Privacy Policy

1. Who We Are

This website is operated by GenoPept Ltd, a company registered in England and Wales. Our registered address is 304a High Road Leyton, London, E10 5PW.

GenoPept Ltd is the data controller for the personal information collected through this website. For privacy-related questions, requests, or concerns, you can contact us at legal@genopept.co.uk.

2. Information We May Collect

The type of personal information we collect depends on how you interact with our website and services. We may collect the following categories of information:

Identity and contact information: Name, email address, phone number, and billing/shipping address when you place an order, create an account, or contact us.

Order and transaction information: Products ordered, order history, payment confirmation details (we do not store full card numbers), and delivery information.

Account information: Username, password (stored encrypted), and account preferences if you create a customer account.

Communication information: The content of messages or enquiries you send us by email, contact form, or other means.

Technical information: IP address, browser type and version, device type, operating system, pages visited, time on site, and referral source. This is collected automatically where analytics are active and applicable consents are in place.

3. How We Collect It

We collect personal information in the following ways:

• Directly from you — when you fill in a form, create an account, place an order, or contact us
• Automatically — via cookies and analytics tools when you browse our website (see our Cookie Policy)
• From third parties — our payment processor may share confirmation data with us when a transaction is completed

We do not purchase, rent, or obtain personal data from data brokers or marketing lists.

4. How We Use It

We use your personal information for the following purposes:

• To process and fulfil your orders and communicate about delivery
• To manage your account and provide customer support
• To respond to your enquiries and contact requests
• To maintain required business records and comply with legal obligations
• To protect against fraud, abuse, and security threats
• To improve our website and services where you have consented to analytics
• To send you transactional emails (order confirmations, shipping updates)

We do not use your personal data for targeted advertising. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

5. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary to fulfil your order or provide the services you have requested
• Legal obligation: Processing required to comply with applicable laws (e.g. tax records, fraud prevention)
• Legitimate interests: Processing necessary for our legitimate business interests (e.g. fraud detection, improving our services), where these interests are not overridden by your rights
• Consent: Where you have given explicit consent (e.g. for analytics cookies or marketing communications)

6. Who We Share It With

We share your personal information only where necessary to operate our services:

• Payment processors: To securely process your payment. They receive only the information needed to complete the transaction and are subject to their own privacy obligations.
• Delivery and logistics providers: Your name and shipping address are shared with our delivery partners to fulfil your order.
• IT and website service providers: Our hosting provider and WooCommerce/WordPress platform may process data as part of operating our infrastructure.
• Legal and regulatory authorities: Where required by law or to protect our legal rights.

All third parties we work with are required to process your data in accordance with applicable data protection law.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Order and transaction records: Retained for 7 years to comply with HMRC and legal requirements
• Customer accounts: Retained while the account is active, plus a reasonable period after closure
• Enquiry and contact records: Retained for up to 3 years after last contact
• Analytics data: Retained in aggregated form in line with the relevant tool’s data retention settings

When we no longer need your personal data, we securely delete or anonymise it.

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at legal@genopept.co.uk. We will respond within one calendar month. We may ask you to verify your identity before processing your request.

9. Data Security

We take the security of your personal data seriously. Our website uses SSL/TLS encryption for all data in transit. Passwords are stored in encrypted form. We do not store full payment card numbers on our servers.

While we implement appropriate technical and organisational measures to protect your data, no transmission over the internet or method of electronic storage is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately.

10. Cookies

We use cookies and similar technologies on our website. For full details of the cookies we use, what they do, and how to manage them, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this policy. We encourage you to review this policy periodically.

Continued use of our website following any changes constitutes acceptance of the updated Privacy Policy.

12. How to Complain

If you are unhappy with how we have handled your personal data, we encourage you to contact us first at legal@genopept.co.uk so we can try to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the UK:

ICO website: ico.org.uk
ICO helpline: 0303 123 1113