Privacypolicy.

RETA MED UK is the data controller for the personal data described here. For any privacy question, or to exercise a right, contact us at privacy@retamed.life. We aim to respond within 30 days, as required by the UK GDPR.

• — Order details (name, email, phone, billing and delivery address, order history). Used to take payment, fulfil and deliver your order, and handle returns. Lawful basis: performance of a contract.
• — Eligibility confirmation (your declaration that you are 18+ and ordering for laboratory research use). Used to meet our compliance obligations as a supplier of research chemicals. Lawful basis: legal obligation and legitimate interests.
• — Correspondence (emails and messages you send us). Used to answer you and keep a record of the exchange. Lawful basis: legitimate interests.
• — Technical and analytics data (device, browser, pages viewed). Used to keep the site secure and to improve it. Lawful basis: consent for non-essential analytics cookies; legitimate interests for security logging.

We do not ask for, and do not want, health information. Please do not send us medical details — our products are supplied for laboratory research use only and we cannot give clinical advice.

Essential cookies keep your basket, session and checkout working; the site cannot function without them, so they are set without consent. Non-essential analytics cookies are only set if you choose “Accept all” in our cookie banner. You can change your mind at any time by clearing this site's cookies and site data in your browser, which will bring the banner back.

We share only what is necessary, with processors acting on our instructions: Shopify (store, checkout and order management), our payment provider (card data is handled by them and never stored by us), and our delivery partners. We may disclose data where we are legally required to. We never sell your personal data or share it for third-party marketing.

Where a provider processes data outside the UK, that transfer is covered by UK adequacy regulations or the International Data Transfer Agreement / Addendum.

Order and transaction records are kept for six years to meet UK accounting and tax requirements. Purchaser declarations are kept for the same period. Marketing contacts are kept until you unsubscribe. Correspondence is kept for up to two years. Analytics data is retained in aggregated form.

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, transfer it to another provider, or withdraw consent where consent is the basis we relied on. Some data must be retained for accounting purposes even after a deletion request, and we will tell you if that applies.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

The site runs over encrypted connections, access to order data is limited to staff who need it, and payments are handled by PCI-compliant providers. Orders ship in plain, unbranded outer packaging.