Privacy Policy

This policy explains what we do with your personal information when you use this website or place an order. We have tried to write it plainly rather than defensively.

Who is responsible for your data

Seren Bio Labs, [LEGAL ENTITY], of [TRADING ADDRESS], is the data controller. [ICO REGISTRATION NUMBER - register at ico.org.uk before taking orders]

Questions or requests: support@serenbiolabs.com.

What we collect

When you place an order we collect:

• Your name, email address and phone number (phone optional);
• Your delivery address;
• What you ordered, the amount paid and any discount code used;
• Your research-use declaration, with the wording you agreed to and the time you agreed it;
• The country your order was placed from, derived from your connection, which we keep to help spot fraud.

If you use the contact form we receive the name, email, organisation and message you provide.

Why we use it, and our lawful basis

• To fulfil your order — performance of a contract.
• To email your order confirmation and dispatch updates — performance of a contract, and a legal obligation to confirm a distance contract in a durable form.
• To keep a record of the research-use declaration — legal obligation, and our legitimate interest in evidencing how we sell.
• To keep accounting records — legal obligation.
• To prevent fraud and misuse — legitimate interests.

We do not send marketing email unless you ask us to, and we do not sell or rent your data to anyone.

Who else handles it

We use a small number of providers to run the shop. Each only receives what it needs:

• Cloudflare — hosting and the order database.
• Fena — payment processing. They receive the order reference and amount.
• Resend — sends your order emails. Receives your name, email and order detail.
• Google — hosts the product catalogue spreadsheet. No customer data is stored there.
• [CARRIER NAME] — delivery. Receives your name, address and phone number.

Some of these process data outside the UK. Where that happens it is covered by the providers' standard safeguards for international transfers, such as the UK International Data Transfer Addendum.

Cookies and what the site stores

We do not use advertising or analytics cookies, and there is nothing tracking you across other sites. The site stores two things in your own browser:

• your research-use acknowledgement, so you are not asked on every page;
• your basket, so it survives moving to the checkout page.

Both stay on your device and can be cleared at any time through your browser settings. Clearing them only means you will be asked to acknowledge again.

How long we keep it

• Order records, including the research-use declaration — six years, to meet tax and accounting requirements.
• Contact form enquiries — up to 12 months.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete data we no longer have a reason to keep;
• restrict or object to how we use it; or
• send it to you or another provider in a portable form.

Email support@serenbiolabs.com and we will respond within one month. There is no charge.

We cannot always delete everything on request — order and tax records must be kept for six years — but we will tell you clearly if that applies and what we are keeping.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

This policy was last updated on 27 September 2026.