Privacy and cookie policy.

X BioResearch is the data controller for personal data collected through this site. Full registration details are available on request through the contact page.

This is a static website with no customer accounts and no server-side database. There is nowhere on this site for your personal data to be stored, and we do not collect it in the background.

The details you type into the checkout form stay in your own browser and are used only to build the order summary shown to you on screen. They are not transmitted to us by the website. You choose what to send us when you contact the team about your order.

Your basket is stored in your browser's local storage so it survives a page reload. You can clear it at any time by emptying your basket or clearing site data in your browser.

When you contact us on Telegram to place or discuss an order, we process the information you send: your order reference, the delivery address you give us and any correspondence. The lawful basis is performance of a contract, or our legitimate interest in answering an enquiry. Please note that a Telegram group is a shared space visible to its members. Never post your address or payment details in the group. We collect those in a private message.

We use Google Analytics to understand which pages people visit and how they reach the site. It sets cookies in your browser and processes your IP address in truncated form. We do not use analytics to identify you personally and we do not sell or share the data for advertising.

Analytics only runs if you accept it. Nothing is loaded before you choose, and declining is a single click that we remember. You can change your mind at any time by clearing site data in your browser, and the choice will be offered again on your next visit.

The only cookie-equivalent storage we set without asking is strictly necessary: your basket contents and your record of this choice. Neither is used to track you across other websites.

Our website host serves the pages you request and processes standard server logs. Google processes analytics data as our processor, if you accept analytics. A delivery carrier receives the name and address needed to deliver your order. We do not sell personal data, and we do not share it with anyone else except where we are legally required to.

Order correspondence is kept for as long as needed to fulfil the order and to meet our record-keeping obligations, then deleted. Analytics data is retained by Google on our default retention setting and is not linked to any order.

Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or erase it, object to or restrict our processing, and withdraw consent to analytics at any time. Contact us through the contact page and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

This site is not intended for anyone under 18 and we do not knowingly collect data from children. Orders are for laboratory research use only.