Privacy Policy
Last updated: 2 October 2026
This Privacy Policy explains how Anabolic World (“we”, “us”, “our”) handles personal information when you use https://www.anabolicworld.is (the “Site”).
We are a business based in Australia. The Site is hosted by Hostinger. This Policy is written for a global audience and is intended to meet the Australian Privacy Principles under the Privacy Act 1988 (Cth), and to cover rights that may apply under other laws, including the EU/UK GDPR where those laws apply to you.
We only deal with personal information needed to run the Site, take and fulfil orders, and keep the Site secure. We do not run ongoing customer programmes, and we do not want information we do not need.
1. Who we are
Website: https://www.anabolicworld.is
Operator: Anabolic World (Australia)
Privacy requests go through our contact form. Use it only if you need to. We do not offer general account management or support by any other channel.
2. What we collect
Only what the Site and an order require.
From you
Account details, if you register: name, email, username, and password (stored hashed).
Order details: billing and shipping name, address, phone, email, and what you ordered.
Payment status from our payment provider. We do not store full card numbers.
Comment form data, if you comment: name, email, website, comment text, IP address, and browser user agent, used for spam checks.
Anything you type into the contact form.
Automatically
IP address, browser, device, and pages viewed, mainly for security and to make the Site work.
Cookies described in section 5.
A hashed version of your email may be sent to Gravatar to check for a profile image. Gravatar’s policy is at https://automattic.com/privacy/. An approved comment may show that image publicly.
Do not upload images with embedded location data (EXIF GPS). Other visitors can download images from the Site. Do not send us health or other sensitive information.
3. What we use it for
Running accounts, checkout, and order fulfilment.
Spam, fraud, and security checks. Comments may be checked by an automated spam service. A password-reset email includes your IP address.
Remembering login and comment details if you opt in.
Keeping records we are required to keep.
We do not use your information for ongoing marketing, profiling, or newsletters. We do not contact you unless it is about an order, a security issue, or a request you sent us.
Where the GDPR applies, we rely on contract (to supply what you ordered), legitimate interests (security and spam control), consent (optional cookies only), and legal obligation.
4. Cookies
Comment cookies, if you opt in: name, email, and website, for one year, so you do not retype them.
A temporary login-page cookie to test whether your browser accepts cookies. No personal data. Deleted when you close the browser.
Login cookies for two days, or two weeks if you choose “Remember Me”. Screen-option cookies for one year. These are removed when you log out.
A one-day editor cookie with only the post ID, if you edit or publish. No personal data.
Cart, checkout, and security cookies required for the store to function.
Blocking essential cookies will break checkout. We do not set advertising cookies.
5. Embedded content
Pages may embed content from other sites. That content behaves as if you visited the other site. Those sites may set their own cookies and track interaction with the embed. We do not control them.
6. Who else sees it
We share information only with parties needed to run the store:
Hostinger, which hosts the Site and stores Site data on its infrastructure;
payment processors, for payment;
shipping providers, to deliver an order;
spam and security tools;
authorities, if the law requires it.
We do not sell personal information. We do not pass your details to marketing partners.
7. Overseas storage
Hostinger and our payment and shipping providers may store or process information outside Australia, including in the European Economic Area, the United Kingdom, and the United States. By using the Site or placing an order, you understand that your information may be handled in those countries. Where the law requires safeguards for that transfer, we use them.
8. How long we keep it
Orders and invoices: as long as tax and legal rules require, commonly 5–7 years, then deleted or de-identified.
Accounts: until you close the account, or until we remove inactive accounts.
Comments: while the comment stays on the Site, so follow-up comments can be recognised.
Security logs: for a short period, then deleted.
We do not keep data for relationship or marketing purposes.
9. Security
Hostinger provides the hosting environment. We use HTTPS and hashed passwords. No online storage is completely secure.
10. Your rights
You can ask for a copy of the personal information we hold, ask us to correct it, or ask us to delete it, except where we must keep it for legal, tax, or security reasons. Account holders can also view and edit most profile details on the Site. Usernames cannot be changed.
Send requests through the contact form. We may need to confirm it is you. We respond within a reasonable time, and within one month where the GDPR applies.
11. Children
The Site is not for anyone under 18. We do not knowingly collect their information.
12. Changes
We may update this Policy by posting a new version here. The date at the top will change. Continued use of the Site after that means you accept the updated Policy.
13. Contact
Use the contact form for privacy requests only.
If the contact form URL is not /contact-us/, swap the links before you publish