Privacy policy

 

This policy explains how AND Healthcare, trading as Base18 ("we", "us"), of Unit 23a Halliwell Business Park, Bolton, BL1 8DL, United Kingdom, handles your personal data when you use this website. We are the data controller. Contact us at hello@base18labs.com.

What we collect. When you place an order: your name, email, delivery address, phone number and order details. Payment details are processed securely by our payment providers (Shopify Payments, PayPal) — we never see or store your card numbers. When you browse: technical data such as IP address, device and browsing behaviour, via cookies. When you sign up to our emails: your email address and marketing preferences.

Why we collect it. To fulfil and deliver your orders and handle returns (performance of a contract); to respond when you contact us (legitimate interest); to send marketing emails if you've opted in (consent — unsubscribe any time via the link in any email); to prevent fraud and meet legal obligations such as tax record-keeping; and to understand how the site is used so we can improve it (legitimate interest).

Who we share it with. Shopify Inc., which hosts our store and processes orders; delivery carriers, to get your order to you; payment providers, to take payment; and email and analytics providers we use to run the business. We never sell your personal data. Some providers may process data outside the UK — where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.

Cookies. We use essential cookies to make the site work (bag, checkout) and, with your consent, analytics and marketing cookies. You can manage these via the cookie banner or "Cookie preferences" in the footer.

How long we keep it. Order records are kept for 6 years to meet UK tax and accounting requirements. Marketing data is kept until you unsubscribe. Analytics data is retained per our providers' standard periods.

Your rights. Under UK GDPR you can ask us to access, correct, delete, restrict or port your personal data, and you can object to processing or withdraw consent at any time — email hello@base18labs.com. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.