OREON BIOTECH LTD
Last updated: 8 November 2026
Website: https://oreonbiotech.co.uk
Email: contact@oreonbiotech.co.uk
Company Registration Number: [To be added]
Registered Office: [To be added]
1. Introduction
Oreon Biotech Ltd is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or purchase products.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Oreon Biotech Ltd is the data controller for personal information collected through our website.
2. Information We Collect
Depending on how you interact with our website, we may collect:
- Your name and contact details.
- Email address and telephone number.
- Billing and delivery addresses.
- Order history and purchased products.
- Payment status and transaction references.
- Messages submitted through our contact forms.
- Account login information, where customer accounts are available.
- Technical information such as IP address, browser type and device information.
- Cookie preferences and website usage information.
We only collect information reasonably necessary for the purposes described in this policy.
3. How We Use Your Information
We may use personal information to:
- Process and manage customer orders.
- Arrange deliveries and returns.
- Confirm payments and provide refunds.
- Send order confirmations and delivery updates.
- Respond to customer enquiries.
- Maintain customer accounts.
- Prevent fraud and protect website security.
- Meet accounting, tax and other legal obligations.
- Improve website functionality and customer experience.
- Send marketing communications where permitted by law.
4. Our Legal Bases for Processing
We process personal information where one or more of the following legal bases apply:
Contract: To process orders, provide products and deliver customer services.
Legal obligation: To maintain records and comply with applicable tax, accounting and other legal requirements.
Legitimate interests: To maintain website security, prevent fraud, respond to business enquiries and manage our operations, where those interests are not overridden by individuals’ rights.
Consent: Where consent is legally required, including for certain cookies and marketing communications.
You may withdraw consent at any time where processing relies on consent.
5. Orders and Payments
Our website uses WooCommerce to manage online orders.
When you place an order, we collect information needed to process the transaction and arrange delivery.
Where you pay by bank transfer, we may receive payment references, payer details and transaction information necessary to identify and reconcile payments.
We do not request online banking passwords or security credentials.
6. Contact Forms and Communications
When you contact us using our website forms or email address, we collect the information you provide.
We use this information to respond to enquiries and maintain appropriate business records.
Our website may use email delivery services to send customer communications and order notifications.
7. Cookies
Our website may use cookies and similar technologies to:
- Maintain shopping basket functionality.
- Remember customer sessions.
- Support account login.
- Maintain website security.
- Remember cookie preferences.
- Measure website performance, where enabled.
Non-essential cookies, including applicable analytics or advertising cookies, will only be used where the required consent has been obtained.
You can manage applicable cookie preferences through our website’s cookie controls.
Further information about cookies and their purposes should be provided through our cookie notice or cookie settings.
8. Sharing Your Information
We may share necessary personal information with trusted service providers, including:
- Website hosting providers.
- WooCommerce and associated website service providers.
- Email hosting and delivery providers.
- Banks and payment service providers.
- Delivery and courier companies.
- IT support and website maintenance providers.
- Accountants, professional advisers and authorities where legally required.
We do not sell customer personal information.
Service providers are required to handle personal data appropriately and in accordance with applicable legal obligations.
9. International Data Transfers
Some service providers may process personal information outside the United Kingdom.
Where international transfers occur, we will ensure that an appropriate lawful transfer mechanism or applicable adequacy arrangement is in place, as required by UK data protection law.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting and contractual requirements.
Order and transaction records may need to be retained for several years to meet applicable tax and accounting obligations.
Customer enquiries and account information will be retained according to their purpose and applicable retention requirements.
When information is no longer required, we will securely delete or anonymise it where appropriate.
11. Data Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse and disclosure.
These may include secure website connections, access controls, software updates and appropriate account security measures.
No online system can guarantee absolute security.
12. Your Data Protection Rights
Under applicable UK data protection legislation, you may have the right to:
- Access your personal information.
- Request correction of inaccurate information.
- Request deletion of personal information in certain circumstances.
- Restrict certain processing.
- Object to processing in certain circumstances.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
To exercise your rights, contact:
We will respond within the time limits required by applicable law, normally within one calendar month.
13. Marketing Communications
We will only send marketing communications where permitted by applicable law.
Where consent is required, we will obtain it before sending marketing messages.
You can opt out of marketing emails at any time by following the unsubscribe instructions or contacting us directly.
14. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices of websites operated by other organisations.
We recommend reviewing their privacy policies before providing personal information.
15. Children’s Privacy
Our website is not intended for children.
We do not knowingly collect personal information from children for the purpose of marketing or selling products to them.
If we become aware that personal information has been collected unlawfully, we will take appropriate action.
16. Changes to This Policy
We may update this Privacy Policy to reflect changes to our services, website functionality or legal obligations.
The latest version will be published on this page with an updated revision date.
17. Complaints
If you have concerns about how we handle personal information, please contact us first so that we can investigate.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
18. Contact Us
For privacy enquiries or requests concerning your personal information:
Oreon Biotech Ltd
Email: contact@oreonbiotech.co.uk
Website: https://oreonbiotech.co.uk
Registered Office: [To be added]
Company Registration Number: [To be added]