Last updated: 29 June 2026
This Privacy Policy explains how DNATECH LTD (“DNA-Tech”, “we”, “us”, “our”) collects, uses and protects your personal data when you visit dna-tech.uk (the “Website”) or place an order. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who is responsible for your data (the controller)
- Controller: DNATECH LTD, company number 17265633
- Registered office: 66 Paul Street, London, England, EC2A 4NA
- Data protection contact: sales@dna-tech.uk
2. The data we collect
- Identity & contact data: name, billing/delivery address, email address, telephone number.
- Account data: username and password, order history, wishlist.
- Order & transaction data: products purchased, order value, and records of payments (we do not store full card details — these are handled by our payment providers).
- Communications data: messages you send us via contact forms, email or other channels.
- Technical & usage data: IP address, browser type, device information, and how you use the Website, collected via cookies and similar technologies — see our Cookie Policy.
- Marketing data: your preferences in receiving marketing from us.
3. How we collect your data
We collect data directly from you (when you create an account, place an order, or contact us), automatically (through cookies when you use the Website), and from third parties such as our payment providers (for example, confirmation that a payment succeeded).
4. How and why we use your data (lawful bases)
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your orders, taking payment, and providing customer support | Performance of a contract |
| Managing your account | Performance of a contract |
| Keeping records for accounting, tax and legal compliance | Legal obligation |
| Preventing fraud and securing the Website | Legitimate interests |
| Improving our Website, products and service | Legitimate interests |
| Sending marketing communications (where you have opted in) | Consent |
| Responding to your enquiries | Legitimate interests |
Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, we have balanced those interests against your rights.
5. Who we share your data with
We do not sell your personal data. We share it only with trusted parties who help us run our business, including:
- Payment providers — Fena, our payment provider, to process payments securely.
- Delivery and fulfilment partners — couriers and postal services, to deliver your order.
- Website hosting and IT providers — our hosting provider (SiteGround) and related service providers.
- Analytics providers — Google (including Google Analytics), to understand how the Website is used.
- Advertising and social media — Meta (Facebook), where used, to measure and deliver advertising.
- Email/marketing providers — Mailchimp, to send communications you have opted in to.
- Professional advisers and authorities — accountants, lawyers, and regulators or law enforcement where we are legally required to disclose.
6. International transfers
Some of our providers may process data outside the UK. Where they do, we ensure appropriate safeguards are in place (such as UK adequacy regulations or the International Data Transfer Agreement) so your data remains protected.
7. How long we keep your data
We keep personal data only as long as necessary for the purposes set out above. Order and transaction records are generally kept for at least 6 years to meet tax and accounting obligations. Account data is kept while your account is active. Marketing data is kept until you unsubscribe.
8. How we protect your data
We use appropriate technical and organisational measures — including encryption in transit (SSL), access controls and secure hosting — to protect your data. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.
9. Your rights
Under UK GDPR you have the right to:
- be informed about how your data is used;
- access a copy of your data;
- have inaccurate data corrected;
- have your data erased (in certain circumstances);
- restrict or object to processing;
- data portability;
- withdraw consent at any time; and
- not be subject to solely automated decision-making.
To exercise any of these rights, contact us at sales@dna-tech.uk. We will respond within one month.
10. Cookies
The Website uses cookies and similar technologies. Please see our Cookie Policy for full details and how to manage them.
11. Marketing
We will only send you marketing communications if you have opted in. You can unsubscribe at any time using the link in our emails or by contacting us.
12. Children
The Website and our products are not intended for anyone under 18. We do not knowingly collect data from children.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date at the top shows when it was last changed.
14. Complaints
If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113