Privacy Policy

Last update: September 23, 2026

Controller and contact

The controller of customer data for the LabsWorld store is PEPEUROPE LTD, 182–184 High Street North, East Ham, London E6 2JA, UK, company number 16085541. For matters regarding personal data, please write to labsworldpl@gmail.com or contact us via WhatsApp: +44 7411 601939.

What data we process and why

• Purchase and order fulfillment: contact details, address, order content, and billing information are necessary to conclude and execute a contract — Art. 6(1)(b) of the GDPR and the corresponding UK GDPR.
• Sales documentation and legal obligations: we process order and billing data to fulfill tax, accounting, and consumer law obligations — Art. 6(1)(c).
• Contact, complaints, and protection of claims: the content of correspondence and purchase data are used to handle cases, perform duties, or establish and defend claims — Art. 6(1)(b), (c), or (f), depending on the case. Our legitimate interest is efficient handling and protection of rights.
• Store security: technical information, e.g., IP address, browser type, and logs, helps detect abuse and maintain the store's operation — Art. 6(1)(f).
• Voluntary marketing and optional tracking: when you provide the required consent, contact details or data about website usage may be used for these purposes — Art. 6(1)(a). Consent is not a condition for making a purchase.

We receive data from you while you use the store, as well as from entities involved in delivery and payment processing. Providing data for an order is voluntary, but we cannot fulfill it without the information necessary for processing. Do not send identity documents, passwords, BLIK codes, or health information in the store form.

Service providers and recipients

The store runs on the Shopify platform. Data is shared to the necessary extent with Shopify and its vendors, entities handling deliveries (including Furgonetka and the selected carrier for shipping organization), banks, email and IT service providers, accounting firms, and advisors or authorized bodies when required by law.

Contact via the Gmail address is processed by Google, and contact via WhatsApp involves data processing by the WhatsApp provider in accordance with its policies. You may choose to use email or postal contact instead of WhatsApp. Simply viewing the WhatsApp link does not require sending a message.

Shopify's role

Shopify provides hosting, the shopping cart, checkout, and store management tools. Depending on the feature, it processes data on behalf of the seller or as a separate controller. When using advanced Shopify services, data from interactions with the store may be combined with data from other Shopify services for purposes described by the platform, subject to privacy settings and required consents. Details: Shopify consumer privacy and Shopify data rights portal.

Transfer outside the country of residence

Due to the seller's registered office and the international infrastructure of service providers, data may be processed in the UK and other countries outside the EEA. Applied protection mechanisms include adequacy decisions or required safeguards, e.g., standard contractual clauses and appropriate UK mechanisms. Information about safeguards for a specific transfer can be obtained by contacting the controller.

Retention period

We store order data for the duration of the contract, and subsequently for the period required for tax and accounting documentation and the pursuit or defense of claims. We keep correspondence until the case is resolved, and longer only if obligations or claims justify it. Marketing data — until consent is withdrawn, with the possibility of retaining minimal proof of consent and opt-out. Periods for technical data and cookies depend on their function; we do not store them indefinitely simply because they were collected.

Your rights

Under the conditions set out in the regulations, you may request access to, rectification of, erasure of, restriction of processing of, and portability of your data. You may withdraw consent at any time without affecting the lawfulness of previous processing.

You have the right to object to processing based on legitimate interest, and always to direct marketing. Write to labsworldpl@gmail.com. If necessary, we will ask for information required to verify your identity. We respond within the time limits required by law, usually within one month.

You may lodge a complaint with the President of the Personal Data Protection Office (UODO), the competent authority in the EEA, or the UK ICO. You do not have to contact us first.

Cookies and changes

Details are saved in the cookie policy. Changing the policy does not replace consent where it is required. The current version and the date of the last update are published on this page.