Privacy Policy
How customer and research-order information is used.
This policy explains how the operator of the NOVA Labs website handles personal data for catalogue access, enquiries, account functions, research-use review, order administration, optional email updates, security and legal record-keeping. Privacy enquiries can be sent to lukeashepherd1@gmail.com.
Information we collect
Depending on how you use the site, this may include your name, email address, telephone number, delivery address, organisation or laboratory, organisation website, research role, stated intended research use, account identifiers, order history, correspondence, optional marketing subscription status and preferences, bank-payment references, selected cryptocurrency asset/network, crypto quote information, an expected sending wallet/address where supplied, submitted blockchain transaction IDs and technical or security information generated when you use the website.
Do not send passwords, online-banking credentials, one-time security codes, wallet seed phrases, private keys, medical information or other unnecessary sensitive personal data through checkout or support email.
Purposes and lawful bases
Contact, account, delivery and order information is used where necessary to take steps at your request, administer an order and provide support. Research-use declarations, security data and misuse indicators are used where necessary for legitimate interests in operating a lawful research-material business, protecting the site and assessing whether an order is consistent with our Research Use Policy. Payment references, expected sender details and blockchain transaction identifiers are used to match, verify, reconcile and where necessary refund payments. Records are also processed where necessary to comply with tax, accounting, regulatory or other legal obligations. Optional analytics, advertising or similar non-essential technologies are used only where a valid consent basis is available and required consent has been obtained.
Optional email updates
If you actively opt in to NOVA Labs research-catalogue emails, we use your email address and any optional first name you provide to send catalogue updates, newly published documentation and occasional catalogue reminders. These messages are based on your consent, are not required to place an order, and include a way to unsubscribe. You may withdraw that consent at any time. Withdrawing marketing consent does not affect transactional or support emails that are necessary to administer an order or respond to an enquiry.
Research-use and order review
Organisation, role and intended-research information may be reviewed after an order is submitted and before fulfilment. We may ask for reasonable supporting information where the purchaser, organisation or proposed use is unclear, and may cancel/refund before fulfilment on the serious grounds described in our Terms. We do not currently use solely automated profiling to make a decision that produces legal or similarly significant effects on a purchaser.
Crypto payment information
Public blockchain transactions are inherently visible on the relevant blockchain. When you choose direct crypto payment, we may retain the selected asset, network, quoted amount, receiving address, expected sending wallet/address, quote time and transaction ID in the order record so that payment can be matched and verified. The expected sender is supporting information only because exchange withdrawals, Bitcoin multi-input transactions and some wallet infrastructure may not expose a simple one-to-one sender address. We do not request or store wallet seed phrases or private keys.
Who receives information
Personal data may be shared only where necessary with service providers supporting website hosting, authentication and database services, email communications and opt-in list management, payment administration, fulfilment or delivery, security, professional advice or legal and regulatory compliance. Crypto market-price data may be obtained from a market-data provider, but the checkout does not need to disclose your seed phrase or private keys. We may also disclose information where required by law, court order or a competent authority.
International processing
Some technology or communications providers may process information outside the United Kingdom. Where UK data protection law requires a transfer safeguard, we use an applicable adequacy regulation, approved contractual mechanism or another lawful safeguard appropriate to the transfer.
Retention
Personal data is kept only for as long as needed for the purpose for which it was collected. Order, payment, accounting and compliance records may normally be retained for up to six years where needed for tax, accounting, contractual or legal purposes. Support correspondence may normally be retained for up to two years after the matter is closed. Email-marketing contact information is retained while you remain subscribed; after an unsubscribe, limited suppression information may be retained so that your opt-out can continue to be respected. Security and technical logs are kept for shorter periods where possible and may be extended where needed to investigate abuse, fraud or a security incident.
Your data-protection rights
Subject to applicable conditions and exemptions, you may have rights to obtain a copy of your data, correct inaccurate data, request erasure, restrict processing, object to certain processing, obtain portable data and withdraw consent where processing is based on consent. Marketing consent can also be withdrawn through the unsubscribe link in a marketing email. You also have the right to complain to the UK Information Commissioner's Office. To exercise a right, contact us using the privacy email above.
Cookies and local storage
The site uses necessary browser storage for functions such as the shopping basket and remembering the research-use acknowledgement. Optional analytics or advertising technologies must remain disabled until any consent required by law has been obtained. See our Cookie & Storage Notice for the current storage categories used by the site.
Security
We use technical and organisational measures intended to protect customer information, including access controls and encrypted transport. No internet service can guarantee absolute security. If you believe account or order information has been exposed, contact us promptly and do not include passwords, banking login credentials, seed phrases or private keys in the message.
Children
NOVA Labs is a research-material catalogue and is not directed to children. Orders are subject to purchaser and research-purpose review.
Controller details
The data controller is the legal person operating NOVA Labs. The formal legal trading identity and postal controller address will be added to this page and the site footer once the trading entity details are finalised. Until then, privacy requests can be sent to lukeashepherd1@gmail.com.
Updated 22 August 2026.