Last updated: 22 October 2026

1. Who We Are

Nova Bio Research respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Nova Bio Research collects, uses, stores, shares and protects personal information when you visit novabioresearch.co.uk, browse our catalogue, create an account, place an order, contact us, subscribe to notifications, add Nova to your device, interact with marketing communications or otherwise use our website and services.

For the purposes of UK data protection law, the organisation responsible for the personal information described in this Privacy Policy is:

Nova Bio Research
Correspondence address: Vapor Tech, Bolton, BL3 6AY, United Kingdom
Email: contact@novabioresearch.co.uk
Telephone: 07572 464515
Website: novabioresearch.co.uk

If Nova Bio Research operates through a separate registered legal entity, the legal entity name and Companies House number should also be displayed here once confirmed.

Nova Bio Research supplies materials intended strictly for laboratory, analytical and in-vitro research purposes. Products are not intended for human or veterinary consumption, diagnosis or therapeutic use.

2. Scope of This Policy

This Privacy Policy applies to personal information processed through our website, WooCommerce store, customer accounts, checkout, contact channels, research-access controls, email communications, browser notifications, installed web-app functionality, product recommendations and related online services.

It does not govern websites or services operated independently by third parties that you may access through links from our website.

3. Personal Information We Collect

The information we collect depends on how you interact with Nova Bio Research.

When you create an account or place an order, we may collect your name, email address, telephone number, billing and delivery addresses, account username, customer identifier, order history, products ordered, quantities, prices, discounts, order number, payment status, shipping method, refund information, customer notes and invoice or tax information.

When you use the website, we may automatically receive technical information such as your IP address, browser type, operating system, device type, requested pages, referring page, session identifiers, approximate location derived from your IP address, dates and times of requests, security events and technical error information.

If you contact us, we may process your name, contact information, message, attachments, order number, account details and previous correspondence.

We do not ask customers to provide medical records or personal medical histories. Product browsing or purchasing activity may indicate an area of scientific interest, but Nova Bio Research does not intentionally use product activity to infer a person’s medical condition, diagnosis or health status.

Please do not send unnecessary medical or other special-category personal information through our contact channels.

4. How We Obtain Personal Information

Most information is collected directly from you when you create an account, complete checkout, submit a form, contact us, select notification preferences or otherwise interact with Nova.

Some information is generated automatically when you use our website, such as server logs, security information, cookie identifiers and device/browser information.

We may also receive limited information from service providers involved in a transaction, such as payment confirmation from a payment processor, delivery status from a courier or fraud-prevention information from a security provider.

5. Why We Use Personal Information and Our Lawful Bases

We process personal information only where we have an appropriate lawful basis.

Our legitimate interests include operating and protecting our business, preventing fraud, improving our website, understanding the effectiveness of communications and providing relevant customer support. We consider those interests against the rights and expectations of individuals before relying on them.

Where PECR requires consent, we do not use legitimate interests as a substitute for that consent.

6. WooCommerce and Customer Orders

Our website uses WordPress and WooCommerce to operate the online catalogue, customer accounts, shopping basket, checkout and order-management functions.

WooCommerce may process information required to maintain your basket, create your account, process checkout, manage your order, calculate applicable shipping or taxes, process discounts and display order history.

When you add something to your basket, the website may store information in cookies, session storage or other necessary browser technologies so your selections remain available as you browse.

Cookies that are genuinely necessary to provide something the user has requested, such as maintaining an online shopping basket, can fall within the strictly necessary exemption under PECR. ICO

7. Payment Information

Payment information is processed according to the payment method available and selected at checkout.

Where a third-party payment processor handles card payments, the processor handles the full card credentials required to complete the transaction. Nova Bio Research may receive information such as payment status, transaction reference, payment provider reference, payer details, amount, currency and fraud or risk information.

We do not need your full payment-card number or card security code for ordinary order administration when those details are processed directly by the payment provider.

Bank-transfer and cryptocurrency transactions may generate transaction references or identifiers that we retain with the relevant order where necessary for accounting, reconciliation, fraud prevention and customer support.

Payment providers may act as independent data controllers for some of their processing and may apply their own privacy policies.

8. Research-Access and Age Confirmation

Nova may require visitors to confirm that they are at least 18 years old and that materials will be used strictly for laboratory or in-vitro research purposes.

We may store the fact that the confirmation was completed together with limited browser or session information needed to prevent the access request appearing repeatedly.

