Your Cart is Empty
“FREE UK DELIVERY (3–5 DAYS) | FREE INTERNATIONAL SHIPPING ON ORDERS OVER £60”
Last updated: 14 September 2026
XLR8 GROUP LTD is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you:
• Visit www.xlr8nutrition.com
• Purchase products from XLR8 Nutrition™
• Create an account
• Contact us
• Subscribe to marketing
• Purchase or participate in XLR8 Club boxing, kickboxing or fitness training
• Use other services provided through our website
This Privacy Policy should be read together with our Terms and Conditions and Cookie Policy.
The data controller is:
XLR8 GROUP LTD
97 Hibernia Road
Hounslow
TW3 3RL
United Kingdom
Company number: 12279672
Trading brands include:
XLR8 Nutrition™
XLR8 Club
Telephone:
020 8577 1099
Email:
info@xlr8nutrition.com
Website:
www.xlr8nutrition.com
Depending on how you interact with us, we collect information such as:
• Your name
• Email address
• Telephone number
• Billing address
• Delivery address
• Account information
• Order and purchase history
• Training purchases and package details
• Appointment and booking information
• Communications with us
• Customer service enquiries and complaints
• Product reviews or feedback you submit
• Marketing preferences
• Competition or survey responses
• Device, browser and website usage information
• IP address and similar technical information
• Cookie and advertising preferences
• Information needed to prevent fraud and protect our website
Where you use XLR8 Club, we also collect information reasonably required to arrange and provide your training.
This might include information about:
• Injuries
• Medical conditions relevant to training
• Physical limitations
• Medication relevant to safe participation
• Pregnancy where relevant to training safety
• Emergency contact information
• Other health information you choose to provide for safe participation
Health information is treated with additional protection under data protection law. Health information is classed as special category personal data under the UK GDPR.
Payments are processed by third-party payment providers.
Online payments might be processed through providers such as Stripe.
In-person payments might be processed through providers such as Square.
Full payment card details are processed through the relevant payment provider and are not normally stored directly by XLR8 GROUP LTD.
We might receive limited transaction information, such as:
• Payment status
• Transaction reference
• Amount paid
• Payment date
• Limited card information supplied by the payment provider
We collect personal information:
• Directly from you
• When you place an order
• When you create an account
• When you purchase training
• When you contact us
• When you complete a form
• When you provide health or training information
• When you subscribe to marketing
• Through cookies and similar technologies
• From payment, delivery and technology providers where necessary
• From fraud-prevention providers where appropriate
Where we obtain personal information from another source, we will provide the information required by applicable data protection law where necessary.
We use personal information to:
• Process and fulfil orders
• Take and verify payments
• Arrange delivery
• Manage customer accounts
• Provide customer support
• Handle returns, refunds and complaints
• Arrange XLR8 Club training
• Manage training packages and appointments
• Help provide training safely
• Maintain records of purchases and services
• Prevent fraud and misuse
• Protect our website and systems
• Improve our products, services and website
• Carry out appropriate analytics
• Send service communications
• Send marketing where permitted
• Meet accounting, tax and legal obligations
• Establish, exercise or defend legal claims where necessary
We only process personal information where we have an appropriate lawful basis.
Depending on the purpose, we rely on:
Contract
Where processing is necessary to fulfil an order, provide a training service, manage a subscription or take steps requested before entering into a contract.
Legal obligation
Where processing is necessary to comply with tax, accounting, consumer, regulatory or other legal requirements.
Legitimate interests
Where processing is reasonably necessary for our business interests and those interests do not override your rights.
Examples include:
• Preventing fraud
• Protecting our systems
• Improving our services
• Handling business administration
• Understanding website performance
• Defending legal claims
Consent
Where you have freely agreed to specific processing, such as certain marketing activities, non-essential cookies or processing which requires consent.
You may withdraw consent where consent is our lawful basis.
Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.
Health information relating to XLR8 Club participants receives additional legal protection.
Where we process health information for training safety, injury information or similar purposes, we will identify both an Article 6 lawful basis and an appropriate Article 9 condition.
Where we rely on explicit consent for special category information, you will be asked to provide a clear indication of that consent.
You may withdraw consent where applicable.
If information is reasonably necessary for safe participation and you choose not to provide it, we might be unable to provide or continue a particular training activity safely.
We do not use health information for unrelated advertising purposes.
The UK GDPR requires an additional condition for processing special category data, including health information.
For XLR8 Club customers, we use personal information to:
• Identify the participant
• Manage payments
• Arrange training dates and locations
• Communicate about appointments
• Record package usage where necessary
• Respond to cancellations or rescheduling requests
• Consider relevant health and safety information
• Respond appropriately in an emergency
• Handle customer service and complaints
Emergency contact details will only be used where reasonably necessary in connection with the participant's safety or another legitimate purpose.
Where permitted by law, we use contact information to send marketing about:
• XLR8 Nutrition™ products
• Offers and promotions
• New products
• XLR8 Club services
• Training offers
• Other relevant XLR8 services
You may unsubscribe from marketing at any time.
