Privacy policy

Last updated · 5 May 2026

Zynox Labs Ltd ("Zynox Labs", "we", "our", "us") is committed to protecting and respecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights as a data subject under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Zynox Labs Ltd is the data controller for any personal information collected through this website. We are a research peptide laboratory based in the United Kingdom. To exercise any of the rights described in this policy, please contact privacy@zynoxlabs.co.uk.

2. What information we collect

• Identity & contact data: name, organisation, email address, phone number, billing and shipping address.
• Transaction data: details of the products you have purchased, transaction reference numbers, payment status. (Card numbers are tokenised by our PCI-compliant payment processor and are never stored on our servers.)
• Technical data: IP address, browser type and version, device information, time-zone, operating system. Collected for security, analytics, and fraud prevention.
• Usage data: pages visited, links clicked, time spent on pages, referral source. Collected via cookies and similar technologies.
• Marketing preferences: your preferences in receiving marketing communications from us.

3. How we use your information

We process your personal data on the following lawful bases:

• Performance of contract: to fulfil orders, process payments, dispatch products, communicate order status, and provide customer service.
• Legitimate interests: to operate, maintain, and improve our website and services; to detect and prevent fraud; to enforce our Terms of Service.
• Legal obligations: to comply with applicable accounting, tax, and regulatory requirements.
• Consent: to send you marketing communications, where you have opted in. You may withdraw consent at any time.

4. Sharing your information

We do not sell your personal data. We share data only with carefully selected processors strictly to the extent necessary to deliver our services, including:

• Payment processors (PCI-compliant, for card payment authorisation only).
• Shipping carriers (for tracked dispatch, address details only).
• IT and hosting providers (for website operation and database storage).
• Email service providers (for transactional and opted-in marketing communications).
• Government bodies, law enforcement, or regulators where required by law.

5. International transfers

Where data is transferred outside the UK or European Economic Area we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfer to a country with an adequacy decision.

6. Data retention

We retain personal data only as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting, or reporting requirements. Order records are typically retained for seven years to comply with HMRC tax law.

7. Your rights

Under UK GDPR you have the following rights:

• The right to be informed about how we use your data.
• The right of access to a copy of the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure ("right to be forgotten") in certain circumstances.
• The right to restrict or object to processing.
• The right to data portability.
• The right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

8. Cookies

We use first-party cookies that are strictly necessary for the website to function (such as the shopping cart) and optional analytics cookies that help us improve the site. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect site functionality.

9. Security

We employ industry-standard technical and organisational measures to safeguard your personal data, including TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security audits. While no system is impenetrable, we work to maintain the highest practical level of protection.

10. Changes to this policy

We may update this policy from time to time. The most recent version is always published on this page with the "Last updated" date above. We encourage you to review this policy periodically.

11. Contact

For privacy-related questions or to exercise your rights, contact privacy@zynoxlabs.co.uk.