Who controls your information
AUREN SUPPLIES LTD, trading as Auren Labs, is registered in England and Wales under company number 17417818. Registered office: 18 Westerly Way, Spalding, United Kingdom, PE11 3FH.
AUREN SUPPLIES LTD is the data controller for the personal information described in this policy. Privacy enquiries may be sent to support@aurenlabs.co.uk.
Information we collect
- Identity and contact information: name, email, telephone number, delivery and billing addresses.
- Order information: products, quantities, prices, discounts, delivery service, order status and history.
- Payment information: payment status and transaction references received through Fena. We do not receive bank-login credentials.
- Account information: username, encrypted password record, saved addresses and preferences.
- Correspondence: enquiries, complaints, returns and our replies.
- Technical information: IP address, browser/device details, security logs, cookie identifiers and site interactions. Meta browser and click identifiers are used only after marketing consent. Where available after that consent, email, telephone, name, city, region, postcode, country and customer ID are normalized and SHA-256 hashed on Auren’s server before consented event matching.
Please do not send health information, medical histories or other special-category data. Auren does not need this information to sell laboratory materials and does not intentionally send it through advertising tools.
Where information comes from
Most information is provided directly by you at checkout, through an account, in a support message or through cookie choices. Payment status comes from Fena; delivery events come from Royal Mail; fraud or security indicators may come from our ecommerce, hosting and security providers. If marketing measurement is accepted, Meta may provide an advertising click identifier and associate consented website events with an advert interaction.
Why we use it and our lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Take payment, deliver and support an order | Performance of a contract |
| Respond before an order is placed | Steps requested before entering a contract |
| Keep tax, accounting and company records | Legal obligation |
| Prevent fraud, enforce the research-use boundary, secure the site and defend legal claims | Legitimate interests and, where applicable, legal obligation |
| Operate accounts, improve support and diagnose service faults | Contract or legitimate interests |
| Send requested marketing | Consent, or a legally available existing-customer soft opt-in with an opt-out in every message |
| Use the Meta Pixel and consent-matched server events to measure advert performance and attribute conversions | Consent under PECR and UK GDPR |
Our legitimate interests are operating a secure and reliable store, preventing fraud or prohibited use, assisting customers, maintaining evidence and defending legal rights. We balance those interests against the effect on the individual and do not rely on legitimate interests for Meta advertising measurement.
Information required to order
Name, email address, mobile number, billing or delivery address, ordered items and payment authorisation are required to enter and perform the sales contract. If required information is not provided, we may be unable to accept payment, dispatch the order or provide order support. Creating an account and providing optional order notes are not required.
International transfers
Hosting, support, email, payment, Meta advertising or infrastructure providers may use personnel or systems outside the United Kingdom. Where UK data-protection law requires a safeguard, Auren relies on a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, provider contractual safeguards or another lawful mechanism. You may request information about the safeguard relevant to your data by emailing support@aurenlabs.co.uk.
Automated checks and decisions
WooCommerce, Fena, the selected bank and hosting security controls may automatically assess payment status, unusual activity, duplicate attempts, technical risk or fraud indicators. Auren may also use rules to block restricted products and hold an order that appears inconsistent with the research-only boundary. These checks may delay or prevent an order.
Auren does not use solely automated decision-making that produces a legal or similarly significant effect without meaningful human review where UK GDPR requires that protection. Contact support@aurenlabs.co.uk to request review of an Auren decision.
How long information is kept
We keep information only for as long as needed for the purposes above, legal record-keeping and dispute handling. The category-by-category schedule is published in our Data Retention Policy.
Your data-protection rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information; object to processing based on legitimate interests or direct marketing; receive portable data; and withdraw consent. The right to object to direct marketing is absolute. Marketing-measurement consent can be withdrawn at any time through Cookie Settings. Withdrawing consent does not affect earlier lawful processing.
Send a request to support@aurenlabs.co.uk. We normally respond within one month and may need to verify identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Age restriction and policy changes
The store is for adults aged 18 and over and is not directed to children. We may update this notice when services, providers or legal requirements change; the latest date is shown above.