Privacy policy

Last updated: 7 November 2026

This Privacy Policy explains how The 72 Hour Kit (www.the72hourkit.com) collects, uses and protects your personal data when you visit our website or place an order. We handle your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The data controller responsible for your personal data is:

Store: The 72 Hour Kit (www.the72hourkit.com)
Company: Living the Life B.V.
Address: Jacob Leendert van Rijweg 50, 2713 JA Zoetermeer, Netherlands
Email: info@the72hourkit.com
Phone: +31 6 1398 8435

2. What data we collect

Data you give us when you place an order or contact us:

Full name
Delivery and billing address
Email address
Phone number
Order details and the contents of any messages you send us
Payment information, which is processed by Shopify Payments or the other payment provider you choose at checkout. We never see or store your full card details.

Data collected automatically when you browse the site:

IP address
Browser type and version
Device and operating system
Pages visited and time spent on the site
Referring website
Cookie identifiers and session data

3. Why we use your data and our lawful basis

Under Article 6 of the UK GDPR we only process your data where we have a lawful basis to do so:

Processing and delivering your order (including passing your name and address to our logistics partners): performance of a contract, Art. 6(1)(b).
Sending order confirmations and dispatch and tracking emails: performance of a contract, Art. 6(1)(b).
Handling returns, refunds, questions and complaints: performance of a contract, Art. 6(1)(b).
Issuing invoices and keeping financial records: legal obligation, Art. 6(1)(c).
Sending marketing emails: consent, Art. 6(1)(a). We only send marketing emails if you have opted in.
Analysing how the site is used so we can improve it: legitimate interests, Art. 6(1)(f).
Preventing fraud and keeping the site secure: legitimate interests, Art. 6(1)(f).

Where we rely on your consent (for example marketing emails), you can withdraw it at any time by clicking "unsubscribe" in any email or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

4. How long we keep your data

We do not keep your data for longer than necessary:

Order and transaction data: 6 years from the end of the tax year of purchase, as required for financial records
Customer service records: 3 years from the resolution of your enquiry
Marketing data: until you withdraw consent or unsubscribe
Analytics and log data: up to 26 months from collection

After these periods, data is deleted or anonymised.

5. Who we share your data with

We only share your data with service providers where it is necessary to run the store. Each processor is bound by a data processing agreement in line with Article 28 of the UK GDPR:

Shopify International Ltd / Shopify Inc., which hosts our store and acts as our processor for order, customer and payment data. Shopify may process data outside the UK under appropriate safeguards, including Standard Contractual Clauses. See shopify.com/legal/privacy.
Payment providers: Shopify Payments and the other payment methods shown at checkout (for example PayPal, Apple Pay or Google Pay where available), solely to process your payment.
Logistics partners, suppliers and delivery carriers: your name, delivery address, email address and phone number are shared so that your items can be dispatched and delivered, including by suppliers who send items directly to you.
Email service providers: to send order emails and, if you have opted in, marketing emails.
Analytics and advertising providers (for example Google Analytics and Google Ads), operating on anonymised or pseudonymised data and only with your cookie consent.
Statutory authorities: only where we are legally required to disclose information (for example HMRC or law enforcement).

We do not sell your personal data to anyone.

6. International data transfers

Living the Life B.V. is based in the Netherlands, and some of our service providers (including Shopify, our logistics partners and Google) process data outside the United Kingdom. Where this happens we make sure appropriate safeguards are in place, such as UK adequacy regulations (which cover the EEA) or Standard Contractual Clauses with the UK International Data Transfer Addendum.

7. Your rights

Under the UK GDPR you have the following rights over your personal data:

Right of access: ask for a copy of the data we hold about you
Right to rectification: ask us to correct inaccurate or incomplete data
Right to erasure: ask us to delete your data where there is no longer a lawful reason to keep it
Right to restriction: ask us to limit how we use your data in certain circumstances
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interests, and to direct marketing at any time
Right to withdraw consent: at any time, for any processing based on consent

To exercise any of these rights, email info@the72hourkit.com. We will respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113, if you believe your data has been handled unlawfully. We would appreciate the chance to resolve your concern first.

8. Cookies

Our site uses cookies and similar technologies to keep the site working, to analyse traffic and, with your permission, to show relevant advertising.

Essential cookies: needed for the store to function (for example the basket and checkout session). These cannot be switched off.
Analytics cookies: collect anonymised information about how the site is used (for example Google Analytics). Only active with your consent.
Marketing cookies: used to show relevant advertising based on your browsing (for example Google Ads). Only active with your consent.

You can manage your cookie preferences through the cookie banner shown on your first visit, or through your browser settings. Declining non-essential cookies does not affect your ability to shop. For how Shopify uses cookies, see shopify.com/legal/cookies.

9. Data security

We use appropriate technical and organisational measures to protect your data, including SSL/TLS encryption across the whole site. Access to personal data is limited to people who need it to do their job, and all of them are bound by confidentiality obligations.

10. Children

Our store is intended for adults. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "last updated" date. For significant changes we will let you know by email or by a clear notice on the site.