Privacy Notice

Who is responsible for your information

Vantelyx Labs Ltd (Company No. 17399720) operates this website and is the controller of personal information collected through its account and enquiry features. Privacy questions can be sent to [email protected].

Information we collect

Account information may include your name, email address, research-use acknowledgement, authentication provider, account creation and login records. Order information may include your name, email address, delivery address, basket contents, order totals, Fena payment status, fulfilment status and transactional-email timestamps. Enquiry information may include your name, email address, optional phone number, enquiry subject, message and research-use confirmation. Passwords are not stored in plain text. Anti-abuse controls may process limited network metadata and use a one-way derived identifier for rate limiting rather than storing a raw IP address in the account record.

Why we use it and our lawful basis

We use account data to operate and secure account access, and enquiry data to respond to communications you ask us to handle. We rely primarily on our legitimate interests in operating a secure research-information service, preventing abuse, responding to requested communications and keeping proportionate service records. Where processing is required to comply with a legal obligation, we rely on that obligation.

Google sign-in, account providers and cookies

If you choose Google sign-in, Vantelyx Labs Ltd receives your Google account identifier, name and email address after authentication. This is used only to create or authenticate your Vantelyx Labs account. Vantelyx Labs Ltd does not request Gmail, Google Drive, Google Contacts or other Google account content. An essential secure session cookie is used to keep you signed in and is not used for advertising.

Hosting, database and email services

The production service uses Cloudflare Pages and Cloudflare D1 for hosting and data storage, and Microsoft 365 / Microsoft Graph for transactional email delivery. Those service providers process the information necessary to host the website, secure requests, store account/enquiry records and deliver transactional messages. Information may be processed on infrastructure outside the UK where the provider operates, subject to the provider's applicable data-protection arrangements.

Retention

Account and enquiry records are kept only for as long as reasonably necessary for the purpose collected, service security, dispute resolution and applicable legal obligations. Login sessions expire automatically. Records that are no longer required should be deleted or anonymised where appropriate.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to ask for access to your personal information, correction, erasure, restriction, objection and data portability. To exercise a right, contact Vantelyx Labs Ltd using the email above.

Your right to object: where Vantelyx Labs Ltd relies on legitimate interests to use your personal information, you may have the right to object to that processing. Contact [email protected] if you wish to object.

Data-protection complaints

You can raise a data-protection complaint by emailing [email protected] or using the contact form. Vantelyx Labs Ltd will acknowledge a data-protection complaint within 30 days of receipt, take appropriate steps to investigate it without undue delay, keep you informed where appropriate and tell you the outcome. You also have the right to complain to the Information Commissioner's Office (ICO) if you remain concerned about how your information has been handled.

Contact and updates

For privacy queries, email [email protected] or use the contact page. This notice may be updated when website functionality, service providers or legal requirements change. Last updated: 11 August 2026.