Privacy Notice
Last Updated: 3 October 2026
1. Introduction
PepLab London (“PepLab London”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store, and protect personal information when you visit or use our website, peplablondon.co.uk, create an account, place an order, contact us, or otherwise interact with our services.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable.
Please read this Privacy Notice carefully so that you understand how and why we use your information.
2. Information We Collect
Depending on how you interact with our website, we may collect the following categories of personal information.
Information You Provide Directly
This may include:
- Full name
- Email address
- Telephone number
- Billing address
- Delivery address
- Account login information
- Order and transaction details
- Information provided when contacting our customer support team
- Information submitted through website forms
- Any other information you voluntarily provide to us
Payment Information
When you make a purchase, payment information may be processed by our third-party payment service providers.
Where payment processing is handled by a third-party provider, we may receive limited payment-related information, such as transaction status, payment confirmation, or the last few digits of a payment card.
We do not intend to store complete payment card details on our own systems where payment processing is handled directly by an authorised payment provider.
Technical Information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Time zone
- Website pages visited
- Referring website or URL
- Date and time of visits
- Website interaction information
- Other technical information generated when you use our website
Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate the website, remember preferences, improve functionality, analyse website usage, and, where applicable, support marketing activities.
Some cookies are necessary for the website and WooCommerce functionality to operate correctly. Other cookies may require your consent depending on their purpose and applicable law.
You can control certain cookie preferences through your browser settings and, where provided, our website’s cookie consent mechanism.
3. How We Use Your Personal Information
We may use your personal information for the following purposes:
Processing and Fulfilling Orders
We use your information to:
- Process and fulfil purchases
- Confirm orders
- Arrange delivery
- Provide order updates
- Process refunds where applicable
- Maintain transaction records
- Provide customer support relating to your order
Managing Customer Accounts
If you create an account, we use your information to:
- Create and maintain your account
- Authenticate your account
- Provide access to account features
- Maintain your order history
- Help you manage your account
Customer Support
We may use information you provide to respond to enquiries, provide assistance, resolve issues, and communicate with you regarding your interactions with PepLab London.
Website Operation and Improvement
We may use technical and usage information to:
- Maintain and operate our website
- Monitor website performance
- Identify technical problems
- Improve website functionality
- Understand how visitors use our website
- Improve the customer experience
Security and Fraud Prevention
We may process information where necessary to protect our website, customers, business, and systems against fraud, abuse, unauthorised access, security threats, or other unlawful activity.
Legal and Regulatory Compliance
We may process and retain personal information where necessary to comply with applicable laws, regulations, legal proceedings, court orders, regulatory requirements, or legitimate requests from public authorities.
Marketing Communications
Where permitted by applicable law, we may use your contact information to send information about our products, services, offers, or updates.
Where consent is required, we will obtain your consent before sending relevant marketing communications.
You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the relevant communication or by contacting us.
4. Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract
We may process information where it is necessary to enter into or perform a contract with you, such as processing and fulfilling an order.
Legal Obligation
We may process information where necessary to comply with a legal or regulatory obligation.
Legitimate Interests
We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.
This may include operating and improving our website, maintaining website security, preventing fraud, managing customer relationships, and protecting our business.
Consent
Where required, we may rely on your consent, including for certain marketing communications or non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Sharing Your Personal Information
We do not sell your personal information.
We may share personal information with carefully selected third parties where necessary to operate our business and provide our services.
These may include:
- Payment service providers, to process and verify transactions
- Delivery and fulfilment providers, to deliver orders
- Website hosting and technology providers, to operate and maintain our website
- WooCommerce and related service providers, where necessary to operate our online store
- IT and security providers, to maintain website and system security
- Analytics and website performance providers, where applicable and permitted
- Email and communication providers, where required to communicate with customers
- Professional advisers, such as accountants, lawyers, or insurers where appropriate
- Government bodies, regulators, law enforcement agencies, or courts, where legally required or permitted
Third-party service providers may process personal information on our behalf and are expected to handle that information in accordance with applicable data protection requirements.
6. International Data Transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection requirements and that appropriate safeguards are in place where required.
The specific countries and safeguards involved may depend on the third-party services used by our website at the relevant time.
7. How We Protect Your Information
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.
These measures may include appropriate access controls, website security measures, secure communications technologies, system monitoring, and controlled access to personal information.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
8. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:
- Fulfil orders and provide customer services
- Maintain appropriate business and transaction records
- Comply with legal, accounting, and regulatory requirements
- Resolve disputes
- Prevent fraud and misuse
- Establish, exercise, or defend legal claims
- Maintain necessary business records
The specific retention period depends on the type of information and the reason it is being processed.
Where information is no longer required, we will take reasonable steps to securely delete, anonymise, or otherwise dispose of it.
9. Your Data Protection Rights
Depending on the circumstances and applicable law, you may have rights regarding your personal information.
These may include:
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete personal information.
Right to Erasure
In certain circumstances, you may request that we delete your personal information.
Right to Restrict Processing
In certain circumstances, you may ask us to restrict how we process your personal information.
Right to Object
You may have the right to object to certain types of processing, including processing based on legitimate interests and certain direct marketing activities.
Right to Data Portability
Where applicable, you may request your personal information in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
Where we process your information based on consent, you may withdraw that consent at any time.
These rights are not absolute and may be subject to legal conditions or exemptions.
To exercise your rights, please contact us using the details provided below.
10. Marketing Communications
If you receive marketing communications from us, you can choose to stop receiving them at any time.
You can unsubscribe by using the unsubscribe link included in our marketing emails or by contacting us directly.
Please note that even if you opt out of marketing communications, we may still send essential service-related communications, such as order confirmations, delivery updates, account notifications, or other messages necessary to provide services you have requested.
11. Cookies
PepLab London may use cookies and similar technologies to provide essential website functionality and improve your browsing experience.
Cookies may be used for purposes such as:
- Keeping items in your shopping basket
- Maintaining customer sessions
- Processing orders
- Remembering preferences
- Website security
- Understanding website usage
- Measuring website performance
- Supporting marketing activities, where applicable
Where required, we will request your consent before placing non-essential cookies on your device.
You can also manage cookies through your browser settings.
12. Children’s Privacy
Our website and products are intended for adults and professional or institutional research customers.
We do not knowingly collect personal information from children where such collection is not permitted by applicable law.
If you believe that a child has provided personal information to us, please contact us so that we can review the information and take appropriate action.
13. Third-Party Websites
Our website may contain links to third-party websites or services.
This Privacy Notice applies only to information processed by PepLab London through our own website and services.
We are not responsible for the privacy practices, security, or content of third-party websites. We recommend reviewing the privacy notice of any third-party website you visit.
14. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our business, website, technology, legal requirements, or data processing practices.
When we make changes, we will update the “Last Updated” date at the beginning of this notice.
We encourage you to review this page periodically to remain informed about how we handle personal information.
15. How to Contact Us
If you have questions about this Privacy Notice, would like to exercise your data protection rights, or have concerns about how your personal information is handled, please contact us:
PepLab London
Email: support@peplablondon.com
We aim to respond to legitimate privacy and data protection requests within the timeframe required by applicable law.
16. Complaints
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.
You can find information about making a complaint through the ICO’s official website.
Information Commissioner’s Office (ICO)
United Kingdom
PepLab London
Email: support@peplablondon.com