Privacy notice
Who is responsible for your data
CellSync is responsible for how your personal data is used on this website (the controller). Contact us about your data at support@cell-sync.com.
What we collect and why
Contact messages: your name, email address, any order reference and your message, so we can reply (legitimate interests).
Orders and accounts: your name, email, delivery address, phone number and order history, so we can deliver your order and provide after-sales support (performance of a contract) and keep tax records (legal obligation).
Payments are handled by our payment provider. We never see or store your full card details.
Emails: we email you about your order (confirmation, dispatch and refunds) and your account (confirming your address and resetting your password). We do not send marketing emails.
Security: when you use the contact, sign-in, sign-up or checkout forms we keep a scrambled (hashed) form of your IP address for up to a day, to stop the forms being misused (legitimate interests).
Analytics: only if you accept analytics cookies, Google Analytics records which pages are visited and how visitors arrived, so we can improve the site (consent). Account, checkout and order pages are never measured.
Who we share it with
We use service providers to run the shop, and they process data only on our instructions: Vercel (website hosting), Supabase (database and customer accounts), Airwallex (payments), Zoho (email) and, only if you accept analytics cookies, Google (Google Analytics).
Our database is hosted in Ireland, in the European Union. Some providers also process data in other countries. Where data leaves the UK, we rely on the safeguards UK data protection law requires, such as the providers' data processing terms.
How long we keep it
We keep contact messages and account details only for as long as we need them to deal with your enquiry or run your account. Order records are kept for six years for tax purposes.
Cookies
Strictly necessary: a cookie keeps you signed in to your account, and your bag is kept in your browser. These are needed for the shop to work and do not need consent.
Analytics (optional): Google Analytics cookies, whose names start with _ga, are set only if you accept them. They are kept for up to two years, or until you clear them. You can change your choice at any time with Cookie settings at the bottom of every page; rejecting removes them.
Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its use, and receive it in a portable format. To use these rights, contact us.
You can also complain to the Information Commissioner's Office (ico.org.uk).