You may:
• Use the unsubscribe link in a marketing email
• Change available account preferences
• Contact info@xlr8nutrition.com
Stopping marketing does not stop essential communications such as:
• Order confirmations
• Delivery updates
• Payment information
• Booking communications
• Subscription information
• Important service messages
• Legal notices
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for the website to operate.
Other cookies might be used for:
• Analytics
• Remembering preferences
• Measuring website performance
• Advertising
• Understanding customer journeys
Where consent is required, non-essential cookies will not be placed until appropriate consent has been provided.
You should be given a genuine choice over non-essential cookies.
More information is provided in our Cookie Policy.
ICO guidance says users should be told what cookies do and why, and consent is generally required for non-essential cookies.
Where permitted and consistent with your choices, we might use information about purchases or website use to make content more relevant.
Where advertising technologies rely on non-essential cookies or similar technologies, we will follow applicable consent requirements.
We do not use health information collected for XLR8 Club training to target advertising.
We share personal information where reasonably necessary with categories of recipients such as:
• Payment processors
• Website and ecommerce providers
• Hosting and technology providers
• Delivery and courier companies
• Email and communication providers
• Analytics providers
• Fraud-prevention and security providers
• Professional advisers such as accountants or solicitors
• Insurers where relevant
• Government departments, regulators or law enforcement where legally required
• Business purchasers or advisers where part of a legitimate corporate transaction
Service providers are only given information reasonably necessary for the relevant purpose.
We do not sell personal information to advertisers.
Some technology, payment, hosting, analytics or other service providers process personal information outside the United Kingdom.
Where UK data protection rules restrict an international transfer, we use an appropriate legal mechanism.
Depending on the destination and provider, this might include:
• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to approved EU Standard Contractual Clauses
• Another lawful transfer mechanism
Where required, appropriate transfer-risk assessments or equivalent assessments are carried out.
The ICO recognises the UK IDTA and UK Addendum as mechanisms for relevant restricted international transfers.
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.
Retention periods differ depending on the information.
For example:
• Order and transaction records are retained for appropriate accounting and legal periods
• Customer service records are retained for as long as reasonably necessary to deal with enquiries or disputes
• Marketing information is retained until consent or marketing preferences change, subject to appropriate suppression records
• Training records are retained for as long as reasonably necessary for administration, safety, legal and insurance purposes
• Health information is not retained longer than reasonably necessary for the relevant training and legal purpose
Where information is no longer required, we delete, anonymise or securely dispose of it where appropriate.
If you unsubscribe from marketing, we might retain limited information on a suppression list so we do not contact you again for marketing.
We take appropriate technical and organisational measures to protect personal information against:
• Unauthorised access
• Accidental loss
• Destruction
• Alteration
• Unlawful disclosure
• Misuse
Our website and payment providers use appropriate security measures for data transmitted electronically.
No internet-based system offers absolute security, but we take reasonable measures appropriate to the nature and risk of the information involved.
Our online purchasing services are intended for adults who are legally able to enter into contracts.
XLR8 Club might provide training to participants under 18 where a parent or legal guardian has provided the required consent and arrangements have been agreed.
Where we process information relating to a child or young person, we take additional care regarding transparency, data minimisation and safeguarding.
Parents or guardians should provide relevant information required for safe participation where appropriate.
Depending on the circumstances, you have rights relating to your personal information, including:
• The right to be informed about how your information is used
• The right to access your personal information
• The right to request correction of inaccurate information
• The right to request erasure in certain circumstances
• The right to request restriction of processing in certain circumstances
• The right to data portability in certain circumstances
• The right to object to certain processing
• Rights relating to certain automated decision-making and profiling
• The right to withdraw consent where processing is based on consent
• The right to complain to the Information Commissioner's Office
These rights are subject to applicable legal conditions and exemptions.
ICO guidance recognises rights including access, rectification, erasure, restriction, portability and objection.
To exercise a data protection right, contact:
Email:
info@xlr8nutrition.com
Post:
XLR8 GROUP LTD
97 Hibernia Road
Hounslow
TW3 3RL
United Kingdom
Please provide enough information for us to identify you and understand your request.
We might request reasonable proof of identity where necessary to protect your information.
We will respond within the period required by applicable data protection law.
We do not currently make decisions about customers solely through automated processing where those decisions produce legal or similarly significant effects.
If this changes, we will provide appropriate information about the processing and applicable rights.
If you have concerns about how we use personal information, please contact us first so we have an opportunity to address the issue.
You also have the right to complain to the UK data protection regulator:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone:
0303 123 1113
Website:
ico.org.uk
The ICO identifies itself as the UK supervisory authority and provides this current contact information.
We might update this Privacy Policy where our services, technology, legal obligations or data-processing activities change.
The latest version will be published on our website.
Where a material change requires additional notice or consent, we will take appropriate steps.
If you have questions about this Privacy Policy or how we handle personal information, contact:
XLR8 GROUP LTD
97A Hibernia Road
Hounslow
TW3 3RL
United Kingdom
Telephone:
020 8577 1099
Email:
info@xlr8nutrition.com
Website:
www.xlr8nutrition.com
