1. Who we are
This website is run by Highform Ltd, a company registered in England and Wales (company number 17559778). Highform Ltd is the data controller for the personal information described in this policy. Mileproof and Sleep Forever are trading names of Highform Ltd.
We are registered with the Information Commissioner's Office (ICO). Registration number: [ICO registration number].
If you have any questions about this policy or your information, email hello@highform.co.uk.
2. What we collect
Information you give us
- Enquiries: your name, email address, phone number (if given) and the content of your message.
- Highform Private applications: your name, email address, training information (such as goal race, race date, weekly mileage and experience), the supplements you currently take, and any other information you choose to share, which may include health information.
- Stockist and trade enquiries: your name, business name and type, contact details, location and the details of your enquiry.
- Customers: if you buy from us, your name, delivery and billing address, email address, phone number and order history. Card payments are processed by our payment provider and we never see or store your full card details.
Information collected automatically
- Technical data: when you visit the site, our hosting provider automatically records basic technical information such as your IP address, browser type and the pages requested, to deliver the site and keep it secure.
- Cookies: this site does not currently use analytics or advertising cookies. See our cookie policy.
How our forms work
The enquiry and application forms on this site don't store anything on our website. When you press send, your own email app opens with your answers filled in, and the message is sent from your email account to hello@highform.co.uk. Your email provider handles that message under its own privacy terms until it reaches us.
3. How we use it and why
We only use your information where the law allows. The table below sets out what we use it for and our lawful basis under UK data protection law.
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry | Legitimate interests (responding to people who contact us) |
| Assessing a Highform Private application and building your protocol | Taking steps at your request before entering into a contract; explicit consent for any health information |
| Providing Highform Private and fulfilling orders, including delivery and customer service | Performance of a contract |
| Handling stockist and trade enquiries and accounts | Legitimate interests; performance of a contract once trading |
| Keeping accounting and tax records | Legal obligation |
| Running, securing and improving the website | Legitimate interests |
| Sending marketing emails (only if you've opted in) | Consent, which you can withdraw at any time |
We do not sell your personal information, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Health information
Information about your health is "special category data" and has extra protection. We only process it if you give your explicit consent, for example by ticking the consent box on the Highform Private application. We use it only to assess your application and build your protocol, and we never use it for marketing.
You can withdraw your consent at any time by emailing hello@highform.co.uk. If you do, we will stop using that information and delete it, although this may mean we can no longer provide Highform Private to you.
Highform Private is a supplement service, not a medical service. We do not diagnose or treat any condition.
5. Who we share it with
We share your information only with trusted service providers who help us run the business, and only as much as they need. They act on our instructions and must keep your information secure. These include:
- Google (Google Workspace) for email and business documents
- Vercel for website hosting
- Payment providers (such as Stripe) to process payments, once online payments are live
- Delivery companies to deliver orders
- Our accountant and professional advisers, where needed
We may also share information if the law requires it, or to protect our legal rights.
6. International transfers
Some of our service providers, such as Google and Vercel, may process information outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework.
7. How long we keep it
- Enquiries that don't lead to an order or service: up to 24 months.
- Health information shared for Highform Private: until 12 months after your service ends, or sooner if you withdraw consent.
- Customer and order records: 6 years after the end of the financial year they relate to, as required for tax and accounting.
- Marketing preferences: until you unsubscribe, after which we keep a record so we don't contact you again.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use your information
- object to us using your information based on legitimate interests
- ask for your information in a portable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email hello@highform.co.uk or use the request form at the bottom of this page. We will reply within one month. There is usually no charge.
9. Complaints
If you're unhappy with how we've handled your personal information, you can complain to us by email or by using the form below. We will:
- acknowledge your complaint within 30 days of receiving it
- look into it without undue delay and keep you updated on progress
- tell you the outcome
You also have the right to complain to the Information Commissioner's Office (ICO) at any time, at ico.org.uk or on 0303 123 1113. You don't have to complain to us first.
10. Security
We use appropriate technical and organisational measures to protect your information, including secure hosting, encrypted connections (HTTPS) and access controls on our accounts.
11. Children
Our products and services are for adults aged 18 and over. We do not knowingly collect information from children.
12. Changes and contact
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
Contact: Highform Ltd. Email: hello@highform.co.uk.
13. Make a request or complaint
Use this form to ask for a copy of your information, ask us to correct or delete it, withdraw consent, or make a complaint about how we've handled your data.