Legal
Privacy notice
This notice describes the information this website collects. Live orders are not open on this preview.
Who controls the information
Trading name: Zynx Biopharma. Data controller: Zynx Biopharma Co Ltd. Use the contact form for a privacy question.
- Trading name
- Zynx Biopharma
- Legal entity
- Zynx Biopharma Co Ltd
- Data controller
- Zynx Biopharma Co Ltd
Research materials presented with clear product information and supporting documentation where available. Company registration, VAT, a registered office and a support email are shown here only when those details have been verified.
What is collected and why
- Guest checkout: name, email, delivery address, optional telephone, basket contents, payment method and research-use confirmation. Purpose: take and fulfil the order. Proposed lawful basis: contract.
- Optional account: email, saved addresses you choose to keep, linked order numbers. Purpose: repeat ordering. Proposed lawful basis: contract for the account you asked for.
- Marketing email: only if you tick the separate, unchecked box. Proposed lawful basis: consent. Refusing it does not block an order.
- Laboratory applications: organisation name, professional contact, country, laboratory and delivery addresses, intended-use description and evidence references recorded by a reviewer. Purpose: assess institutional eligibility. Proposed lawful basis: legitimate interests in preventing misuse, to be confirmed.
- Product-code verification: the concealed code, optional serial, outcome, coarse hashed network identifier and optional concern contact details. Purpose: match a code to a recorded unit and investigate abuse or customer reports. Proposed lawful basis: legitimate interests in product integrity and fraud prevention, to be confirmed. Verification does not require an account, name, marketing consent or precise location.
What is not collected here
Card numbers, banking passwords, identity documents, dates of birth, health records and patient data are not requested. Abandoned checkout fields are not stored as a marketing list. Keystrokes are not recorded.
Payment providers
When Pay by Bank is enabled, Fena receives the information needed to create and confirm an Open Banking payment. Zynx Biopharma does not receive or store online-banking login details, one-time passcodes or card numbers. Card or wallet providers are named here only if that method is shown at checkout.
International transfers
Hosting is Cloudflare. Payment providers may process data outside the UK. Specific transfer tools will be named once the live processors and hosting region are confirmed. This notice does not promise UK-only hosting.
Retention
Proposed periods for solicitor and accounting review, not implemented as automatic deletion yet: paid orders and invoices up to six years; unsuccessful payment attempts 90 days; declined laboratory applications 12 months; optional account profiles until you delete them or they become inactive; marketing until you withdraw; verification events 24 months unless a dispute or recall requires longer; concern forms 24 months; coarse hashed IP rate-limit data 30 days. Backups, if used in production, will follow the same criteria plus any legal hold. Records are not kept forever by policy. Verification events are not reused for marketing.
Your rights
You may request access, correction, deletion, restriction or objection where UK GDPR and the Data Protection Act 2018 allow, using the contact page. Where processing relies on consent, you can withdraw it. Withdrawal does not reverse processing that already happened. You may complain to the Information Commissioner’s Office.
Source used while drafting: ICO “How to write a privacy notice”, accessed 27 September 2026. That page notes Data (Use and Access) Act updates are under review.
Draft version 2026-09-27. These pages are not a live contract until a solicitor has reviewed them against the verified legal entity. They do not establish legal compliance.