Privacy Policy

Last updated: 19 May 2026

1. Introduction

Holy Mackerel Fish Oil (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at holymackerelfishoil.com, purchase our products, or otherwise interact with us.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully.

2. Who We Are

Holy Mackerel Fish Oil is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us:

Holy Mackerel Fish Oil

Website: https://holymackerelfishoil.com

Facebook: https://www.facebook.com/mackereloil/

Instagram: @holymackerelfishoil

For data protection enquiries, please contact us via our website or social media channels listed above.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide to Us

Name and contact details (email address, phone number, postal address) when you create an account or place an order
Payment information (processed securely via our payment provider – we do not store card details)
Order history and product preferences
Correspondence and communications when you contact us
Wholesale enquiry information if you apply to become a stockist

3.2 Data Collected Automatically

Technical data including IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform
Usage data including pages visited, links clicked, referring URLs, and time spent on pages
Cookie data and similar tracking technologies (see Section 8 for details)

3.3 Data from Third Parties

Analytics data from Google Analytics and Google Tag Manager
Advertising data from Meta (Facebook Pixel) used for marketing and remarketing purposes
Social media data if you interact with our Facebook or Instagram pages

4. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

4.1 To Fulfil Your Orders (Contractual Necessity)

Processing and delivering your orders
Managing payments and handling refunds or returns
Sending order confirmations and shipping notifications

4.2 To Manage Our Business (Legitimate Interests)

Maintaining and improving our website and product offering
Analysing how customers use our site to optimise the shopping experience
Preventing fraud and ensuring website security
Responding to your queries and providing customer support

4.3 Marketing Communications (Consent or Legitimate Interests)

Sending you promotional emails and offers where you have opted in, or where we have a legitimate interest in marketing similar products to existing customers
Retargeting advertisements via Facebook Pixel and Google Ads

You have the right to opt out of marketing communications at any time. See Section 7 for details.

4.4 Legal Obligations

Complying with applicable laws, regulations, and legal proceedings
Maintaining financial and tax records as required by law

5. How We Share Your Personal Data

We do not sell your personal data. We may share it with the following categories of third parties:

Payment processors (e.g. Stripe, PayPal or similar) to process transactions securely
Delivery and fulfilment partners to ship your orders
IT and website service providers (including WordPress/Elementor hosting)
Google (Google Tag Manager, Google Analytics) for website analytics
Meta Platforms (Facebook Pixel) for advertising and analytics
Professional advisers including lawyers and accountants, where necessary
Regulatory and law enforcement bodies where required by law

We require all third parties to respect the security of your data and to treat it in accordance with UK data protection law.

6. International Data Transfers

Some of our third-party service providers are based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure it is protected by appropriate safeguards, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO), or by transferring only to countries with an adequacy decision.

7. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure (‘right to be forgotten’) – to ask us to delete your data in certain circumstances
Right to restrict processing – to ask us to limit how we use your data
Right to data portability – to receive your data in a structured, machine-readable format
Right to object – to object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making – not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, please contact us via the details in Section 2. We will respond within one month of receipt of your request. You will not usually be charged a fee, unless the request is manifestly unfounded or excessive.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk or by calling 0303 123 1113.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and deliver relevant advertising. The types of cookies we use include:

8.1 Strictly Necessary Cookies

These are required for the website to function and cannot be disabled. They include cookies for your shopping cart, login session, and security.

8.2 Analytics Cookies

We use Google Analytics and Google Tag Manager to understand how visitors interact with our website. This data is anonymised and aggregated. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8.3 Marketing and Advertising Cookies

We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising and to show relevant ads to people who have visited our site. This involves the transfer of data to Meta Platforms Inc.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of this website.

9. Data Security

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.

10. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy. Order and financial records are typically retained for 7 years to comply with tax and accounting obligations. Marketing data is retained until you withdraw consent or opt out. Website analytics data is retained in accordance with Google’s standard retention policies.

11. Children’s Privacy

Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites, including our associated site holymackerelpredator.com and our social media pages. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post the updated policy on this page with the revised date. We encourage you to review this policy periodically.