Privacy Policy
This Privacy Policy explains how Bioniq Lab Limited (“Bioniq Lab”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you visit our website, create an account, place an order, contact us, or otherwise use our website and related online services (together, the “Services”).
We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where applicable.
1. Data Controller
As the data controller, we are responsible for determining how and why your personal data is processed. We process your data for the purposes of operating our e-commerce business, supplying peptide and related products, managing customer accounts and orders, processing payments, providing customer support, preventing fraud and misuse, complying with legal and regulatory obligations, and improving our products, website, and customer experience.
Bioniq Lab Limited
Company Number: 13093939
Registered Office: 28 Linstead Road, Farnborough, England, GU14 9HH
Email: info@bioniqlab.com
ICO Registration Reference: C1917618
Joint Controller / Processor Relationships
We may use third-party service providers who process personal data on our behalf or act as independent controllers. These include:
- Payment processors (e.g. Stripe, PayPal)
- Analytics providers (Google Analytics, Microsoft Clarity)
- Advertising platforms (Meta, Google Ads)
- Email marketing providers (Klaviyo, Omnisend)
- Fraud prevention and security services
Where these parties determine their own purposes for processing, they may act as independent controllers. Where they process data strictly on our instructions, they act as processors.
2. Information We Collect
Identity & Contact Information
- Name
- Email address
- Telephone number
- Billing address
- Delivery address
Transaction Information
- Orders placed
- Purchase history
- Payment confirmations
- Refund or returns information
Device & Usage Information
- IP address
- Browser type and version
- Device type
- Operating system
- Referring website
- Pages viewed
- Session activity and duration
Location Information
- Approximate location derived from IP address
- Location data where enabled through device settings
Marketing & Preference Information
- Marketing preferences
- Cookie consent preferences
- Communication history
Compliance & Security Information
- Fraud screening results
- Order verification checks
- Restricted territory screening information
- Customer support records relating to misuse or suspicious activity
3. How We Use Your Information
- Operate, maintain, and improve our Services
- Process and fulfil orders
- Manage accounts and customer relationships
- Respond to enquiries and support requests
- Verify identity where appropriate
- Detect and prevent fraud, abuse, chargebacks, or suspicious transactions
- Comply with legal, customs, tax, sanctions, and regulatory obligations
- Screen transactions or destinations where products may be restricted
- Notify customers regarding product safety information, recalls, or important updates
- Analyse website traffic and performance
- Personalise content and advertising where consent has been given
- Send marketing communications where permitted by law
4. Legal Basis for Processing
- Contract
- Legitimate Interests
- Consent
- Legal Obligation
5. Disclosure of Your Information
We may share your personal data with the following categories of recipients:
- Service Providers: Including payment processors, delivery providers, hosting and cloud providers, analytics platforms, and fraud prevention providers.
- Professional & Legal Bodies: Including professional advisers, regulators, and legal authorities where required by law.
- Corporate Entities: Including Affiliates (entities under common ownership or control), Business Partners, and prospective buyers in connection with a corporate transaction or restructuring.
We do not sell your personal data.
6. Product Eligibility & Compliance
We may use personal data to verify eligibility to purchase certain products, prevent misuse of our Services, and comply with applicable laws.
Products may not be available in all territories, and we may decline or cancel orders where required for legal, compliance, fraud prevention, or operational reasons.
7. Sensitive Information
Unless specifically requested by us for a lawful and necessary purpose, please do not provide medical records, prescriptions, health conditions, or other special category personal data through our website forms or customer support channels.
8. Cookies & Similar Technologies
We use cookies and similar technologies to improve user experience, maintain security, analyse website traffic, remember preferences, and support advertising where permitted.
Our cookie consent management platform is CookieFirst.
Cookie Categories Used
Necessary Cookies
Essential for security, shopping cart, checkout, fraud prevention, and consent storage.
Functional Cookies
Enable enhanced functionality and personalisation such as video content and remembered preferences.
Performance Cookies
Help count visits, understand traffic sources, and improve site performance.
