Privacy Policy

Last updated: 23/05/26

This Privacy Policy explains how Thistle BioLabs collects, uses, stores and protects your personal information when you visit our website, place an order, contact us, or interact with our services.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

  • Who We Are

Thistle BioLabs is a UK-based online store supplying laboratory research products for research and educational analysis only.

For the purposes of UK data protection law, Thistle BioLabs is the data controller responsible for your personal information.

Contact details:

Email: support@thistlebiolabs.co.uk
Telegram: @thistlebiolabs
WhatsApp: 07719704948

Trading name: Thistle BioLabs

  • Information We Collect

We may collect the following types of personal information:

Information You Provide Directly

This may include:

  • Full name
  • Email address
  • Phone number
  • Billing address
  • Delivery address
  • Order details
  • Payment-related information
  • Messages sent to us by email, WhatsApp, Telegram, contact forms, or social media
  • Any information you choose to provide when contacting us

Please do not send us personal medical information, health details, or information about personal use. Our products are supplied strictly for laboratory research and educational analysis only.

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages viewed
  • Time spent on the website
  • Referring website
  • Cookies and similar tracking data

This information helps us understand how visitors use our website and improve our services.

Payment Information

Payments may be processed through third-party payment providers. We do not store full card details on our own systems.

Your payment provider may collect and process your payment information in accordance with their own privacy policy and security standards.

  • How We Use Your Information

We use your personal information to:

  • Process and fulfil orders
  • Arrange delivery
  • Provide customer support
  • Respond to enquiries
  • Send order confirmations and service updates
  • Manage returns, refunds, and delivery issues
  • Prevent fraud and misuse of our website
  • Maintain business records
  • Improve our website, products, and customer experience
  • Comply with legal, tax, accounting, and regulatory obligations
  • Send marketing communications, where permitted by law or where you have consented

We do not sell your personal information.

  • Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for using your personal information.

We may rely on the following lawful bases:

Contract

We process your information where it is necessary to fulfil an order, arrange delivery, provide customer support, or manage an account or transaction.

Legal Obligation

We may process and retain information where required for tax, accounting, consumer law, regulatory, or legal compliance.

Legitimate Interests

We may use personal information where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests.

This may include fraud prevention, website security, customer service, business administration, and improving our services.

Consent

We may rely on your consent for certain activities, such as optional marketing emails or non-essential cookies.

You can withdraw consent at any time.

  • Sharing Your Information

We may share your information with trusted third parties where necessary to operate our business, including:

  • Website hosting providers
  • E-commerce platform providers
  • Payment processors
  • Delivery and courier services, including Royal Mail
  • Email and communication service providers
  • Analytics providers
  • Professional advisers, such as accountants or legal advisers
  • Law enforcement, regulators, or authorities where legally required

We only share information where necessary and only with parties who have a valid reason to process it.

  • Delivery and Order Fulfilment

To fulfil your order, we may share your name, delivery address, contact details, and order information with delivery providers.

Customers are responsible for ensuring that delivery details provided at checkout are accurate and complete.

  • Marketing Communications

We may contact you with marketing updates, offers, product information, or business updates where you have consented or where we are otherwise allowed to do so by law.

You can opt out of marketing communications at any time by contacting us or using any unsubscribe option provided.

We will not send you marketing messages if you have opted out.

  • Cookies

Our website may use cookies and similar technologies to:

  • Keep the website functioning properly
  • Remember preferences
  • Analyse website traffic
  • Improve user experience
  • Support advertising or marketing activity

Some cookies are necessary for the website to work. Others, such as analytics or advertising cookies, may require your consent.

You can manage or disable cookies through your browser settings. However, disabling some cookies may affect how the website functions.

For more detail, please refer to our Cookie Policy if available.

  • How Long We Keep Your Information

We only keep personal information for as long as necessary for the purpose it was collected.

Typical retention periods may include:

  • Order and transaction records: retained as required for tax, accounting, and legal purposes
  • Customer service messages: retained for as long as needed to handle the enquiry and maintain business records
  • Marketing data: retained until you unsubscribe or withdraw consent
  • Website analytics data: retained for a limited period depending on the analytics provider
  • Legal or dispute-related records: retained for as long as necessary to protect our legal position

Where information is no longer needed, we will delete it or anonymise it where appropriate.

  • How We Protect Your Information

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, alteration, or disclosure.

These steps may include:

  • Secure website technology
  • Access controls
  • Password protection
  • Limited access to personal information
  • Secure third-party service providers
  • Regular review of business systems and processes

However, no method of online transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

  • International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where this happens, we will take appropriate steps to ensure your personal information is protected in line with applicable data protection laws.

  • Your Data Protection Rights

Under UK data protection law, you may have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information in certain circumstances
  • Request restriction of processing in certain circumstances
  • Object to certain types of processing
  • Request transfer of your information to another provider where applicable
  • Withdraw consent where processing is based on consent
  • Complain to the Information Commissioner’s Office if you are unhappy with how your data is handled

To exercise your rights, please contact us using the details below.

  • Third-Party Links

Our website may contain links to third-party websites, apps, or services.

We are not responsible for the privacy practices, content, or security of third-party websites. You should read their privacy policies before providing them with personal information.

  • Age Restrictions

Our website and products are intended for adults aged 18 or over.

We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it where appropriate.

  • Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, legal obligations, or data handling practices.

The latest version will always be available on our website, with the updated date shown at the top of the page.

  • Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Email: support@thistlebiolabs.co.uk
Telegram: @thistlebiolabs
WhatsApp: 07719704948

You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how your personal data has been handled.