Last updated: 2 November 2026
This policy explains what personal data RedKit Labs collects when you use redkitlabs.com, why we collect it, and your rights over it.
Who we are
The data controller is [legal: to confirm], registered in [country: to confirm] under number [reg: to confirm], at [address: to confirm]. For any privacy question or request, email privacy@redkitlabs.com.
What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Name, email, phone, billing and delivery address | To process, ship and support your order, and to send order and shipping emails | Performing our contract with you |
| Order history, invoices and payment records | Accounting and tax records we are required to keep | Legal obligation |
| Account login details, if you create an account | To let you see orders and save addresses | Performing our contract with you |
| Organisation details and verification documents | To verify buyers of restricted products and to screen orders against sanctions lists | Legal obligation and our legitimate interest in preventing misuse |
| Messages you send us | To answer your question or request | Our legitimate interest in providing support |
| Product reviews you post | To show other customers your review, with your first name | Your consent, which you can withdraw by asking us to remove the review |
| Newsletter email address, if you sign up | To send product news | Your consent. Every email has an unsubscribe link |
We do not collect card numbers. Payments are handled by our payment provider, which receives your card or account details directly.
Cookies
The site uses cookies that are needed for it to work: keeping your cart, keeping you logged in, remembering the currency you chose, and protecting forms against abuse. These do not need consent.
Product pages may include videos from YouTube. We use YouTube’s privacy-enhanced mode, which does not set cookies until you play a video. Pages load fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google.
We do not use advertising or tracking cookies. If we add analytics in future, we will ask for your consent first and update this policy.
Who we share data with
- Payment providers, to take payment.
- Shipping carriers, to deliver your order: your name, address, phone and email.
- Customs authorities, for international shipments, as the law requires.
- Our hosting and email providers, who process data for us under contract.
- Authorities, when the law requires us to, for example in response to a court order.
We do not sell personal data.
International transfers
Some of our providers process data outside your country. Where data leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision or the European Commission’s standard contractual clauses.
How long we keep data
Order and invoice records are kept for [retention: to confirm]. Account data is kept until you delete your account. Support messages are kept for 2 years after the last message. Verification records for restricted products are kept for as long as export rules require.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to another company. You can object to uses based on our legitimate interest, and withdraw consent at any time. Email privacy@redkitlabs.com. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the data protection authority in your country.
Changes
If we change this policy, we update the date at the top of this page. If the change is significant, we tell account holders by email.