privacy-policy

Who We Are

Bioactive Labs is responsible for your personal data. We are registered in England and Wales. Our website is bioactivelabs.co.uk.

What Data We Collect

We may collect and process the following personal data: your name and username, email address, postal address and phone number, purchase history and payment method type (we do not store full card numbers), IP address, browser type and pages visited, and your preferences for receiving marketing communications from us.

How We Use Your Data

We use your data to process and fulfil your orders, send order confirmations and shipping updates, manage your account and respond to enquiries, comply with legal obligations, send marketing communications where you have opted in, and improve our website and services through analytics.

Legal Basis for Processing

We process your data on the following lawful bases under UK GDPR. Contract: to fulfil your order. Legal obligation: to comply with applicable laws. Legitimate interests: to improve our service and prevent fraud. Consent: for marketing communications, which you can withdraw at any time.

Cookies

We use essential cookies to operate our Site and, where you consent, analytics cookies to understand how visitors use our Site. You can manage cookie preferences via your browser settings.

Third-Party Sharing

We share your data only with service providers who assist us in operating our business, including payment processors (Stripe), shipping carriers, and email platform providers. We do not sell your personal data to third parties.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined above or as required by law. Order records are typically retained for 7 years for tax purposes.

Your Rights

Under UK GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data subject to legal obligations, object to processing for marketing purposes, data portability, and lodge a complaint with the ICO at ico.org.uk. To exercise your rights, contact us via our contact page.

Security

We implement appropriate technical and organisational measures to protect your data. All transactions are encrypted via SSL/TLS.

Changes to This Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with the updated date.