Unless we explicitly request it for another lawful reason, this process does not require us to store your date of birth or identity documents.

9. Customer Accounts

When you create a Nova account, we use the information associated with that account to authenticate you, maintain order history, manage billing and delivery information, provide invoices, give access to available batch or order documents, manage notification preferences and provide account-specific support.

Passwords are handled using WordPress authentication and security mechanisms. Nova administrators should not have access to your password in readable plain text.

If you request account deletion, information that is not required for legal, accounting, fraud-prevention or transaction-record purposes may be deleted or anonymised.

10. Browser and Device Notifications

Nova Bio Research offers optional browser and device notifications.

A Nova account is not required for general public notifications. A guest device may subscribe to categories such as new research products, sales and offers, price changes, restocks and general Nova announcements.

If you enable notifications, we may process a browser push endpoint or subscription token, cryptographic information required by Web Push, browser and device information, notification preferences, subscription status, timestamps and information about notification delivery and interaction.

Where you are logged into a Nova customer account, a notification subscription may also be associated with your customer ID so we can provide account-specific communications such as order-status or purchase-related reminders.

Because browser subscriptions are device-specific, the same person may have separate subscriptions on a phone, tablet and computer.

You should avoid enabling account-specific notifications on a shared device if you do not want other users of that device to see them.

Browser or operating-system notification permission can be revoked at any time through your device settings.

11. Nova Web App and Home Screen Installation

Nova may offer the option to install or add the website to a device’s Home Screen or desktop as a web application.

The installation feature may use a web-app manifest, service worker, browser APIs, local storage or session storage to determine whether the installation message has been displayed, dismissed or whether Nova is already running as an installed web application.

On supported devices, the browser or operating system controls the final installation process.

Installing Nova does not itself grant permission for push notifications. Notification permission is requested separately.

12. Notification Preferences

Depending on the features available, customers may choose whether they want to receive communications relating to new products, sales and offers, price changes, restocks, order updates, reorder reminders, related-product suggestions or Nova news.

We record the selected preferences so that the notification service knows which communications the device should receive.

You may change these preferences through Nova’s notification controls or revoke browser notification permission through your device.

13. Sales, Price and Stock Notifications

Where you have enabled the relevant category, Nova may notify you when a new research product becomes available, an existing product returns to stock, a product becomes unavailable, a price changes, a sale begins or a scheduled sale approaches its end.

When a price changes, the notification system may use the previous and current price to identify the change and calculate the percentage difference.

Where a sale has a scheduled expiry time, Nova may send additional expiry reminders according to configured notification settings.

Removing a product from the catalogue does not automatically mean that a customer will receive a notification.

14. Abandoned Basket Reminders

If you have enabled the appropriate communications and begin but do not complete checkout, Nova may use basket information to remind you about the unfinished transaction.

This may involve products in the basket, basket value, the time of basket activity, customer or device identifiers, your email address where lawfully available and whether the basket later became an order.

Browser reminders or permitted email communications may be sent at configured intervals.

If checkout is completed, remaining reminders for that abandoned basket should stop.

You may disable promotional or basket-related notifications through your communication preferences.

15. Reorder Reminders

Where enabled, Nova may use previous purchase information to remind a customer about a research material they previously ordered.

The system may initially use standard reminder intervals and may later adjust the timing based on the intervals between the customer’s previous repeat orders.

For example, if purchasing history consistently indicates a particular repeat-order interval, the system may use that pattern to determine a more relevant reminder time.

This is automated product-engagement functionality. It is not medical profiling, dosing advice or a recommendation concerning personal use.

A new purchase may reset pending reminders associated with the previous purchase cycle.

16. Product Recommendations

Nova may use WooCommerce relationships, previous purchases, product categories, cross-sells, upsells and previous recommendation interactions to suggest related research products.

Recommendations are intended to assist catalogue navigation and product discovery.

They are not medical, diagnostic or therapeutic recommendations.

17. Email Communications and Notification Fallback

We may send transactional emails necessary to administer your account or order, including order confirmation, payment information, dispatch notifications, account-security messages and customer-service responses.

Where permitted by law and your communication preferences, Nova may also send promotional communications concerning new products, sales, restocks, related products or reorder reminders.

Nova’s notification system may use email as a fallback after a browser notification where the relevant feature is enabled and sending the email is permitted under applicable marketing rules.

