Last updated: 29 August 2026
Abyss Biotech respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect information when you visit abyssbiotech.co.uk, create an account, place an order or contact us.
Who we are
Abyss Biotech operates the website abyssbiotech.co.uk.
For privacy-related enquiries, contact:
Email: Info@abyssbiotech.com
Information we collect
We may collect information you provide when using our website, including:
- Name
- Billing and delivery address
- Email address
- Telephone number
- Account login information
- Order and transaction information
- Products purchased
- Communications you send to us
We may also automatically collect technical information such as:
- IP address
- Browser and device information
- Pages visited
- Approximate location based on IP address
- Cookie and website usage information
How we use your information
We use personal information where necessary to:
- Process and fulfil orders
- Take and confirm payments
- Arrange delivery
- Manage customer accounts
- Respond to enquiries
- Provide customer support
- Prevent fraud and misuse of our website
- Maintain website security
- Keep appropriate accounting and transaction records
- Comply with legal and regulatory obligations
- Improve the operation and performance of our website
Where required by law, we will obtain consent before using personal information for optional marketing or non-essential cookies.
Legal bases for processing
Under UK data protection law, we may process personal information because:
Contract: processing is necessary to provide products or services you have requested.
Legal obligation: we are required to retain or process certain information for tax, accounting or other legal purposes.
Legitimate interests: processing is reasonably necessary for operating, securing and improving our business and website, provided those interests do not override your rights.
Consent: where we specifically ask for your permission, such as certain marketing communications or optional cookies.
Orders and payments
When you place an order, we collect the information required to process the transaction and deliver your order.
Payment information may be processed by third-party payment providers. Abyss Biotech does not necessarily receive or store your complete payment-card details. Payment providers process information according to their own privacy and security policies.
WooCommerce
Our online store uses WooCommerce. WooCommerce may process information required to operate the shop, including customer, order, cart and checkout information.
Website hosting
Our website is hosted using third-party hosting services. Hosting providers may process technical information necessary to operate, secure and maintain the website.
Delivery providers
Where necessary to fulfil an order, we may provide delivery information such as your name, delivery address and relevant contact details to postal or courier companies.
They receive only the information reasonably required to complete delivery.
Cookies
Our website may use cookies and similar technologies to:
- Keep the website functioning correctly
- Remember shopping-cart contents
- Maintain login sessions
- Improve security
- Remember user preferences
- Understand website performance and usage where analytics services are enabled
Some cookies are essential for the website and online shop to function.
Where legally required, non-essential cookies will not be used without consent.
Customer accounts
If you create an account, we store the information associated with that account so you can access your order history and use account features.
You are responsible for keeping your login credentials secure.
Marketing
We will not send electronic marketing communications without an appropriate lawful basis.
Where marketing is based on consent, you can withdraw that consent at any time.
Who we share information with
We do not sell personal information.
We may share information with service providers where reasonably necessary to operate the business, including:
- Website hosting providers
- Ecommerce and website software providers
- Payment processors
- Delivery and courier companies
- IT and security providers
- Professional advisers
- Accounting services
- Government authorities where legally required
Service providers should only process personal information for legitimate purposes connected with providing their services.
How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, fraud-prevention and regulatory requirements.
Order and transaction records may need to be retained for several years to meet UK accounting and tax obligations.
Information that is no longer required will be deleted or anonymised where reasonably practicable.
How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet-based system can guarantee absolute security.
International transfers
Some service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards will be used where required under UK data protection law.
Your rights
Depending on the circumstances, UK data protection law gives you rights including the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion of information in certain circumstances
- Request restriction of processing
- Object to certain processing
- Request transfer of your information where applicable
- Withdraw consent where processing is based on consent
To exercise these rights, contact us using the details above.
We may need to verify your identity before fulfilling a request.
Complaints
If you are concerned about how your personal information has been handled, contact us first so we can investigate.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator responsible for data protection.
Third-party links
Our website may contain links to third-party websites. Abyss Biotech is not responsible for the privacy practices or content of external websites.
You should review the privacy policy of any third-party website you visit.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our services, website, suppliers or legal obligations.
The current version will be published on this page with an updated revision date.