Privacy policy

Last updated: 16 October 2026

Who we are

CleanAssay (cleanassay.com) is an independent directory of lab-tested supplements, operated by R.R. trading as CleanAssay. R.R. trading as CleanAssay is the data controller for personal data described here. Contact: hello@cleanassay.com.

What we collect and why

• Newsletter: your email address, when you subscribe. Lawful basis: consent (UK GDPR Art. 6(1)(a)). You can unsubscribe at any time via the link in every email or by emailing us; we then stop sending and delete or suppress your address.
• Sponsorship payments: if a brand buys a sponsorship, payment is taken on Stripe's hosted checkout. We receive the buyer's name, email, billing details and transaction record, but never full card numbers. Lawful basis: contract (Art. 6(1)(b)) and legal obligation for accounting records (Art. 6(1)(c)).
• Emails you send us: your message and contact details, to reply. Lawful basis: legitimate interests (Art. 6(1)(f)).
• Server logs: our host keeps short-lived technical logs (e.g. IP address, browser, pages requested) to run and secure the site. Lawful basis: legitimate interests.

Cookies

We do not use advertising or analytics cookies, or any tracking cookies. If that changes we will ask for your consent first, as PECR requires. Stripe's checkout pages may set strictly necessary cookies for fraud prevention on Stripe's own domain.

Who processes your data

• Resend (newsletter sending and contact list).
• Stripe (payments). Stripe is also an independent controller for some payment data.
• Vercel (website hosting).

These providers may process data outside the UK (e.g. in the USA). Where they do, transfers rely on the UK International Data Transfer Addendum / Standard Contractual Clauses or the UK–US Data Bridge, as applicable.

How long we keep it

Newsletter addresses: until you unsubscribe (then kept on a suppression list only so we don't email you again). Payment and invoice records: 6 years, for tax purposes. Correspondence: up to 2 years. Server logs: per our host's short retention period.

Your rights

You can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time, by emailing hello@cleanassay.com. We reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). EU residents can contact their local data protection authority.

We don't sell personal data, and we don't make automated decisions about you.