Privacy policy
Last updated 16 October 2026.
Who we are
Levelz Energy Ltd (company no. 16192753), Norwich, Norfolk, NR1, is the controller of your personal data. Contact: hello@levelzenergy.co.uk or +44 7500 069041.
What we collect
- Orders: name, delivery address, email, phone and order details. Checkout and payment are handled by Shopify; we never see your full card details.
- Your account: if you create a customer account to track orders and reorder, Shopify holds your login email, addresses and order history for us.
- Subscriptions: if you subscribe, your plan, delivery schedule and payment method are held by Shopify and its subscriptions app.
- Email sign-up: your email address and a record of when and how you agreed, if you choose to join our list.
- Game: the nickname and scores you enter in Bamboo Hop. These stay in your browser and are never sent to us.
- Affiliate referrals: if you arrive through a creator's link or code, which affiliate referred you, so we can pay them. Only with marketing consent.
- Site analytics (our own): which pages you visit and in what order, where your visit came from (for example a search engine, an AI chat, a social network or a creator's link), how far down each page you scroll, how long the page is in use, which buttons you press, what you add to the basket and whether the visit ended in an order. It is linked to a random ID kept in your browser, not to your name or email. We don't store your IP address. Only we see it: it is never shared or sold, never used for advertising, and never combined with Google or Meta data.
- Google Analytics: how the site is used, only if you accept analytics cookies.
Why we use it (lawful basis)
- Fulfilling orders, accounts and subscriptions: contract.
- Marketing emails, analytics and marketing cookies, and affiliate tracking on this site: consent, which you can withdraw at any time.
- Affiliate tracking when you arrive through a creator's link: legitimate interests in crediting and paying the creators who refer customers to us. It records which creator's link you followed so a resulting order can be credited to them. You can avoid it by coming to our site directly rather than through a creator's link.
- Keeping the site secure and working, and handling questions you send us: legitimate interests.
- Site analytics (our own): legitimate interests in understanding how the site is used so we can improve it. The storage it uses falls under the exemption for analytics in the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025. You can switch it off at any time in , and it doesn't run if your browser sends a Global Privacy Control signal.
- Tax and accounting records: legal obligation.
Cookies and similar storage
Essential storage runs without asking because the site needs it. Our own site analytics also runs by default (see above), and you can switch it off. Google Analytics and marketing cookies wait until you choose in the cookie banner, and you can change your mind any time with the link in the footer. If you withdraw consent, we delete the analytics and marketing cookies already set on this site.
Creator links are the exception. If you follow a creator's or affiliate's link to us, you pass for a moment through our Shopify store (shop.levelzenergy.co.uk) before landing here. On the way, our affiliate partner UpPromote sets the cookies listed below so the creator gets credit for referring you and any creator discount is applied at checkout. This happens before you see our cookie banner. If you'd rather it didn't, come to levelzenergy.co.uk directly instead of through a creator's link, or clear these cookies in your browser.
| Name | Set by | Purpose | Type | Kept for |
|---|---|---|---|---|
| lz-consent-v2 | Levelz® (browser storage) | Remembers your cookie choices and when you made them | Essential | 12 months |
| lz-cart-v1 | Levelz® (browser storage) | Keeps your basket between pages | Essential | Until you empty the cart or clear your browser |
| lz-vid | Levelz® (browser storage) | Site analytics: a random ID so we can tell repeat visits apart. Not linked to your name or email | Site analytics (can be switched off) | 13 months, then replaced |
| lz-sess | Levelz® (browser storage) | Site analytics: groups the pages of one visit | Site analytics (can be switched off) | Ends after 30 minutes without activity |
| lz-mode | Levelz® (browser storage) | Remembers Arcade or Calm display mode | Essential (your setting) | Until you clear your browser |
| lz-bamboo-best, lz_board_v1, lz_player_v1 | Levelz® (browser storage) | Your Bamboo Hop best score, high-score board and nickname | Essential (the game you play) | Until you clear the board or your browser |
| _ga, _ga_* | Google Analytics 4 | Counts visits and how the site is used | Analytics | Up to 2 years |
| _fbp, _fbc | Meta Pixel | Measures our ads on Facebook and Instagram | Marketing | Up to 3 months |
| _up_clid | UpPromote (cookie and browser storage) | Affiliate tracking: credits the creator who referred you | Marketing | 12 months |
| scaaf_aid, scaaf_c_c, scaaf_sca_source_secomus, scaaf_ep, scaaf_tid, scaaf_ctk | UpPromote (cookie and browser storage) | Affiliate tracking: records which creator link you used and links your visit to an order | Marketing | About 12 months |
| scaaf_afn, scaaf_afc, scaaf_affn, scaaf_pd, up_uppromote_aid, up_uppromote_hs, up_uppromote_lc, up_uppromote_received, _up_tra, _up_cid, _up_a_info | UpPromote (cookie and browser storage) | Affiliate tracking: the creator and offer that referred you, so commission and any discount can be applied | Marketing | 30 days |
| Shopify checkout cookies | Shopify (on our checkout pages) | Runs secure checkout and your customer account | Essential | See Shopify's cookie policy |
Who we share it with
Shopify (store, checkout, customer accounts and subscriptions), our email provider (marketing email from hello@levelzenergy.co.uk, only if you sign up), our delivery carrier, Netlify (website hosting, the sign-up form and storing our site analytics), UpPromote (affiliate tracking: when you arrive through a creator's link, and on this site only with marketing consent), and Google and Meta (only with consent). Each acts on our instructions under a data processing agreement, or as an independent controller where its own terms say so.
International transfers
Some of these providers process data outside the UK, mainly in the USA, Canada and the EU. Where they do, we rely on the UK's adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the ICO's International Data Transfer Agreement or Addendum, so your data keeps an equivalent level of protection.
How long we keep it
Order records for 6 years for tax purposes. Account data for as long as your account is open. Marketing data until you unsubscribe. Site analytics records for 13 months, after which only daily totals (with no IDs) are kept. Cookie lifetimes are in the table above.
Age
Our products are only for adults. We do not knowingly collect data from anyone under 18.
Your rights
You can ask to access, correct, delete or move your data, object to processing, or withdraw consent at any time. Email hello@levelzenergy.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.