Electronic direct marketing is subject to both data-protection requirements and PECR. Depending on the circumstances, consent may be required. ICO

Marketing emails should always provide an appropriate way to unsubscribe.

Unsubscribing from marketing does not prevent us from sending necessary transactional messages concerning an active account, payment, security issue or order.

18. Notification Click and Revenue Attribution

Nova may measure whether a communication resulted in a website visit or completed order.

When you click an eligible Nova notification, we may record information such as the notification identifier, notification type, click time and destination page.

If you subsequently complete an eligible order within Nova’s configured attribution window, that order may be attributed to the notification interaction. The system may also record the order number, order value, products purchased and attribution source.

Where Nova uses a seven-day attribution window, an eligible purchase completed within seven days of the relevant notification click may be associated with that notification. Where more than one eligible notification is clicked before an order, Nova may attribute the order to the most recent qualifying interaction.

This information is used to understand notification performance and the revenue generated through different communication types.

Attribution does not change the price you pay and is not used to make decisions that have legal or similarly significant effects on you.

19. Analytics

If you consent to analytics, Nova may use analytics services such as Google Analytics or analytics functionality made available through Google Site Kit.

Analytics information may include pages viewed, traffic source, browser and device information, approximate location, session behaviour and interactions with website functions.

Non-essential analytics technologies should not be activated before the required consent has been provided.

The ICO states that users must be told about non-essential cookies and similar technologies, why they are used, and normally must actively consent before they are placed or accessed. ICO

20. Cookies, Local Storage and Similar Technologies

Nova uses cookies and similar browser-storage technologies for several purposes.

Strictly necessary technologies may be used to maintain a shopping basket, authenticate a customer account, maintain checkout state, protect website security and provide other functionality specifically requested by the visitor.

Nova may also use local storage or session storage to remember things such as research-access verification, notification preferences, whether an installation message was dismissed and whether a particular prompt has already appeared during the current browsing session.

Optional analytics, advertising or other non-essential tracking technologies will be controlled through the applicable cookie-consent mechanism where required.

PECR applies not only to traditional cookies but also to other methods of storing or accessing information on a user’s device. ICO

Customers can also clear website data, cookies and local browser storage using their browser settings.

21. Customer Service and WhatsApp

If you contact Nova using email, telephone, a website contact form, WhatsApp or another communication channel, we may process the information you choose to provide in order to respond to your request.

If you choose to communicate using a third-party messaging service such as WhatsApp, that provider may independently process information according to its own terms and privacy policy.

22. Security and Fraud Prevention

We process limited account, transaction and technical information to protect Nova, its customers and its systems against fraud, unauthorised access, malicious activity, payment abuse, account compromise and other security risks.

Our security measures may include HTTPS encryption, access controls, administrator authentication, security monitoring, software updates, backups and restrictions on administrative access.

No website or online transmission method can guarantee absolute security.

If a personal-data breach occurs, we will assess it and take action required by applicable data-protection law.

23. Who We Share Personal Information With

Nova Bio Research does not sell personal information.

We may disclose information where necessary to organisations that help us provide the website and services, including hosting and infrastructure providers, WordPress and WooCommerce service providers, payment processors, banks, email-delivery providers, browser/Web Push infrastructure providers, analytics providers where consent has been provided, shipping and courier services, IT and cybersecurity providers, professional advisers and public authorities where disclosure is legally required.

We aim to provide each recipient only with information reasonably required for its role.

Where a provider acts as an independent controller, its own privacy policy also applies.

24. Shipping and Delivery Partners

Where an order needs to be delivered, relevant information may be provided to the courier or shipping service.

This may include the recipient’s name, delivery address, telephone number, email address where necessary for delivery updates and the relevant order or shipping reference.

25. International Data Transfers

Some service providers used to operate the website, payment systems, analytics, communications or infrastructure may process personal information outside the United Kingdom.

Where UK data-protection rules require safeguards for an international transfer, we will use an appropriate lawful transfer mechanism. Depending on the destination and provider, this may include UK adequacy regulations, the International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another permitted safeguard.

You may contact us if you would like further information about safeguards used for a particular international transfer.

26. How Long We Keep Personal Information

We do not keep personal information indefinitely simply because it was collected.

Order, invoice, accounting and payment records are retained for the period required to meet applicable tax, accounting, fraud-prevention and legal requirements, which may in some circumstances be several years.

