Privacy Policy.

01Introduction

We Are Nox Ltd takes your privacy seriously. This policy explains what personal data we collect when you use our website or place an order, how we use it, who we share it with, and what rights you have over it.

This policy applies to anyone who visits our Site, contacts us, registers an account, places an order, or subscribes to our communications.

02Who is the data controller

The data controller responsible for your personal data is We Are Nox Ltd, company number 17224065, registered in England and Wales. You can contact our data protection point of contact at hello@wearenox.io.

03What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Information you provide directly

• identification details, name, institution, professional role;
• contact details, email address, telephone number, delivery and billing addresses;
• order details, products purchased, quantities, order history;
• payment information, handled by our payment processor; we do not store full card details on our systems;
• communications, any message you send us via email or contact form.

Information we collect automatically

• technical data, IP address, browser type, device type, operating system;
• usage data, pages visited, time spent on the Site, referring URLs;
• cookies and similar tracking technologies (see clause 8).

04How we use your data & the legal basis

We process your personal data for the following purposes, on the following legal bases:

• To process and fulfil your orders, necessary for the performance of our contract with you (UK GDPR Art. 6(1)(b)).
• To verify research-use eligibility and prevent misuse, necessary for our legitimate interests in operating a compliant research-supply business (UK GDPR Art. 6(1)(f)).
• To provide customer support, necessary for the performance of our contract or for our legitimate interests.
• To send service communications (order confirmations and dispatch updates), necessary for the performance of our contract.
• To send marketing communications, only with your consent, which you may withdraw at any time (UK GDPR Art. 6(1)(a)).
• To comply with our legal and regulatory obligations, including tax, accounting and regulatory record-keeping (UK GDPR Art. 6(1)(c)).
• To improve our Site and services, necessary for our legitimate interests, balanced against your rights and freedoms.

05How long we keep your data

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• order and transaction records, minimum 6 years (HMRC requirement);
• customer-account data, until you request deletion or 3 years of inactivity;
• marketing-consent records, until you withdraw consent;
• cookie and device-storage durations, as set out in our Cookie Policy.

06Who we share data with

We do not sell your personal data. We share it only with the following categories of recipient, where necessary for the purposes set out above:

• Payment processors, to process payments securely (Wallid for Open Banking payments; if you pay by bank transfer, your payment is processed by your own bank);
• Delivery partners, to fulfil orders (Royal Mail and equivalent couriers);
• Email and hosting providers, for service communications and Site infrastructure;
• WhatsApp (Meta Platforms, Inc.), only if you choose to contact us or place an order via WhatsApp;
• Professional advisers, accountants, lawyers, auditors where required;
• Regulators or law enforcement, where required by law or to protect our legal rights.

All third-party processors operate under data-processing agreements that require them to protect your data and use it only as instructed.

07International transfers

Some of our service providers are based outside the United Kingdom. Where we transfer personal data internationally, we do so under safeguards approved under UK GDPR (UK adequacy regulations or Standard Contractual Clauses).

08Cookies & analytics

We use a small number of cookies to operate the Site. Strictly necessary cookies (cart functionality, security) are used without consent, as permitted by law. We do not currently use analytics or marketing cookies. Functional preferences, such as your saved research list and the age acknowledgement, are stored on your device and are not transmitted to us.

A full list of the cookies and similar technologies we use is set out in our Cookie Policy. You can adjust your preferences at any time via the cookie banner or your browser settings.

09Marketing communications

We will only send you marketing communications (newsletters, lab updates, occasional product news) if you have explicitly consented to receive them. You can withdraw consent at any time by clicking unsubscribe in any marketing email or by emailing us.

10Your rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access, to receive a copy of the personal data we hold about you;
• Right to rectification, to ask us to correct inaccurate or incomplete data;
• Right to erasure, to ask us to delete your data, subject to our legal retention obligations;
• Right to restriction, to ask us to limit the processing of your data;
• Right to portability, to receive your data in a structured, machine-readable format;
• Right to object, to processing based on our legitimate interests, including profiling and direct marketing;
• Right to withdraw consent, at any time, where processing is based on consent.

To exercise any of these rights, contact us at hello@wearenox.io. We will respond within one month.

11How to make a complaint

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12Changes to this policy

We may update this policy from time to time. The current version will always be available on the Site. Material changes will be notified by email where we hold a current address for you.