Privacy Policy
Last updated: 19 October 2026
SHPP Ltd, trading as Kineris Labs (company number 17528699, registered office Suite 137, 5 High Street, Maidenhead, Berkshire, SL6 1JN, United Kingdom) is the controller of the personal data described here. We collect only what we need to process your orders, deliver them and support you, and we delete it when we no longer need it. Contact us about privacy at hello@kinerislabs.com.
1. What we collect
- Identity and contact details: name, email address, phone number, delivery and billing addresses.
- Order details: products ordered, order value, delivery option, order history, and your checkout declarations (age and research use).
- Payment status: confirmation that a payment succeeded or failed. We never see or store your full card or bank details.
- Correspondence: emails you send us, including any photos or videos attached to a claim.
- Technical data: IP address, browser and device type, and pages visited, collected through cookies and analytics.
We do not collect special category data such as health information. Please do not send it to us.
2. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing, delivering and updating you on orders | Performance of a contract |
| Answering enquiries and resolving delivery or payment issues | Legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping the site secure, including checking claim photos and videos | Legitimate interests |
| Enforcing our research-use-only policy | Legitimate interests |
| Sending marketing emails | Consent, or the soft opt-in for existing customers. You can unsubscribe from any email. |
| Improving the website using aggregated analytics | Legitimate interests |
3. Who we share it with
We never sell your personal data. We share it only with service providers who help us run the shop:
- Payment providers, who process your payment
- Delivery: Royal Mail and any courier you choose at checkout
- Website hosting: Vercel
- Email: Google Workspace and our email service provider
- Analytics: our website analytics provider
We may also disclose data where the law requires it, or to establish or defend legal claims.
4. International transfers
Some of our providers process data outside the UK, including in the EEA and the United States. Where they do, we rely on UK adequacy regulations (including the UK-US Data Bridge) or the UK International Data Transfer Agreement or Addendum.
5. How long we keep it
- Order and transaction records: 6 years, as UK tax law requires.
- Customer service emails: up to 12 months.
- Marketing details: until you unsubscribe.
- Accounts: until you ask us to close your account, subject to the 6-year order record rule.
6. Security
Our site runs over HTTPS. Payments are handled on our payment provider's secure platform. Access to customer data is limited to staff who need it.
7. Cookies
- Essential cookies keep your basket and checkout working. The site will not work properly without them.
- Analytics cookies help us understand how the site is used, in aggregate only. You can switch them off in our cookie banner at any time.
- Marketing cookies (such as advertising pixels) are only set if you accept them in the cookie banner.
8. Your rights
Under UK GDPR you have the right to access your data, have it corrected, have it deleted (unless we must keep it by law), restrict or object to its use (including an absolute right to object to direct marketing), receive it in a portable format, and withdraw consent at any time. Email us to make a request. We will respond within one month, free of charge unless a request is clearly unfounded or excessive.
9. Complaints
Please contact us first so we can try to resolve any concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
10. Age
Our website is for adults. You must be 18 or over to order, and we do not knowingly collect data from anyone under 18.
11. Changes
We will post any updates on this page with a new date.