Privacy policy

Last updated: September 2026

VERTOX LAB LTD ("we", "us") is the data controller for personal data collected through this website. Our registered address is 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. You can contact us at info@vertoxlabltd.xyz.

1. What we collect

• Order data: name, email address, phone number, billing and shipping address, and details of the products you purchase.
• Payment data: processed entirely by Stripe. We never receive or store your full card number. We receive a payment reference and the last four digits of your card for order matching.
• Contact data: anything you send us via the contact form or by email.
• Technical data: IP address, browser type and basic usage information collected by our hosting provider (Netlify) for security and performance.
• Cart data: the contents of your shopping cart are stored locally in your browser and are not transmitted to us until you check out.

2. Why we use it

• To process and deliver your orders and issue invoices (performance of a contract).
• To respond to enquiries and provide customer support (legitimate interests).
• To comply with tax, accounting and consumer-protection obligations (legal obligation).
• To prevent fraud and keep the website secure (legitimate interests).

We do not sell personal data and we do not send marketing email unless you have explicitly asked for it.

3. Who we share it with

We share data only with service providers needed to run the business: Stripe (payment processing), Netlify (website hosting and form handling), and our delivery carriers (name, address and phone number for parcel delivery). Each acts under contract and processes data only on our instructions. Where a provider is outside the UK or EEA, transfers are covered by appropriate safeguards such as standard contractual clauses.

4. How long we keep it

Order and invoice records are kept for six years to meet UK tax and accounting requirements. Contact-form messages are kept for up to two years. Technical logs are retained by our hosting provider for a short period for security purposes.

5. Cookies and local storage

This website does not use advertising or tracking cookies. We use browser local storage to remember your shopping cart between visits. Stripe sets cookies on its own checkout pages for fraud prevention, which are governed by Stripe's privacy policy.

6. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict the use of your personal data, to object to processing, and to data portability. To exercise any of these rights, email info@vertoxlabltd.xyz. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

7. Security

The website is served over HTTPS. Payment pages are hosted by Stripe, a PCI DSS Level 1 certified provider. Access to order data is limited to staff who need it to fulfil orders.

8. Changes

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be highlighted on this page.