How we use personal information

1. Who is responsible for your information?

Amino Works Limited, company number 17362177, is the controller of personal information collected through AminoWorks. Its registered office is 6 - 8 Great Eastern Street, London, England, EC2A 3NT. Our data-protection contact is sales@aminoworks.co.uk.

2. Information we may collect

• Identity and contact details, such as name, email address, telephone number and delivery address.
• Order, payment-status, refund, delivery and transaction records. Full payment credentials should be handled by the selected payment provider rather than stored by AminoWorks.
• Enquiry, complaint and customer-support correspondence.
• Research-use declarations and records needed to assess and document lawful supply.
• Technical and usage information, such as IP address, device, browser, security events, cookie choices and website activity.
• Marketing preferences where a person actively chooses to receive marketing.

3. Why we use information and our lawful bases

• To respond to an enquiry, accept and fulfil an order, deliver goods and manage payment, cancellation or refunds: taking steps at your request and performance of a contract.
• To keep tax, accounting, product-safety and compliance records: compliance with legal obligations.
• To prevent misuse, protect the website, resolve disputes and improve business operations: legitimate interests, balanced against individual rights.
• To use non-essential analytics or send electronic marketing where consent is required: consent, which can be withdrawn.

4. Cookies and analytics

Essential storage may be used to operate security, the basket, checkout and privacy preferences. Optional Vercel Analytics runs only when it is configured and the visitor accepts optional cookies. A rejected choice keeps optional analytics off.

5. Who may receive information?

Information may be shared only where needed with providers supporting website hosting, database and authentication, payment, transactional email, delivery, analytics, professional advice and legal or regulatory obligations. The current technical stack includes Vercel, Supabase and Resend where configured. Royal Mail and Viva.com may receive information where their delivery or payment services are enabled and required for an order.

Information may also be disclosed where required by law or to establish, exercise or defend legal claims. We do not sell personal information.

6. International transfers

Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, Amino Works Limited will use an approved transfer mechanism and any necessary supplementary measures.

7. How long information is kept

Personal information is kept only for as long as necessary for the purpose collected, including legal, accounting, safety, dispute and fraud-prevention requirements. Retention periods take account of the type and sensitivity of the information, risk of harm, operational need and applicable law.

8. Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed, access your information, correct it, erase it, restrict or object to processing, obtain portable data and challenge certain automated decisions. Where processing relies on consent, consent can be withdrawn without affecting earlier lawful processing.

Email sales@aminoworks.co.uk to make a request. We may need to verify identity before responding.

9. Complaints

To make a data-protection complaint, email sales@aminoworks.co.uk with “Data protection complaint” in the subject line. We will acknowledge the complaint within 30 days, investigate without undue delay, keep you informed where appropriate and tell you the outcome.

You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current guidance.

10. Changes to this notice

This notice will be updated when service providers or data practices materially change. The latest version will remain available on this page.