Privacy Policy

This Privacy Policy explains how Pyrox Labs Ltd ("we", "us", "our") collects, uses and protects your personal data when you visit pyroxlabs.co.uk or place an order with us. It should be read alongside our Terms & Conditions and Cookie Policy.

We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Pyrox Labs Ltd is a company registered in England and Wales, operating pyroxlabs.co.uk. For the purposes of data protection law, Pyrox Labs Ltd is the data controller for the personal information described in this policy.

2. What Data We Collect

We only collect data that's needed to fulfil orders, run our website and communicate with you. This includes:

Order and Checkout Data

• Name, delivery address and billing address
• Email address and phone number (where provided at checkout)
• Order history and order contents
• Payment confirmation status (we do not receive or store your full card details — payment is processed securely by our payment provider, see Section 5)

Account and Reviews

• If you create an account, your name, email and order history are stored to let you log in and view past orders
• If you leave a product review, your name and email are stored alongside the review text

Newsletter and Marketing

• If you sign up for stock and offer updates on our homepage, we store your email address and your selected preferences (e.g. new stock arrivals, offers, new products, research updates)
• We only send marketing emails to addresses that have opted in, and every email includes an unsubscribe link

Correspondence

• If you email us or contact us for support, we keep a record of that correspondence to help resolve your query and for our records

Technical Data

• Standard technical information collected automatically when you browse our site, such as IP address, browser type and device information, and cookies — see our Cookie Policy for full details

3. How We Use Your Data

We use your personal data to:

• Process, dispatch and manage your orders
• Communicate with you about your order (confirmations, dispatch, tracking, support)
• Send marketing updates, but only where you have opted in, and you can unsubscribe at any time
• Maintain accounts and enable order history where applicable
• Meet our legal and tax record-keeping obligations
• Detect and prevent fraud, and keep our website secure
• Improve our website and product range based on aggregated, non-identifying trends

4. Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract — to process and fulfil your order, we need your name, address and contact details
• Consent — for marketing emails, which you can withdraw at any time by unsubscribing
• Legal obligation — to keep financial and tax records as required by HMRC
• Legitimate interest — to keep our website secure, prevent fraud, and understand how our site is used, in ways that do not override your rights

5. Who We Share Your Data With

We only share your data with third parties where necessary to run our business. We do not sell your data to anyone.

We may also disclose your data where required by law, for example in response to a valid request from a regulatory or law enforcement authority.

6. International Data Transfers

Some of the providers we use may store or process data outside the UK (for example, Proton Mail is based in Switzerland). Where this happens, we only work with providers who maintain appropriate safeguards for your data in line with UK GDPR requirements.

7. How Long We Keep Your Data

• Order and financial records are kept for at least 6 years to meet UK tax record-keeping requirements
• Marketing data is kept until you unsubscribe or ask us to delete it
• Account data is kept for as long as your account remains active, or as required by law
• Correspondence is kept for as long as reasonably needed to resolve your query and for our records

8. Cookies

Our website uses cookies to keep your basket working, keep the site secure, and understand how the site is used. For full details of what cookies we use and how to manage them, see our Cookie Policy.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data, subject to our legal retention obligations
• Restrict or object to how we use your data
• Request a copy of your data in a portable format
• Withdraw consent for marketing at any time

To exercise any of these rights, email us at [email protected]. If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

Our website and products are not intended for anyone under the age of 18. We do not knowingly collect personal data from children.

11. Keeping Your Data Secure

We use reasonable technical and organisational measures to protect your personal data, including secure hosting, encrypted checkout, and restricted access to customer data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

13. Contact Us