This Privacy Policy explains how 13th Floor Ltd (“we”, “our”, “us”) collects, uses and protects your personal data when you visit or make a purchase on our website www.best-lab.co.uk.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

13th Floor Ltd
8 Maple Walk, Coventry CV6 6AU, United Kingdom
Company No. 13715742 VAT GB394920268
Email: hello@best-lab.co.uk Phone: +44 7539 623063

2. What Data We Collect

We may collect and process the following personal data:

• Name, surname, billing and delivery address
• Email address and telephone number
• Payment details (processed securely by our payment providers)
• Order history and customer service communication
• Technical data (e.g. cookies, IP address, browser information)

3. How We Use Your Data

We process your personal data only for legitimate business purposes:

• to fulfil and deliver your orders
• to communicate about your purchases or enquiries
• to send updates and offers (if you consented to marketing)
• to improve our website and customer experience
• to comply with legal obligations (e.g. tax and accounting laws)

4. Legal Basis for Processing

Data is processed based on:

• your consent (for marketing and newsletter communication)
• contract performance (order fulfilment and delivery)
• legitimate interest (customer support, fraud prevention, analytics)
• legal compliance (financial record keeping)

5. Sharing Your Data

We share data only with trusted service providers essential to our operations:

• payment processors (e.g. Stripe, PayPal)
• couriers and logistics partners (e.g. Royal Mail, Evri, DPD)
• IT and hosting companies ensuring security and functionality
  All partners are contractually obliged to comply with UK data-protection laws.

We do not sell or rent personal data to third parties.

6. Cookies and Analytics

Our website uses cookies to improve functionality and analyse traffic.
We use Google Analytics and Meta Pixel to collect aggregated statistics about site performance and advertising effectiveness.
You can manage cookie preferences in your browser settings.

7. Data Retention

We retain data for as long as necessary to fulfil contractual and legal obligations (typically up to 6 years for accounting purposes). Marketing data is kept until you withdraw consent.

8. Your Rights

Under UK GDPR you have the right to:

• access your personal data
• request correction or erasure
• withdraw consent at any time
• restrict or object to processing
• data portability
  To exercise these rights, contact us at hello@best-lab.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK: www.ico.org.uk.

9. Data Security

We apply technical and organisational measures to protect your data against unauthorised access, alteration, loss or disclosure. All payments are encrypted via SSL.

10. International Transfers

We store data within the United Kingdom and the European Economic Area (EEA). If data is transferred outside these areas, we ensure adequate protection by using standard contractual clauses approved by the UK Information Commissioner.

11. Updates to This Policy

We may update this policy from time to time to reflect changes in law or our practices. Any updates will be published on this page with a revised date.

Last updated: October 2025