Customer-account information may be retained while the account remains active and for an appropriate period afterwards where necessary for orders, security, disputes or legal obligations.

Push subscriptions are retained until permission is withdrawn, the subscription is deleted, it becomes technically invalid or we determine it is no longer required.

Abandoned-basket information is kept only for as long as reasonably necessary to restore the basket, operate permitted reminder functionality and maintain required records.

Notification attribution information is retained for a reasonable analytics and audit period and may subsequently be deleted or aggregated.

Security logs are kept for periods proportionate to their security purpose.

Support correspondence is retained for as long as reasonably required to respond to enquiries, resolve disputes and maintain appropriate records.

Analytics information is retained according to the settings applied to the relevant analytics service.

Where exact retention periods cannot reasonably be stated in advance, we determine retention based on the purpose of the information, legal requirements, sensitivity, risk, whether the information remains necessary and whether it can instead be deleted or anonymised.

27. Automated Processing and Profiling

Nova uses automated rules for functions including product recommendations, abandoned-basket identification, notification scheduling, reorder timing and notification attribution.

These systems may use information such as previous purchases, basket activity, product relationships and previous notification interactions.

Nova does not use these functions to make solely automated decisions about customers that produce legal or similarly significant effects.

Payment processors, fraud-prevention providers or other independent service providers may carry out their own automated assessments under their respective privacy policies.

28. Information You Need to Provide

Some information is necessary for us to enter into or perform a contract with you.

For example, if you place an order, we normally require enough information to identify the order, process or confirm payment and arrange delivery.

If required information is not provided, we may be unable to create an account, process a transaction, dispatch an order or provide the requested service.

Optional information, marketing permission and analytics consent are not required in order to make an ordinary purchase unless a particular feature specifically depends upon them.

29. Your Data Protection Rights

Depending on the circumstances and the lawful basis being used, UK data-protection law may give you rights to request access to your personal information, correct inaccurate or incomplete information, request erasure, request restriction of processing, object to certain processing, receive certain information in a portable format and withdraw consent where processing is based on consent.

These rights are not absolute and legal exemptions may apply.

The ICO confirms that privacy information should explain these rights, applicable lawful bases, retention periods, recipients and complaint rights. ICO

To exercise a data-protection right, contact:

contact@novabioresearch.co.uk

We may ask for information reasonably necessary to verify your identity before fulfilling a request.

30. Your Right to Object

You have the right to object at any time to the use of your personal information for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose.

You may also have the right to object to processing based on legitimate interests. Where that applies, we will consider your circumstances and whether we have compelling legitimate grounds to continue.

31. Withdrawing Consent and Marketing Preferences

Where processing is based on consent, you may withdraw that consent at any time.

You may manage marketing preferences by using an unsubscribe option in an email, changing available Nova notification preferences, disabling browser notifications, adjusting cookie preferences or contacting us directly.

Withdrawing consent does not make earlier processing unlawful.

32. Children and Under-18s

Nova Bio Research is intended for adults and is not intended for persons under 18.

Our website may ask visitors to confirm that they are at least 18 before accessing the research catalogue.

We do not knowingly intend to accept orders from children.

If we become aware that personal information from a person under 18 has been collected in circumstances where it should not have been, we will take appropriate steps to delete it unless there is a lawful reason that requires retention.

33. Third-Party Websites and Services

Nova may link to third-party websites, scientific resources, payment providers, testing laboratories, social networks or other services.

We are not responsible for how an independent third party uses information collected directly through its own website or service.

You should review the privacy information supplied by that organisation.

34. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, technologies, service providers or legal obligations change.

The latest version will be published on this page together with the date of the most recent update.

Where we intend to use personal information for a materially new purpose, we will update the relevant privacy information before beginning that processing where required.

ICO guidance specifically recommends regularly reviewing privacy notices and bringing new uses of personal information to people’s attention before beginning the new processing. ICO

35. Complaints

If you have concerns about how Nova Bio Research has handled your information, please contact us first so we can investigate.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.

36. Contact Nova Bio Research

For privacy enquiries, data-protection requests or questions about this Privacy Policy, contact:

Nova Bio Research
Correspondence address: Vapor Tech, Bolton, BL3 6AY, United Kingdom
Email: contact@novabioresearch.co.uk
Telephone: 07572 464515
Website: novabioresearch.co.uk