Privacy Policy
Last updated: Aug 30 2026
2.1 Who we are
GBS is responsible for the personal data described in this Privacy Policy. Public-facing information should identify GBS using only the minimum legally required trader/controller information. Contact email: info@geneticbiosystems.com.
2.2 Personal data we may collect
- Name, email, telephone number, billing/delivery address and optional company/organisation information.
- Order, transaction, payment-status and delivery information.
- Account and saved-preference information.
- Research-purpose declaration, declaration acceptance, Terms version and acceptance date/time.
- Verification codes entered, product/batch matches, first/repeat verification history and security/technical logs.
- Stock-alert requests and notification status.
- Marketing consent, source/date/time, campaign engagement and unsubscribe preferences.
- IP address, device/browser data, security logs and cookie/analytics information where permitted.
- Customer-service, delivery, damage, return, complaint and verification correspondence.
2.3 Why we use personal data
|
Purpose |
Examples |
Working lawful basis |
|
Orders and fulfilment |
Checkout, delivery, refunds, customer support |
Contract; legal obligation where applicable |
|
Accounts |
Account access and order history |
Contract and/or legitimate interests |
|
Research-use/compliance records |
Declarations, suspicious-order review, compliance evidence |
Legitimate interests; legal obligation where applicable |
|
Verification platform |
Code validation, first/repeat verification, security investigation |
Legitimate interests in traceability, security and service delivery |
|
Stock alerts |
Requested availability notification |
Requested service and/or legitimate interests |
|
Marketing |
Newsletter, product updates and offers |
Consent where required; other lawful basis only where applicable |
|
Security/fraud prevention |
Abuse prevention and order/payment review |
Legitimate interests; legal obligation where applicable |
|
Analytics/non-essential cookies |
Site measurement and improvement |
Consent where required |
|
Legal/regulatory matters |
Accounting, tax, claims, disputes, regulator enquiries |
Legal obligation and/or legitimate interests |
2.4 Marketing and stock alerts
Requesting a stock alert does not automatically subscribe the requester to general marketing. Marketing preferences are recorded separately. You can unsubscribe or withdraw marketing consent at any time.
2.5 Cookies
Cookies and similar technologies are used as described in the Cookie Policy. Non-essential cookies will be controlled through the site consent mechanism where consent is required.
2.6 Sharing data
GBS may share data with payment providers, couriers, hosting/WordPress/WooCommerce providers, security/IT providers, email/marketing or stock-notification providers, professional advisers, verification-related service providers and public authorities where necessary and lawful. GBS does not sell personal data to advertisers.
2.7 International transfers
Where a service provider processes personal data outside the UK, GBS will use an appropriate lawful transfer mechanism and safeguards where required.
2.8 Retention
GBS keeps personal data only as long as reasonably necessary for the purpose collected and for legal, tax, accounting, fraud-prevention, verification, dispute and regulatory requirements. Final retention periods remain TBC before launch.
2.9 Your rights
Depending on the circumstances, data-protection law may give you rights of access, correction, erasure, restriction, objection, portability and withdrawal of consent. Contact info@geneticbiosystems.com. You may also complain to the ICO.
2.10 Security
GBS uses appropriate technical and organisational measures designed to protect personal data. Access should be limited to those who need it.
2.11 Children
The GBS website and products are not directed at children and GBS does not knowingly seek to collect children’s personal data for product purchasing.
2.12 Changes
The Privacy Policy may be updated when the website or processing activities change. The current version and date will be published on the website.