This Privacy Policy explains how Nexyra Research Ltdcollects, uses, and protects your personal data when you use nexyralab.com (the “Site”) or buy from us. We are committed to handling your data in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Nexyra Research Ltdis the data controller for the personal data described in this policy. We are registered in England & Wales (company number 17057743), registered office 124–128 City Road, London EC1V 2NX. You can contact us about your data at our support team.
Registered with the UK Information Commissioner’s Office (ICO) under registration number ZC177811.
2. The personal data we collect
Depending on how you use the Site, we may collect:
- Identity and contact data— name, email address, delivery address, and (if you create an account) login details.
- Order data— products ordered, order history, and payment-confirmation data received from our payment provider (we do not receive or store your bank login or card details).
- Communications data— messages you send us and our replies.
- Marketing data— your preferences for receiving marketing from us.
- Technical and usage data— IP address, device and browser information, and how you use the Site, collected via cookies and similar technologies (see section 5).
We do not ask for, and you should not send us, any health or other special-category data.
3. How and why we use your data
We use your data to:
- process and deliver your orders and manage your account;
- take and confirm payment via our payment provider;
- respond to your enquiries and provide customer support;
- prevent and detect fraud and misuse, and to verify eligibility under our Terms;
- send you marketing where you have asked us to (see section 4 on marketing);
- comply with our legal and tax obligations; and
- improve and secure the Site.
4. Our lawful bases
We rely on the following lawful bases under the UK GDPR:
- Performance of a contract— to process and deliver your orders and manage your account.
- Legal obligation— to keep records required by tax and accounting law and to comply with regulatory requirements.
- Legitimate interests— to prevent fraud and misuse, secure and improve the Site, and run our business efficiently. Where we rely on legitimate interests, we have considered your rights and will provide more detail on request.
- Consent— for optional marketing communications and for non-essential cookies. You can withdraw consent at any time.
Marketing. We will only send you marketing emails where you have opted in. Every marketing email contains an unsubscribe link, and you can opt out at any time. You have an absolute right to object to direct marketing.
5. Cookies
The Site uses cookies and similar technologies for essential functions (such as your cart and checkout) and, with your consent, for analytics and marketing. You can manage your preferences through our cookie banner and your browser settings. Essential cookies do not require consent; non-essential cookies are only set after you opt in. (A separate Cookie Policy / banner manages and records consent.)
6. Who we share your data with
We share personal data only with parties who help us run our business, and only as needed:
- Shopify— our e-commerce platform and hosting provider;
- Fena— our payment provider, to initiate and confirm Pay by Bank payments;
- delivery and courier partners— to fulfil and deliver your order;
- email and marketing service providers— to send communications you have requested;
- analytics providers— to understand and improve Site performance;
- professional advisers (accountants, lawyers) and authorities— where required by law.
We do not sell your personal data.
7. International transfers
Some of our service providers may process data outside the UK. Where they do, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum, so that your data remains protected.
8. How long we keep your data
We keep personal data only as long as necessary:
- order and transaction records— approximately 6 years, to meet UK tax and accounting requirements;
- account data— while your account is active, then deleted or anonymised;
- marketing data— until you withdraw consent or object.
9. How we protect your data
We use appropriate technical and organisational measures to keep your data secure, including encryption in transit and restricted access. Payments are handled by our regulated payment provider, so we never see or store your banking credentials.
10. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing;
- data portability;
- withdraw consent where we rely on it; and
- object to direct marketing at any time (absolute right).
To exercise any of these rights, contact our support team. We will normally respond within one month.
11. Complaints
If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
12. Children
The Site and our Products are intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it was last revised. Material changes will be highlighted on the Site.
14. Contact
Questions about this policy or your data: our support team, Nexyra Research Ltd, 124–128 City Road, London EC1V 2NX.
