PRIVACY
POLICY.

Who Is Responsible for Your Information?

VOREVIA LTD is the controller responsible for the personal information described in this policy where it determines why and how that information is processed. VOREVIA LTD is incorporated in England and Wales under company number 17443970, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 8JQ.

Privacy enquiries can be submitted through the Contact Us page. The company information on this website should be read together with any relevant order documentation.

Information We May Collect

Depending on how you interact with VOREVIA, we may process:

• identity and contact information such as name, billing or delivery address, email address and telephone number;
• account information and preferences where customer-account functionality is used;
• order and transaction information, including products ordered, order number, value, delivery status and payment status;
• communications you send through our Contact Us form or other customer-support channels;
• technical information such as IP address, device/browser information, website logs and cookie or similar-technology data where applicable; and
• fraud-prevention, security and compliance information reasonably required to protect transactions and our services.

Please do not send sensitive medical or health information through our contact forms. VOREVIA products are supplied for laboratory research purposes only.

How We Receive Personal Information

We receive information directly from you when you place an order, create an account, submit a form or communicate with us. We may also receive transaction, delivery, fraud-prevention or technical information from service providers involved in operating the website, processing payments or fulfilling orders.

How We Use Personal Information

We may use personal information to:

• process, administer and fulfil orders;
• take or verify payment and manage refunds;
• arrange UK and international delivery and provide tracking or delivery support;
• respond to enquiries, damaged-product reports and incorrect-order claims;
• maintain website, account, security and fraud-prevention functions;
• comply with tax, accounting, legal, regulatory and record-keeping obligations;
• establish, exercise or defend legal claims; and
• send marketing communications where we have an appropriate lawful basis and applicable electronic-marketing rules permit them.

Our Lawful Bases

Under UK data-protection law, processing must have a lawful basis. Depending on the activity, VOREVIA may rely on performance of a contract or steps requested before entering a contract; compliance with a legal obligation; our legitimate interests or those of another party where those interests are not overridden by your rights; or consent where consent is required and appropriate.

Examples of legitimate interests may include operating and securing the website, preventing fraud, managing customer service, improving business processes and protecting legal rights.

Payments & WooCommerce

Our store uses WooCommerce functionality to manage products, baskets, checkout and order records. Payment transactions may be processed by third-party payment providers made available at checkout.

Payment providers may receive information needed to authorise and process a transaction and may act as separate or independent controllers for some of their processing. VOREVIA does not need to retain complete payment-card credentials where those details are processed securely by the payment provider.

Delivery Providers

We may provide a carrier, postal operator, fulfilment provider or logistics partner with information needed to deliver and track your order, such as recipient name, delivery address, contact details, parcel information and relevant customs information for international shipments.

Who We May Share Information With

Where necessary and proportionate, personal information may be shared with service providers supporting website hosting, e-commerce, payments, communications, IT/security, fraud prevention, accounting, professional advice, fulfilment and delivery. Information may also be disclosed where required by law, a regulator, court, customs authority or other competent authority.

Service-provider access should be limited to what is required for the relevant service and governed by appropriate contractual or legal protections where required.

International Data Transfers

Some providers or recipients may process personal information outside the United Kingdom, particularly in connection with international deliveries, cloud services or global payment infrastructure. Where UK data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism or rely on another permitted basis.

Cookies & Similar Technologies

The website may use cookies or similar technologies that are necessary for functions such as baskets, checkout, account sessions, security and site operation. Other technologies, including analytics or marketing cookies, should be used in accordance with applicable consent requirements.

Further detail about categories of cookies, purposes and available controls will be provided in our Cookie Policy and, where required, through the website's consent controls.

Marketing Communications

Where VOREVIA sends electronic marketing, we will do so only where an appropriate lawful basis and the applicable direct-marketing rules allow it. You can withdraw consent or opt out of marketing communications at any time using the unsubscribe method provided or by contacting us.

Opting out of marketing does not prevent us from sending service messages needed to administer an order, account or enquiry.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil contracts, provide support, meet tax/accounting and other legal requirements, prevent fraud, resolve disputes and establish or defend legal claims.

Retention periods can therefore differ by record type. When information is no longer required, it should be deleted, anonymised or otherwise securely disposed of in accordance with applicable requirements.

Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration or disclosure. No internet-based service can guarantee absolute security, so customers should also protect account credentials and notify us if they suspect unauthorised account activity.

Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have rights to request access to your personal information, correction of inaccurate information, erasure, restriction of processing, objection to certain processing and data portability. Where processing is based on consent, you may withdraw that consent without affecting processing already lawfully carried out.

Some rights are qualified rather than absolute. We may need to verify your identity before responding and may retain information where a legal obligation or other lawful basis requires it.

Questions & Complaints

Please contact VOREVIA first if you have a question or concern about how your personal information is handled so that we can review it. You also have the right to complain to the UK Information Commissioner's Office where UK data-protection law applies, or to another competent supervisory authority where applicable.

Third-Party Websites

Our website may contain links to third-party websites or services. Those organisations are responsible for their own privacy practices, and you should review their privacy information before providing personal data to them.

Changes to This Privacy Policy

We may update this policy to reflect changes in our services, providers, legal requirements or privacy practices. The current version will be published on this page with an updated revision date where appropriate.