PRIVACY POLICY
Last updated: June 2026
Biozone Scientific Group Ltd ("Biozone Scientific", "Biozone", "we", "us", or "our") is committed to protecting the privacy, confidentiality, and security of personal data. This Privacy Policy explains how we collect, use, process, store, and protect personal data when you visit our website (https://biozonescientific.com), contact us, purchase our products or services, interact with our digital systems, or otherwise engage with our organisation.
This policy is designed to comply with and reflect best practices under:
• UK General Data Protection Regulation (UK GDPR)
• EU General Data Protection Regulation (EU GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• International data transfer frameworks
1. DATA CONTROLLER
The data controller responsible for your personal data is:
Biozone Scientific Group Ltd
Unit A5
Compass Business Park
Pacific Rd
Cardiff
CF24 5HL
United Kingdom
Email: [email protected]
2. REGULATORY AUTHORITIES
You have the right to lodge a complaint with a supervisory authority.
United Kingdom:
Information Commissioner’s Office (ICO)
European Union:
Office of the Data Protection Ombudsman (Finland)
We encourage you to contact us first so we can resolve concerns promptly.
3. TYPES OF PERSONAL DATA WE COLLECT
We may collect and process the following categories of personal data:
Identity Data
Name, job title, employer organisation.
Contact Data
Email address, telephone number, business address.
Technical Data
IP address, browser type, device information, operating system, time zone settings.
Usage Data
Website interaction information such as pages visited and navigation paths.
Transaction Data
Details relating to purchases, services, payments, and contracts.
Marketing Preferences
Preferences relating to communications and subscriptions.
4. DATA WE DO NOT INTENTIONALLY COLLECT
We do not intentionally collect special category data including:
• racial or ethnic origin
• religious or philosophical beliefs
• political opinions
• health information
• genetic or biometric data
• criminal conviction data
5. HOW PERSONAL DATA IS COLLECTED
We collect personal data through:
Direct interactions
Forms completed on the website, email communication, enquiries, purchases.
Automated technologies
Cookies, analytics tools, and server logs.
Embedded third-party content
Embedded third-party content
Our website may contain embedded video content hosted by Vimeo. When you visit a page containing embedded Vimeo content, your browser may establish a direct connection with Vimeo's servers in order to retrieve and display the video. As a result, Vimeo may receive certain technical information, including your IP address, browser type, device information and details of the page being viewed.
We configure Vimeo embeds using privacy-enhancing settings where available to minimise tracking and analytics collection.Third-party sources
Analytics platforms, professional networking platforms, hosting providers.
6. PURPOSES OF PROCESSING
We process personal data for the following purposes:
• providing products and services
• responding to enquiries
• operating and improving our website
• internal administration
• regulatory compliance
• fraud prevention
• marketing communications (where permitted)
7. LEGAL BASIS FOR PROCESSING
We process personal data based on:
• consent
• contractual necessity
• legitimate interests
• legal obligations
8. DATA SHARING
We may share personal data with trusted service providers including:
• IT infrastructure providers
• analytics providers
• professional advisers
• regulators and authorities when required by law
Where Vimeo-hosted video content is embedded on our website, certain technical information may be transmitted directly to Vimeo when the content is loaded. Vimeo acts as an independent data controller in relation to information it collects through its services. Further information can be found in Vimeo's Privacy Policy: https://vimeo.com/privacy
Where Vimeo-hosted video content is embedded on our website, certain technical information may be transmitted directly to Vimeo when the content is loaded. Vimeo acts as an independent data controller in relation to information it collects through its services. Further information can be found in Vimeo's Privacy Policy: https://vimeo.com/privacy
All service providers must process personal data securely and in compliance with data protection laws.
9. INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards such as:
• adequacy decisions
• Standard Contractual Clauses
• equivalent legal mechanisms
10. DATA SECURITY
We implement strong technical and organisational safeguards including:
• access controls
• encryption where appropriate
• secure hosting environments
• monitoring and auditing
11. DATA RETENTION
Personal data is retained only for as long as necessary for the purposes described in this policy and to meet legal, accounting, or regulatory obligations.
12. YOUR RIGHTS
Under applicable data protection laws, you may have the right to:
• access your personal data
• correct inaccurate data
• request deletion
• restrict processing
• object to processing
• request data portability
• withdraw consent
Requests may be submitted to [email protected]. We aim to respond within one month.
13. POLICY UPDATES
This policy may be updated periodically. Updated versions will be published on the website.