Privacy Policy
At Archive Bio, we are committed to protecting your privacy and handling your personal information responsibly, securely, and transparently.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, create an account, purchase plant nutrition or cultivation products, contact us, or otherwise interact with Archive Bio.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations where applicable.
Information We Collect
We may collect and process personal information required to operate our website, process orders, deliver products, provide customer support, prevent fraud, and meet our legal and administrative obligations.
This may include:
- Your name
- Email address and telephone number
- Billing and delivery address
- Order and purchase details
- Payment confirmation information
- Account login details
- IP address, browser, and device information
- Website usage and browsing information
- Marketing and communication preferences
- Customer service correspondence
- Information provided in connection with returns, refunds, or delivery claims
We only collect information that is reasonably necessary for the purposes described in this Privacy Policy.
How We Use Your Personal Data
We use personal data to provide and improve our services, fulfil customer orders, communicate with customers, and maintain the security and performance of our website.
We may use your personal data for the following purposes:
- To process, pack, and dispatch orders
- To manage customer accounts and wishlists
- To provide order confirmations, delivery updates, and tracking information
- To respond to product, order, and customer-support enquiries
- To process returns, refunds, replacements, and delivery investigations
- To manage product availability and customer notifications
- To detect, prevent, and investigate fraud or misuse of our website
- To maintain website, account, and payment security
- To comply with legal, tax, accounting, and regulatory obligations
- To improve website functionality, performance, and customer experience
- To send marketing communications where permitted
We do not sell or rent your personal data.
Lawful Bases for Processing
Depending on the circumstances, we may process your personal data because:
- It is necessary to fulfil a contract with you, such as processing and delivering an order.
- It is necessary to comply with a legal or regulatory obligation.
- It supports our legitimate business interests, such as preventing fraud, improving our website, and providing customer support.
- You have provided consent, such as when subscribing to optional marketing communications.
Where processing is based on consent, you may withdraw that consent at any time.
Account Security
Account-related information is protected using appropriate technical and organisational security measures. Passwords are stored in a securely hashed format and are not visible to us in plain text.
Access to customer data is restricted to authorised personnel and service providers who require access for legitimate business purposes, such as order processing, customer support, payment administration, fulfilment, delivery, or website maintenance.
We take reasonable measures to protect our systems, databases, and customer information against unauthorised access, misuse, alteration, loss, or disclosure. However, no online system or transmission method can be guaranteed to be completely secure.
Who We Share Personal Data With
We may share personal data with trusted third parties where necessary to operate our website, fulfil orders, process payments, deliver products, provide customer support, or comply with legal obligations.
This may include:
- Payment providers and banking partners
- Delivery companies and courier services
- Website hosting and ecommerce-platform providers
- IT support, security, and fraud-prevention providers
- Email, newsletter, and communication service providers
- Analytics and website-performance providers
- Professional advisers, including accountants or legal advisers
- Regulatory, legal, or law-enforcement bodies where required by law
Where third parties process personal data on our behalf, we require them to apply appropriate security and data-protection standards and to use personal data only for authorised purposes.
Payment Information
Archive Bio does not store full payment card details on its own servers.
Where card payments, bank transfers, or Open Banking options are available, payment information is processed securely by the relevant payment provider, financial institution, or banking partner. These providers may process payment-related information under their own privacy policies.
For manual bank transfers, customers should include their order reference so that the payment can be identified and the order processed efficiently.
Payment availability may vary depending on provider restrictions, banking requirements, security checks, and operational circumstances.
International Data Transfers
Some of our service providers may process or store personal data outside the United Kingdom. Where this occurs, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data-protection law.
Data Retention
We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including order fulfilment, customer support, legal compliance, tax, accounting, fraud prevention, and dispute resolution.
Certain order and transaction records may need to be retained for legal, tax, accounting, warranty, or administrative purposes. Where personal data is no longer required, it will be securely deleted or anonymised in accordance with our internal procedures.
Your Data Protection Rights
Under UK data-protection law, you may have rights in relation to your personal data. Depending on the circumstances, these may include the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data where applicable
- Request restriction of processing
- Object to certain types of processing
- Request transfer of your personal data where applicable
- Withdraw consent where processing is based on consent
- Raise a concern with the Information Commissioner’s Office
To exercise your data-protection rights, please contact us at info@archivebio.co.uk and provide enough information for us to identify your account, order, or previous correspondence.
For security reasons, we may need to verify your identity before responding to a request. This helps protect customer information and reduces the risk of unauthorised access.
Cookies & Similar Technologies
Our website may use cookies, log files, pixels, tags, and similar technologies to operate the website, improve functionality, remember preferences, analyse performance, and support security.
Cookies are small files stored on your device when you visit a website. They help websites function correctly and may also be used to understand how visitors interact with the site.
We may use cookies and similar technologies to:
- Keep the website secure and functional
- Remember customer preferences and basket contents
- Enable account login and checkout functionality
- Analyse website traffic and performance
- Understand how visitors use our website
- Support fraud prevention and security monitoring
- Measure the effectiveness of marketing where permitted
- Improve the overall customer experience
Where required, non-essential cookies will only be used after you have provided consent. You can manage your preferences through our cookie controls or your browser settings.
Blocking certain cookies may affect website functionality, including account access, basket features, saved preferences, and checkout performance.
Marketing Communications
Where you have opted in, or where otherwise permitted by law, we may use your email address to send plant-nutrition information, product updates, restock notices, special offers, cultivation-related content, or website news.
You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at info@archivebio.co.uk.
Unsubscribing from marketing will not prevent us from sending essential service communications relating to your account, orders, payments, deliveries, or support requests.
Data Breaches
If a personal-data breach occurs, we will take appropriate steps to investigate, contain, and address the issue.
Where required by law, we will notify affected individuals and the relevant supervisory authority within the applicable reporting period.
Third-Party Websites
Our website may contain links to product manufacturers, growing guides, social platforms, or other third-party websites. These websites operate independently and have their own privacy and cookie policies.
Archive Bio is not responsible for the privacy practices, content, availability, or security of third-party websites. We recommend reviewing the privacy policy of any external website you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website functionality, service providers, legal obligations, or data-protection practices.
When this policy is updated, the latest version will be published on our website. We recommend reviewing this page periodically to remain informed about how we handle personal data.
How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle personal data, please contact:
Archive Bio Ltd
5 Newgate Close
London
TW13 5LG
Email: info@archivebio.co.uk
You also have the right to raise a concern with the UK Information Commissioner’s Office if you believe your personal data has not been handled appropriately.