LEVLL - Privacy Policy

Last updated: 11 August 2026

LEVLL LTD ("LEVLL", "we", "us", "our") operates mylevll.com. We are the data controller for the personal data described below. This policy explains what we collect, why, and your rights, in line with UK GDPR and the Data Protection Act 2018.

Contact / Data Protection queries: support@mylevll.com

1. What We Collect

Account & order data: name, email, delivery/billing address, phone number, order history, payment confirmation (we do not store full card numbers — this is handled by our payment processor).

Quiz & assessment data: your answers to the LEVLL Fuel/Play/Recover quiz, including sport(s) played, goals, and preferences you provide, used to generate product recommendations.

Wearable & fitness data (special category data): if you choose to connect a third-party wearable or fitness account (e.g. Whoop, Garmin) via our integration partner (Terra API), we may receive data such as heart rate, sleep, recovery scores, and activity/workout data. This is "special category" health data under UK GDPR, and we only collect and process it with your explicit, opt-in consent, given at the point you choose to connect an account. You can withdraw this consent and disconnect your device at any time via account settings; on disconnection we stop pulling new data and you can request deletion of previously collected data (see Section 6).

Marketing data: email address and engagement data (opens/clicks) if you sign up to marketing emails, processed via our email platform (Klaviyo).

Technical data: IP address, browser type, device information, and cookies — see Section 8.

2. How We Use Your Data & Legal Basis

Purpose	Data used	Legal basis
Process and fulfil your order	Order/account data	Performance of a contract
Generate quiz-based product recommendations	Quiz answers	Performance of a contract / consent
Personalise recommendations using wearable data	Wearable/health data	Explicit consent (Art. 9(2)(a) UK GDPR)
Send marketing emails	Email, engagement data	Consent (opt-in)
Improve the Site and quiz accuracy	Technical, aggregated quiz data	Legitimate interests
Prevent fraud, meet legal obligations	Order/account data	Legal obligation / legitimate interests

We do not sell your personal data.

3. Who We Share Data With

• Shopify — our e-commerce platform, which processes order and account data to operate the Site.
• Payment processors — to take payment securely.
• Dropship/fulfilment suppliers (e.g. via our Syncee-connected suppliers such as Pitstop Nutrition) — receive the minimum data needed (name, delivery address, order items) to fulfil your order.
• Terra API — our wearable-data aggregation partner, used solely where you've opted in to connect a device; Terra processes this data on our behalf under a data processing agreement.
• Klaviyo — our email marketing platform, for sending communications you've opted into.
• Octane AI / Kno Commerce (quiz platform) — processes your quiz answers to generate recommendations.
• Affiliate/referral partners (e.g. Amazon Associates) — if you click through an affiliate link, that retailer receives standard referral/tracking data as governed by their own privacy policy; LEVLL does not share your personal account data with them for this purpose.
• We may share data with authorities where required by law.

We do not permit third parties to use your data for their own independent marketing purposes without your consent.

4. International Transfers

Some of our providers (e.g. Shopify, Klaviyo, Terra) may process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

5. Data Retention

We retain order and account data for as long as needed for tax/accounting purposes (typically 6 years) and to service your account. Wearable/health data is retained only while your device connection is active plus a limited period thereafter, or until you request deletion. Marketing data is retained until you unsubscribe or request deletion.

6. Your Rights

Under UK GDPR you have the right to: access your data; correct inaccurate data; request deletion; restrict or object to processing; data portability; and withdraw consent at any time (e.g. disconnecting a wearable or unsubscribing from marketing) without affecting the lawfulness of processing before withdrawal. To exercise these, contact support@mylevll.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we've mishandled your data.

7. Children

LEVLL is not directed at, and we do not knowingly collect data from, anyone under 18.

8. Cookies

We use cookies and similar technologies for essential site functionality, analytics, and (where you consent) marketing/advertising. You can manage cookie preferences via our cookie banner or your browser settings. We use Google Analytics (GA4) to understand how visitors use the Site, via cookies that collect data such as pages visited and general usage patterns. You can opt out via the cookie banner or using Google’s opt-out browser add-on. See Google’s own privacy policy for details on how it processes this data.

9. Security

We use appropriate technical and organisational measures to protect your data, including working only with processors who provide equivalent safeguards, particularly for health-related data.

10. Changes to This Policy

We may update this policy from time to time; material changes will be highlighted on the Site or notified by email where appropriate.