Privacy Policy

Last updated: 11/01/26

HYCO (“HYCO”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with us—whether through our website, products, communications, or services.

HYCO operates under the names HYCO, Your Hydration Covered, and The Hydration Company.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

HYCO is a UK-based hydration brand providing premium functional beverages designed for modern life.

Data Controller:
HYCO / The Hydration Company
[Registered company name, if different]
[Registered address]
Email: hello@hyco.co.uk (or confirmed address)

We are responsible for deciding how your personal data is collected and used.

2. What Personal Data We Collect

We only collect data that is necessary, relevant, and proportionate. Depending on how you interact with HYCO, this may include:

a. Information you provide directly

  • Name
  • Email address
  • Postal address
  • Phone number
  • Order and delivery details
  • Payment confirmation details (processed securely by third-party providers — we do not store card numbers)
  • Messages sent via contact forms, email, or customer support

b. Information collected automatically

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on our website
  • Referring URLs

This data is collected using cookies and similar technologies (see Section 9).

c. Marketing and preference data

  • Email subscription status
  • Communication preferences
  • Interaction with emails or digital campaigns

We do not knowingly collect data from children under 16.

3. How We Use Your Data

We use your personal data only where we have a lawful basis to do so. This includes:

  • Fulfilling and managing orders
  • Providing customer support
  • Communicating important service updates
  • Sending marketing communications (only where you’ve opted in)
  • Improving our website, products, and services
  • Complying with legal and regulatory obligations

We do not sell your personal data.

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to process orders and deliver products
  • Consent – for marketing communications
  • Legitimate interests – to improve services and ensure security
  • Legal obligation – to comply with tax, accounting, or regulatory requirements

You can withdraw consent at any time.

5. Marketing Communications

If you opt in, we may send you emails about HYCO products, launches, or updates.

  • You can unsubscribe at any time via the link in our emails
  • We never send unsolicited marketing
  • We never share marketing lists with third parties

6. Sharing Your Data

We may share limited personal data with trusted third parties where necessary, including:

  • Payment processors (e.g. Stripe, Shopify Payments)
  • Delivery and fulfilment partners
  • Website hosting and analytics providers
  • Email marketing platforms

All third parties are required to handle your data securely and in line with UK GDPR.

7. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations
  • Standard Contractual Clauses
  • GDPR-compliant security measures

8. Data Retention

We only keep your data for as long as necessary:

  • Order and transaction data: retained for legal and accounting purposes
  • Marketing data: retained until you unsubscribe
  • Customer service correspondence: retained as needed for support and quality assurance

When no longer required, data is securely deleted or anonymised.

9. Cookies & Tracking

Our website uses cookies to improve functionality and understand how visitors use our site.

Cookies may include:

  • Essential site functionality cookies
  • Analytics cookies (e.g. Google Analytics)
  • Performance and optimisation cookies

You can manage or disable cookies through your browser settings.
For more detail, see our Cookie Policy [link if separate].

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at hello@hyco.co.uk.

11. Data Security

We take data security seriously. Measures include:

  • Secure servers and encrypted connections
  • Access controls and internal policies
  • Regular security reviews

While no system is completely secure, we take all reasonable steps to protect your information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here, with the “Last updated” date revised accordingly.

We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Email: hello@hyco.co.uk
HYCO / The Hydration Company