Customer information
Privacy notice
We use your details to deliver your order and look after you as a customer. This notice explains what we collect, why, who handles it for us, how long we keep it and how to use your rights.
Who we are
Cellular Science is a trading name of Sandbanks Premium Management Limited (full company details in our legal notice). We are the controller of the personal data described in this notice.
Email: care@cellularscience.co.uk, or send us a message. A real person reads every message.
What we collect
- Contact details: your name, email address, delivery and billing addresses and phone number, and your title and date of birth if you choose to give them.
- Order details: the products you buy, prices and offers applied, payment status, delivery and tracking details, and any returns or refunds.
- Account details: if you create an account, your sign-in email and your password, which we store only in encrypted (hashed) form.
- Messages: what you send us through the contact form or by email, and our replies.
- Reviews: if you review a product, your review and the name you publish it under.
- Marketing choices: whether you have subscribed to our product news.
- Technical data: your IP address, browser type and the pages requested, recorded in our web server logs to keep the site secure and working.
Card details are entered directly with our payment provider, Stripe. We never see or store your card number.
How we use it
- To take, deliver and support your order: taking payment, packing and posting your parcel, sending order and tracking emails, and handling returns and refunds. Lawful basis: our contract with you.
- To run your account: sign-in, order history and saved addresses. Lawful basis: our contract with you.
- To answer your messages. Lawful basis: our legitimate interest in looking after our customers, or our contract with you where your message concerns an order.
- To keep the records the law requires, such as accounting and tax records. Lawful basis: legal obligation.
- To keep the shop secure, prevent fraud and fix faults. Lawful basis: our legitimate interests.
- To send product news, only if you subscribe. Every email lets you unsubscribe. Lawful basis: your consent.
We never sell your personal data or pass it to other companies for their own marketing.
Who handles it for us
A small number of trusted providers process personal data on our behalf, only to provide their service to us:
- Stripe: card payments and payment fraud prevention.
- Sendcloud: preparing shipping labels and collection-point choices, using the name, delivery address and contact details for your parcel.
- Royal Mail, DPD and InPost: delivering your parcel to your door or to a collection point, and providing tracking.
- Hostinger: hosting this website, its database and our email.
We also share information where the law requires it, for example with HM Revenue & Customs, and with our professional advisers, such as our accountant.
Where a provider processes personal data outside the UK, the transfer is protected by the safeguards UK data protection law requires, such as UK adequacy regulations or the International Data Transfer Agreement. We update this notice before we add any new provider that handles your personal data.
Cookies
This shop uses only the cookies it needs to work. We use no analytics, advertising or tracking cookies, so there is no cookie banner to dismiss.
| Cookie | What it does | How long it lasts |
|---|---|---|
| PrestaShop-… | Keeps your basket, sign-in and preferences while you shop | 20 days |
| PHPSESSID | Links your page requests together so the shop works securely | Until you clear your cookies |
| __stripe_mid, __stripe_sid | Set by Stripe on the payment step to protect card payments from fraud | 1 year and 30 minutes |
These cookies are strictly necessary for the shop and for safe payment, so they do not need your consent under UK law. You can block or delete cookies in your browser settings, but your basket and checkout need them to work.
How long we keep it
- Orders and invoices: six years, as UK tax and company law requires.
- Your account: until you ask us to close it. Your order records are then kept only for the six-year period above.
- Messages: as long as we need them to resolve your query, or with the order record when they concern an order.
- Product news: until you unsubscribe.
- Server logs: for a limited period, for security.
Keeping it safe
Every page is served over an encrypted HTTPS connection, passwords are stored only in hashed form, and access to customer data is limited to the people who need it to serve you.
Your rights
Under UK data protection law you have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use it, and object to direct marketing at any time;
- receive your data in a portable format; and
- withdraw your consent at any time where we rely on it.
Send us a message and we will act on your request free of charge within one month. If you have an account, you can also download your personal data or ask us to delete it from your My account page.
Complaints
If you are unhappy with how we have handled your data, tell us first and we will put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We update this page whenever our use of personal data changes. The date below shows the current version.
See also our terms and conditions and legal notice.
Last updated: 20 October 2026