Legal Notice

Privacy Policy (UK)

This Privacy Policy, together with our Terms of Use and any other documents referred to in it, sets out the basis on which Prestige Labs processes any personal data we collect from you, or that you provide to us.

Please read the following carefully to understand our views and practices regarding your personal data and how it will be handled.

By visiting prestigelabs.co.uk (our site), you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Prestige Labs
(“we”, “us”, or “our”)

2. Personal Data We May Collect

Information You Provide to Us

You may provide personal data by:

  • Filling in forms on our website

  • Corresponding with us by email, telephone, or other means

  • Searching for products or placing an order

  • Registering an account

  • Contacting customer support or reporting a problem

This information may include:

  • Full name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Payment and transaction details (processed securely via third-party payment providers)

We do not store full card payment details on our servers.

Information We Collect Automatically

When you visit our site, we may automatically collect:

Technical information, including:

  • IP address

  • Browser type and version

  • Time zone setting

  • Operating system and platform

Usage information, including:

  • Pages visited

  • Products viewed or searched for

  • Page response times and errors

  • Length of visits

  • Interaction data (scrolling, clicks, mouse-overs)

  • Referring URLs

Information We Receive from Third Parties

We may receive information about you from trusted third parties, including:

  • Payment service providers

  • Delivery and logistics providers

  • Analytics providers

  • Advertising and marketing platforms

  • Fraud prevention and security services

These third parties process data in accordance with their own privacy policies and UK GDPR obligations.

3. Cookies

Our website uses cookies to distinguish you from other users and to improve your browsing experience.

Cookies help us:

  • Improve website performance

  • Understand user behaviour

  • Deliver relevant content

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR, including:

  • Contractual necessity – to fulfil orders and provide services

  • Legitimate interests – to improve our services, prevent fraud, and ensure site security

  • Legal obligation – to comply with UK law

  • Consent – where required for marketing communications

5. How We Use Your Information

Information You Provide to Us

We use this information to:

  • Process and fulfil orders

  • Manage payments and deliveries

  • Communicate with you about your order or enquiry

  • Provide customer support

  • Notify you of changes to our services

  • Ensure content is presented effectively for your device

Where permitted under UK law, we may contact you by email about similar products or services you have previously purchased or enquired about.
You may opt out at any time by contacting us or using the unsubscribe link.

Information We Collect Automatically

We use this information to:

  • Administer and maintain our website

  • Improve site functionality and performance

  • Enhance security and prevent fraud

  • Analyse usage trends and customer behaviour

  • Measure the effectiveness of advertising

  • Make relevant product recommendations

6. Data Sharing

We do not sell your personal data.

We may share personal data only with trusted third parties where necessary, including:

  • Payment processors

  • Delivery providers

  • IT and hosting providers

  • Analytics and marketing platforms

All third parties are required to respect the security of your data and to process it in accordance with UK GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

8. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your data (where applicable)

  • Object to processing

  • Restrict processing

  • Data portability

  • Withdraw consent at any time (where consent is the lawful basis)

To exercise your rights, please contact us using the details provided on our website.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

10. Changes to This Policy

Any changes we make to this Privacy Policy will be posted on this page. Please check back regularly for updates.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of England and Wales.