Privacy policy.

Who we are

Aminolabs is a trading name of Tailored Nutrition Ltd, registered in England and Wales under company number 17462266, with its registered office at 66 Paul Street, London, England, EC2A 4NA. We are the data controller for the personal data described here.

Questions about this policy, or any request about your data, should go to the address at the foot of this page.

What we collect

• Order details — your name, delivery and billing address, email address and phone number, what you ordered and when.
• Payment details — handled by our payment provider. We receive confirmation that a payment succeeded and the last four digits and card type; we never see or store your full card number.
• Account details — if you create an account, your login details and order history.
• Applications — if you apply for a wholesale or affiliate account, the business and contact details you submit on that form.
• Messages — emails and messages you send us, and our replies.
• Marketing preferences — whether you have asked for our emails, and whether you have since opted out.
• Technical and usage data — IP address, browser and device type, pages visited and referring site, collected through cookies as set out in our Cookie policy.

How we use it

• To take, pack, dispatch and deliver your order, and to handle returns, replacements and refunds.
• To answer your questions and provide support.
• To verify eligibility, assess trade and affiliate applications, and prevent fraud and misuse.
• To keep accounting and tax records we are required by law to keep.
• To send marketing emails where you have asked for them.
• To understand how the site is used and improve it, where you have accepted analytics cookies.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Our lawful bases

• Contract — processing your order, delivering it, and dealing with anything that goes wrong.
• Legal obligation — keeping records required by tax, accounting and consumer law.
• Legitimate interests — preventing fraud, securing the site, keeping our records accurate, assessing trade and affiliate applications, and defending legal claims. We balance these against your rights, and you can object as set out below.
• Consent — marketing emails, and non-essential cookies. You can withdraw consent at any time.

Who we share it with

We share personal data only with suppliers who need it to do a job for us, under contract and only on our instructions. Those are our website host, our payment provider, our delivery carriers, our email and customer-support providers, our analytics provider where you have accepted analytics cookies, and our accountants.

We also disclose data where the law requires it, or to establish, exercise or defend a legal claim.

Where your data is held

We hold data in the United Kingdom and the European Economic Area wherever we can. Where a supplier processes data outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so your data keeps an equivalent level of protection.

How long we keep it

• Order and transaction records — six years after the end of the financial year they relate to, as required for tax.
• Account details — while your account is open, and for six years after your last order.
• Trade and affiliate applications — twelve months if we do not proceed, or for the life of the account plus six years if we do.
• Support messages — two years from the last message.
• Marketing consent records — until you opt out, plus a suppression record afterwards so we do not email you again by mistake.
• Analytics data — as set out in our Cookie policy.

Cookies and analytics

We use strictly necessary cookies to make the site work, and optional analytics and marketing cookies only if you accept them. Our Cookie policy explains each category and how to change your mind.

Security

The site runs over HTTPS and card payments are handled by a PCI-compliant provider. Access to personal data inside the business is limited to the people who need it. No system is perfectly secure, but if a breach happens that is likely to risk your rights, we will tell you and the Information Commissioner’s Office as the law requires.

Your rights

Under UK data protection law you can ask us to: give you a copy of the data we hold about you; correct it if it is wrong; delete it; restrict how we use it; provide it in a portable format; or stop using it for a particular purpose. You can also object to processing we carry out on the basis of legitimate interests.

Email us and we will respond within one month. We may ask you to confirm your identity first. These requests are free unless they are manifestly unfounded or excessive.

Some rights have limits — we cannot delete records we are legally required to keep, such as invoices.

Withdrawing consent

You can unsubscribe from marketing emails using the link in any email, or by contacting us. You can change your cookie choices at any time through the cookie settings link in the footer. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.