1. Who We Are
Futura Biolabs is the data controller for personal data collected through this website. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
We collect and process the following categories of personal data:
- Identity data: first name, last name
- Contact data: email address, phone number
- Transactional data: order details, payment records, shipping address
- Technical data: IP address, browser type, pages visited, referral source
- Compliance data: records of your acceptance of our Terms, Research Use Disclaimer, and age confirmation at checkout
3. How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders and account
- Complying with our legal and regulatory obligations
- Maintaining records of compliance acceptance for regulatory purposes
- Improving our website and services
- Preventing fraud and abuse
4. Legal Basis for Processing
We rely on the following legal bases for processing your personal data:
- Contract performance: to fulfil your order
- Legal obligation: to comply with UK law, including record-keeping requirements
- Legitimate interests: to maintain compliance records, prevent fraud, and improve our services
- Consent: where you have provided explicit consent (e.g. marketing communications)
5. Data Sharing
We do not sell your personal data. We may share your data with the following categories of third parties:
- Shipping carriers and logistics providers (to fulfil your order)
- Payment processors (to process bank transfers)
- IT service providers and cloud hosting providers
- Law enforcement or regulatory authorities, where required by law
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Order records, compliance acceptance logs, and associated personal data are retained for a minimum of 6 years in accordance with UK legal and tax requirements.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erasure of your data (subject to legal retention obligations)
- Restrict or object to processing in certain circumstances
- Data portability
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us via our contact page.
8. Cookies
We use essential cookies to operate the website, including session management. We do not currently use third-party advertising or tracking cookies. By using this website, you consent to our use of essential cookies.
9. Contact & DPO
For any privacy-related enquiries or to exercise your rights, please contact us via our contact page. We aim to respond to all requests within 30 days.