1. Who we are
Syntra Labs operates the syntralabs.co.uk online research catalogue.
This Privacy Policy explains how personal information may be collected, used, stored and protected when you visit our website, create an account, place an order, contact us or otherwise interact with our services.
2. Information we collect
Depending on how you use Syntra Labs, we may collect and process different categories of personal information.
ACCOUNT DATAAccount information
When you create an account, information may include:
- Email address
- First and last name
- Telephone number
- Account preferences
- Marketing preferences
- Authentication and account-security records
Authentication services are provided through Supabase Auth. Syntra Labs does not store customer passwords in plaintext.
DELIVERY DATASaved addresses
Signed-in customers may save delivery information to their account, including:
- Full name
- Delivery address
- Billing address
- Postcode
- Telephone number
ORDER DATAOrder information
Order records may include:
- Order reference
- Products and quantities
- Order value
- Member discount information
- Account credit applied
- Payment status
- Dispatch and fulfilment status
- Order history
TECHNICAL DATAWebsite and device information
Certain technical information may be processed automatically when you use the website, including:
- IP address
- Browser information
- Device information
- Pages visited
- Referral source
- Website interactions
- Security and diagnostic information
3. Payments
Payments are processed securely using Stripe Checkout.
Syntra Labs does not directly store your full payment-card number, CVC or complete card credentials. Payment information is processed by Stripe in accordance with its own security and privacy requirements.
Secure checkoutEncrypted connectionsNo plaintext card storage
4. How we use your information
Personal information may be processed where necessary to:
- Create and maintain your customer account
- Authenticate and secure account access
- Process and fulfil orders
- Provide delivery and dispatch information
- Process payments and refunds
- Apply eligible member pricing, discounts or account credit
- Maintain customer order history
- Save delivery addresses and account preferences
- Respond to customer-support enquiries
- Send transactional account and order communications
- Prevent fraud, misuse and security incidents
- Maintain and improve the security and reliability of the website
- Meet applicable legal, regulatory, tax and accounting obligations
5. Legal bases for processing
Where UK data-protection law applies, personal information is processed only where an appropriate lawful basis exists.
CONTRACTProcessing necessary to provide products or services requested by the customer, including order processing and fulfilment.
LEGAL OBLIGATIONProcessing required to comply with applicable legal, tax, accounting or regulatory requirements.
LEGITIMATE INTERESTSProcessing reasonably necessary for website security, fraud prevention, customer support and service improvement.
CONSENTProcessing based on your permission, including certain marketing communications or optional technologies where consent is required.
6. Service providers
Syntra Labs uses selected technology providers to operate its customer platform.
StripePayment processing and secure checkoutSupabaseAuthentication, customer accounts and database infrastructureResendTransactional email deliveryVercelWebsite hosting and application infrastructure 7. Email communications
Syntra Labs may send transactional emails relating to your account or purchases, including:
- Email verification
- Password recovery
- Security notifications
- Order confirmation
- Payment or order updates
- Dispatch information
Optional marketing, catalogue or promotional communications should only be sent where an appropriate legal basis applies. Where applicable, you can unsubscribe from marketing communications at any time.
8. Cookies and browser storage
Syntra Labs may use cookies, browser storage and similar technologies to provide essential website functionality.
Browser storage may be used to remember information such as:
- Shopping-cart contents
- Account and interface preferences
- Recently viewed products
- Research-access confirmation
- Other essential website states
Where non-essential analytics, advertising or similar technologies require consent, they should only be activated in accordance with the choices presented to the user.
9. Data retention
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, security and regulatory requirements.
Account information may be retained while your account remains active and for an appropriate period afterwards. Order and transaction records may be retained for longer where required for accounting, tax, fraud-prevention or legal purposes.
10. How we protect your information
Syntra Labs uses technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or loss.
HTTPS encrypted connectionsSecure authenticationDatabase access controlsRow-level securityRestricted administrative accessSecure third-party payment processingServer-side transaction validationAccount security notifications
No internet-based system can guarantee absolute security, but we aim to maintain safeguards appropriate to the information being processed.
11. Your data-protection rights
Subject to applicable UK data-protection law and certain legal limitations, you may have rights including the right to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of eligible information
- Request restriction of certain processing
- Object to certain processing
- Request portability of eligible information
- Withdraw consent where processing is based on consent
You may also have the right to raise a complaint with the UK Information Commissioner's Office (ICO) if you believe your personal information has been handled in breach of applicable data-protection law.
12. International processing
Some technology providers used by Syntra Labs may process or store information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards should be used where required by applicable data-protection legislation.
13. Age restriction
The Syntra Labs research catalogue is intended for adults aged 18 years or over.
We do not knowingly intend to provide customer accounts or catalogue access to children.
14. Changes to this Privacy Policy
We may update this Privacy Policy where our services, technology, legal obligations or business practices change.
The latest version will be published on this page together with its most recent update date.