Data retention policy

Last updated: October 2026

We believe the best way to protect our customers’ privacy is to hold as little personal data as possible, for as short a time as possible. This page sets out how long we keep each kind of data and how we comply with UK law. It supplements our Privacy Policy.

Information we retain, durations and why

• Order and transaction records: 6 years from the end of the financial year in which the products were ordered, as required by UK tax and accounting law. This information is also needed to handle any legal claim.
• Customer accounts: while your account remains active, so you can view your order history and reorder easily. You can ask us to delete your account by emailing support@musclelabs.co.uk.
• Customer service emails: routine correspondence is deleted within 12 months, and typically after 6.
• Emails about disputes, complaints or payment issues: retained until resolved, then up to 6 years where needed to evidence settled payment disputes and legal claims.
• Marketing subscriptions: until you unsubscribe. A minimal suppression record is kept afterwards so we never email you again.
• Backups: rotated automatically; no backup copy is older than 60 days, and backups are only used for disaster recovery.

What we never keep

Card numbers and bank logins. Payments are approved on our payment provider’s platform and in your own banking app. Your payment credentials never reach our servers, so there is nothing for us to retain.

Deletion on request

You do not have to wait for these timescales. Ask us to delete your personal data at any time by emailing support@musclelabs.co.uk. We will action it within 4 weeks, free of charge, keeping only what the law requires us to keep (such as tax records) and a minimal record needed to honour the request itself.

Why we keep some data for 6 years

UK law requires businesses to keep records supporting their accounts and tax returns for six years, and payment disputes or contractual claims can be raised years after a purchase. That is a legal requirement rather than a choice. Muscle Labs keeps only the records that are necessary for that period.

Information Commissioner’s Office (ICO)

Muscle Labs Limited is registered with the Information Commissioner’s Office, registration number ZC246045. View our registration certificate (PDF).