Data controller
The controller responsible for personal data processed in connection with this website and TrueCore enquiries is Phefxirexlo.world, with registered contact address at 325 The Stratford Centre, London E15 1BN, United Kingdom. For privacy-specific correspondence, email talk@phefxirexlo.world and include the subject line “Privacy request” together with enough information for us to verify your identity proportionately to the request.
We do not sell your personal data in the traditional sense of exchanging lists for money. Where we use advertising or analytics partners, their role is described under cookies and marketing preferences.
Scope of this policy
https://phefxirexlo.world, email communications you initiate with us, and order or support flows we operate directly. Third-party platforms (for example payment providers or carriers) have their own policies governing data they process on their infrastructure.Categories of personal data
Depending on how you interact with us, we may process the following categories:
- Identity and contact details: name, email address, telephone number if you provide it, and delivery address when you place an order.
- Transaction data: order references, product selections, payment status flags, and refund events as recorded in our systems.
- Communications: free-text messages you send through forms or email, including attachments if you choose to send them.
- Technical and usage data: IP address, approximate location derived at regional level, browser type, device category, operating system, referral URL, pages viewed, and timestamps.
- Preference data: cookie consent choices, marketing opt-in status, and communication channel preferences where collected.
Purposes and legal bases
We process personal data only where a lawful basis under the UK GDPR applies. The table below summarises typical processing activities connected to TrueCore.
| Activity | Purpose | Typical basis |
|---|---|---|
| Operating the website | Deliver pages, maintain security, remember consent | Legitimate interests and, where required, consent for non-essential cookies |
| Responding to enquiries | Answer questions you send via forms or email | Legitimate interests and, if a contract is contemplated, contract steps |
| Fulfilling orders | Process payment, ship goods, handle returns | Performance of a contract |
| Accounting and tax | Meet statutory record-keeping duties | Legal obligation |
| Marketing | Send promotional messages you have opted into | Consent |
| Analytics | Understand aggregate traffic patterns | Consent when using optional analytics technologies |
Cookies and similar technologies
We use cookies and similar storage to run the site efficiently and, where you agree, to measure performance or support marketing. A dedicated Cookie Policy lists categories, retention, and how to change your choices. Strictly necessary cookies may load without consent because they are essential to provide the service you request.
Recipients and processors
We share personal data with service providers that process it on our instructions, such as hosting providers, email delivery services, payment processors, fraud screening tools, and customer support platforms. We require these parties to implement appropriate confidentiality and security measures and to use data only for the purposes we specify.
If we use advertising platforms (for example Google Ads), those providers may process technical or conversion data under their own terms when you interact with ads or our site, subject to your cookie choices where consent is required. We aim to keep destination pages transparent and aligned with UK expectations for food supplement marketing.
We may disclose information when required by law, court order, or a competent regulator, or when necessary to establish, exercise, or defend legal claims, subject to applicable safeguards.
International transfers
Where personal data is transferred outside the United Kingdom, we rely on adequacy regulations, standard contractual clauses approved for UK transfers, or another lawful mechanism, and we assess supplementary measures when the transfer presents elevated risk.
Retention periods
We keep personal data only as long as necessary for the purposes described, unless a longer period is required by law. Indicative periods include: enquiry messages for up to twenty-four months unless a dispute requires longer retention; transactional and accounting records for up to seven years where tax and company law require; marketing consent records for as long as the consent remains valid plus a short period to demonstrate compliance; and technical logs rotated according to security policies.
Security measures
We implement administrative, technical, and organisational measures appropriate to the risk, including access controls on a need-to-know basis, encryption of data in transit where supported, monitoring for unauthorised activity, and staff training on data protection. No online transmission can be guaranteed completely secure; we encourage you to use strong passwords and protect your devices.
Your rights
Subject to applicable conditions, you may have the right to access your personal data, rectify inaccuracies, erase data where no overriding ground applies, restrict certain processing, object to processing based on legitimate interests, receive a machine-readable copy of data you provided where processing is automated and contract-based, and withdraw consent where processing was consent-based. You may exercise these rights by emailing the contact address above.
Complaints
If you believe we have handled your data improperly, please contact us first so we can investigate. You also have the right to lodge a complaint with the Information Commissioner’s Office in the United Kingdom or, if you reside elsewhere, with your local supervisory authority where applicable law allows.
Changes to this policy
We may update this Privacy Policy to reflect legal, technical, or organisational changes. Material updates will be posted on this page with a revised date reference. For significant changes affecting consent-based processing, we will seek fresh consent where required.
Summary: we process personal data fairly, minimise what we collect, protect it with reasonable safeguards, and respect your rights under UK GDPR and related rules. Full contact details for the controller appear at the top of this page.