Advertising Cookies
Used by advertising partners to show relevant adverts and measure campaign performance.
Below is a list of the cookies we use and the purposes for which they are used:
| Cookie key | Domain | Path | Cookie type | Expiration | Description |
| __kla_id | bioniqlab.com | / | First-party | 1 year 1 month | Tracks when someone clicks through a Klaviyo email to your website |
| _ga | .bioniqlab.com | / | First-party | 1 year 1 month | This cookie name is associated with Google Universal Analytics – which is a significant update to Google’s more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. |
| _ga_9D6PXG0VS2 | .bioniqlab.com | / | First-party | 1 year 1 month | This cookie is used by Google Analytics to persist session state. |
| _lscache_vary | bioniqlab.com | / | First-party | 2 days | This cookie is used to optimize the serving of cached pages to users based on their custom preferences or browsing behavior. It helps enhance website performance and load times. |
| sbjs_current | .bioniqlab.com | / | First-party | Session | This cookie is used to track users’ activities and interactions across the website to facilitate better analysis and understanding of traffic sources and user behavior. |
| sbjs_current_add | .bioniqlab.com | / | First-party | Session | This cookie is used to store information about the current visit to distinguish between users and sessions. It typically includes details such as source of traffic, campaign data, and user behavior to help in tracking and analyzing the effectiveness of marketing campaigns. |
| sbjs_first | .bioniqlab.com | / | First-party | Session | This cookie is used to store information about the user’s first session on the website. It tracks details such as the source from which the user came, the path they took, which search engine and keyword were used, and their location at the time of the first visit. This information is used to analyze and improve the website’s performance by understanding user behavior. |
| sbjs_first_add | .bioniqlab.com | / | First-party | Session | This cookie is used to store details about the user’s first visit to the website, including timestamp, referring site, and source of the traffic, to assess the effectiveness of marketing campaigns and website sources. |
| sbjs_migrations | .bioniqlab.com | / | First-party | Session | This cookie is used to track user interactions and migration between different pages or sections of the website to improve user experience and website performance analytics. |
| sbjs_session | .bioniqlab.com | / | First-party | 29 minutes 52 seconds | This cookie is used to track user activity and sessions to improve the performance and usability of the website, helping to understand how visitors interact with the website. |
| sbjs_udata | .bioniqlab.com | / | First-party | Session | This cookie is used to store user-specific data to help monitor and analyze the effectiveness of the advertising campaigns and optimize the user experience on the website. |
| Functionality cookies | |||||
| Cookie key | Domain | Path | Cookie type | Expiration | Description |
| omnisendSessionID | .bioniqlab.com | / | First-party | 29 minutes 52 seconds | This cookie is used to track the session of a user to provide a seamless experience during their visit and maintain the state of their actions across different pages of the site. |
| commercekit-nonce-value | bioniqlab.com | / | First-party | 1 hour 59 minutes | The cookie is a necessary WordPress security nonce used to validate AJAX requests and track login state for secure plugin functionality |
| commercekit-nonce-state | bioniqlab.com | / | First-party | 1 hour 59 minutes | The cookie is a necessary WordPress security nonce used to validate AJAX requests and track login state for secure plugin functionality |
| _fbp | .cookiefirst.com | / | Third-party | ~3 months | Used by Facebook/Meta Pixel to track visits across websites to deliver targeted advertising and measure ad performance. |
| _clck | .cookiefirst.com | / | Third-party | 1 year | Persists the Microsoft Clarity User ID and preferences, unique to that site, to connect page views and generate aggregated user behavior analytics. |
| _ga_Y2P3JXV84S | .cookiefirst.com | / | Third-party | ~2 years | Google Analytics 4 property-specific cookie that contains a unique identifier to determine that two distinct hits belong to the same user across browsing sessions. |
| _gcl_au | .cookiefirst.com | / | Third-party | ~90 days | Google Ads conversion linker cookie that stores and tracks ad click information to measure conversions and improve ad performance attribution. |
