Personal data means any information identifying an individual. We collect and process the following categories of data:

• Identity & Contact Data: Full name, title, trade business name, billing address, delivery address, email address, telephone contact numbers.
• Transaction & Order Data: Details of tools, equipment, batteries, and accessories purchased, purchase totals, order references, VAT transaction invoices, warranty registration serial numbers.
• Financial Data: Tokenized payment transaction IDs from our PCI-DSS Level 1 payment gateway providers (Stripe, PayPal). Biovertexa UK never retains or stores raw credit or debit card PAN numbers or CVV codes on its servers.
• Technical & Telemetry Data: Internet Protocol (IP) address, login sessions, browser version, operating system, time zone settings, device hardware identifiers, and browsing activity collected automatically through server logs and essential session cookies.
• Customer Support Records: Written correspondence, email inquiries sent to rosazgs254zapata@outlook.com, and trade hotline call logs.

Under UK data protection law, we only process your personal data where we have a verified lawful basis:

We use diverse methods to collect data from and about you:

• Direct Interactions: You supply identity, billing, and contact data when placing an order, creating a trade account, subscribing to stock alerts, or contacting our support team via telephone or email.
• Automated Technologies: As you navigate biovertexa.com, our web servers automatically log telemetry, browsing patterns, and cart contents using session cookies.
• Third-Party Financial Services: We receive transaction status notifications and payment confirmations from authorized gateway providers (Stripe, PayPal) to confirm order completion.

We use your data solely for defined commercial and legal purposes:

• To verify and process your purchase of tools and equipment.
• To dispatch consignments and transmit tracking links via DPD or Royal Mail.
• To process returns, exchanges, and 30-day money-back guarantee refunds.
• To prevent fraudulent card transactions and verify age eligibility for bladed articles (18+).
• To furnish official VAT invoices suitable for UK manufacturer warranty registrations.
• To maintain website cybersecurity, prevent unauthorized intrusion, and optimize loading performance.

Personal data is shared strictly with vetted operational service providers under binding Data Processing Agreements:

• Delivery Couriers: DPD UK, Royal Mail, and Parcelforce receive customer name, shipping address, contact phone, and email strictly for package delivery and SMS tracking notifications.
• Payment Gateways: Certified PCI-DSS Level 1 payment providers (Stripe, PayPal) to process transaction settlements securely.
• Cloud & Infrastructure Providers: Hostinger secure servers, transactional email relays, and LiteSpeed edge caching providers.
• Statutory Authorities: HM Revenue & Customs (HMRC), legal auditors, or law enforcement bodies when compulsory by UK statutory law.

All primary customer databases and transactional records are hosted securely within the United Kingdom and the European Economic Area (EEA). Wherever third-party cloud sub-processors operate facilities outside the UK, transfers are secured via statutory UK International Data Transfer Agreements (IDTA) or European Commission Standard Contractual Clauses (SCCs), ensuring equivalent data protection.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Sales & Accounting Records: Retained for 6 full financial years following transaction completion in accordance with UK HMRC tax law requirements.
• Customer Service Logs & Enquiries: Retained for 24 months following case resolution to maintain support continuity.
• Inactive Customer Accounts: Automatically flagged and securely anonymized or erased after 3 consecutive years of inactivity.

Biovertexa UK deploys comprehensive defense-in-depth security measures to protect customer data from unauthorized access, accidental loss, or disclosure:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using modern cryptographic protocols.
• PCI-DSS Compliance: Payment details are handled strictly within hardened Level 1 certified gateway environments.
• Access Control: Administrative access to order records is restricted to authenticated personnel via two-factor authentication (2FA) and monitored audit logs.

As a UK resident, you hold extensive statutory rights regarding your personal information:

To exercise any statutory right, email our Data Protection Team at rosazgs254zapata@outlook.com. We respond to all verified requests within 30 calendar days at zero cost.

Our website utilizes necessary operational cookies to manage shopping cart sessions, customer account logins, and security tokens. Optional analytics and performance cookies are deployed only with your informed consent. For an exhaustive audit of individual cookies, lifespan, and configuration controls, please consult our dedicated Cookie Policy.

Our store supplies professional power tools, hardware, and trade construction equipment. We do not knowingly solicit or collect data from persons under the age of 18. In compliance with the UK Offensive Weapons Act 2019, purchasers of bladed tools are subjected to strict age verification protocols.

If you believe that Biovertexa UK has processed your personal data in breach of UK data protection law, we kindly ask that you contact our Privacy Officer first so we may swiftly address your concern. However, you maintain the statutory right to lodge a formal complaint with the UK supervisory authority: