Skip to content

Legal

Privacy Policy

Last updated: July 2026

1. Who We Are

Biomaxx is a UK-based research compound supplier. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller: Biomaxx | Contact: hello@biomaxx.co.uk

2. Data We Collect

We collect the following personal data when you place an order or contact us:

  • Name and email address
  • Delivery and billing address
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Order history and preferences
  • IP address and browser data (via cookies)
  • Any information you provide when contacting us

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders
  • Communicate about your order status and queries
  • Comply with legal and regulatory obligations
  • Improve the website experience (via anonymised analytics)
  • Send marketing emails where you have given consent (you may opt out at any time)

4. Legal Basis for Processing

We process your data on the following lawful bases under UK GDPR:

  • Contract performance — to fulfil orders you have placed
  • Legal obligation — to comply with UK tax and regulatory requirements
  • Legitimate interests — to operate our business, prevent fraud, and improve our service
  • Consent — for marketing communications

5. Data Sharing

We do not sell your personal data. We share data only with trusted third parties who assist in operating our business, including:

  • Payment processors (e.g. Stripe) — for secure payment handling
  • Courier services — for order delivery
  • Hosting providers — for website operation

All third parties are bound by data processing agreements and may only use your data as instructed by us.

6. Data Retention

We retain order-related personal data for 7 years to comply with HMRC requirements. Contact form submissions are retained for up to 2 years. Marketing consent records are retained until you withdraw consent.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten") where no legal obligation requires retention
  • Withdraw consent for marketing at any time
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at hello@biomaxx.co.uk.

8. Cookies

We use essential cookies required for the website and shopping cart to function. Analytics cookies (where used) are anonymised. You may disable cookies in your browser settings, though this may affect functionality.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Payment data is handled by PCI-DSS-compliant providers.

10. Changes to This Policy

We may update this Privacy Policy periodically. The current version will always be available on this page with the date it was last updated.

11. Contact

For any privacy-related queries, contact us at hello@biomaxx.co.uk.