilitate our secure checkouts, subscription portals, and the technical delivery of our emails. These processors act solely on our strict instructions and are legally bound by stringent confidentiality and data security obligations.
  • The Vegan Solo Corporate Group (Sister Brands): No Bloat is proud to be part of a broader corporate family of ethical, problem-solving plant-based brands founded by Heather Mills. If, and only if, you provide explicit, granular consent at the point of newsletter signup, we will securely share your contact details (Name and Email Address) with our specific sister brands so they may send you relevant updates and offers regarding their product lines. These brands are explicitly limited to VBites, Be At One, and V Omega 3. This internal data sharing is governed by strict data protection agreements ensuring your information remains secure across our group. You maintain total control and may revoke this cross-brand consent at any time without affecting your core relationship with No Bloat.
  • Regulatory or Legal Bodies: We may disclose your data if strictly required to do so by law, court order, or regulatory mandate to protect our legal rights or comply with statutory obligations.


  • Legal Rationale: Updating the Privacy Policy satisfies the UK GDPR's Article 13 and 14 requirements regarding transparency and the data subject's "Right to be Informed." It formally establishes the boundaries of the data sharing, ensuring that the processing remains lawful, fair, and transparent across the entire data lifecycle.

    6. Your Rights

    You have the following rights regarding your personal data:

    • Right to be Informed: To know exactly how your data is being collected and used.
    • Right to Access:You can request a copy of the information we hold about you.
    • Right to Rectification: You can ask us to correct or update inaccurate information.
    • Right to Erasure: You can ask us to delete your personal data from our systems.
    • Right to Restrict Processing: To request that we limit the way we use your data.
    • Right to Data Portability: To receive your personal data in a structured, commonly used format.
    • Right to Object: To object to our processing of your data based on legitimate interests.
    • Right to Withdraw Consent:You can opt out of marketing at any time by clicking "unsubscribe" in our emails or by contacting us directly.

    7. Complaints Procedure

    If you have a concern about how we handle your data, please contact us at contact@nobloat.com so we can resolve it. You also have the right to lodge a formal complaint with the UK Information Commissioner’s Office (ICO):

    • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
    • Website:ico.org.uk

    Cookie Policy
    Last Updated: 14 April 2026

    This Cookie Policy explains how No Bloat uses cookies and similar technologies to recognise you when you visit our website. This policy should be read alongside our Privacy Policy.

    1. What Are Cookies?

    Cookies are small text files placed on your device to help the website provide a better user experience. In general, cookies are used to retain user preferences and provide anonymised tracking data to third-party applications like Google Analytics.

    2. How We Use Cookies

    We use cookies to enhance your browsing experience, manage secure checkouts, handle subscription portals, and analyse our traffic.

    Cookie Table

    Cookie Name Provider Purpose Expiry
    _ga Google Analytics 4 Analytical: Distinguishes users to provide metrics on visitor count and traffic sources. 2 Years
    _ga_<container-id> Google Analytics 4 Analytical: Used to persist session state. 2 Years
    cart Shopify Necessary: Retains the items added to your shopping cart during checkout. 14 Days
    secure_customer_sig Shopify Necessary: Required to enable secure customer log-in and subscription portal access. 1 Year

    3. Managing Your Preferences

    Most web browsers allow you to manage cookies through their settings. You can set your browser to refuse all cookies, delete existing cookies, or indicate when a cookie is being sent.


    To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.


    To opt out of being tracked by Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.


    Please note that if you disable or refuse cookies, some parts of our website (such as the secure checkout, subscription portals, and shopping cart) may become inaccessible or not function properly.

    4. Contact Us

    If you have any questions regarding our use of cookies, please contact us at contact@nobloat.com.