| _gcl_aw | .cookiefirst.com | / | Third-party | ~90 days | Google Ads advertising cookie used to provide ad delivery, retargeting, and track usage behavior for marketing optimization. |
| _lfa | .cookiefirst.com | / | Third-party | ~2 years | Used by Leadfeeder to collect behavioral data of website visitors, including pages viewed, visitor source, and time spent on site, for B2B lead identification. |
| _uetvid | .cookiefirst.com | / | Third-party | ~1 year | Microsoft Universal Event Tracking (UET) cookie that stores a unique, anonymized visitor ID to personalize marketing and measure ad campaign performance. |
| __cf_bm | .cookiefirst.com | / | Third-party | 30 minutes | Cloudflare Bot Management cookie that reads and filters requests from bots to protect the site from malicious traffic while allowing legitimate users. |
| __cf_bm | .omnisnippet1.com | / | Third-party | 30 minutes | Cloudflare Bot Management cookie used to identify and filter bot traffic, ensuring site security and performance. |
| Storages | |||||
| Storage key | Type | Category | |||
| wpEmojiSettingsSupports | session | Strictly Necessary | |||
| VISITOR_INFO1_LIVE | .youtube.com | / | Third-party | 6 months | Used by YouTube to estimate bandwidth and improve embedded video playback. |
| YSC | .youtube.com | / | Third-party | Session | Registers a unique ID to keep statistics of videos viewed on embedded YouTube content. |
| __Secure-YEC | .youtube.com | / | Third-party | Session | Used by Google/YouTube for advertising personalisation and campaign functions. |
| VISITOR_PRIVACY_METADATA | .youtube.com | / | Third-party | 6 months | Stores privacy and consent preferences for YouTube services. |
9. Google Consent Mode Categories
- ad_storage
- ad_user_data
- ad_personalization
- analytics_storage
- personalization_storage
- functionality_storage
- security_storage
10. Cookie Consent Controls
- Non-essential cookies are blocked until consent is provided.
- Users can choose categories individually.
- Users can withdraw consent at any time via the floating settings button or settings link.
11. International Transfers
Some providers may process personal data outside the United Kingdom. Where this occurs, we use appropriate safeguards such as adequacy regulations or IDTAs.
12. Data Retention
- Order and accounting records: up to 6 years, where required
- Customer accounts: until deletion or prolonged inactivity
- Marketing records: until consent is withdrawn or opt-out
- Fraud and compliance records: as reasonably necessary
13. Your Rights
You have the following rights with respect to your personal data:
- Access: Request a copy of your personal data.
● Correction: Request to correct inaccuracies in your personal data.
● Deletion: Request the deletion of your personal data under certain circumstances. ● Objection: Object to certain types of processing, including direct marketing.
● Portability: Request the transfer of your personal data to another service provider in a structured, commonly used format.
● Withdrawal of Consent: If we rely on consent for processing, you can withdraw it at any time.
To exercise rights, contact dpo@bioniqlab.com.
14. Marketing Communications
You may unsubscribe at any time using the unsubscribe link or by contacting us.
15. Children’s Privacy
Our Services are not directed to individuals under 18.
16. Sale of Business
In the event that we or some of our assets are sold or transferred, your personal information may be transferred to third parties as part of that transaction.
17. Security of Information
We implement reasonable technical and organisational measures designed to protect personal data.
18 . Privacy Policy and Outside Links
We may update this policy periodically. Our Site may include links to external websites that are outside of our control. These sites may have their own privacy policies, so we recommend reviewing them separately.
Last Updated: 27 April 2026
19. Contact Us
Bioniq Lab Limited
Email: info@bioniqlab.com
If you are not satisfied with our response or you are unhappy with how we have used your data, you can complain to the Information Commissioner’s Office (ICO).
You can find the ICO contact details below:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, Helpline number: 0303 123 1113.
ICO Website: https://www.ico.org.uk
If you reside in another European country, you can find the contact details of your local data protection supervisory authority here.