Privacy Policy
Last updated: 15 August 2026
1. Who we are
LGJ BioLabs is an independent research and development organisation based in South Wales, United Kingdom. We supply research materials strictly for laboratory research purposes only.
Data Controller: Luke Gavin Jones trading as LGJ BioLabs
Email: lukejones@lgjbiotech.com
Website: lgj.bio / lgj-ess.pages.dev
2. What personal data we collect
We may collect and process the following categories of personal data:
- Identity & contact data — name, email address, postal address, telephone number
- Order & transaction data — products requested, quantities, payment references, shipping details
- Technical data — IP address, browser type, device information, pages visited (via standard web server logs and any analytics tools we use)
- Communication data — the content of emails, enquiry forms, and messages you send to us
We do not intentionally collect special category (sensitive) data.
3. How we collect your data
- When you submit an enquiry or RFQ form on our website
- When you email us or contact us by any other method
- When you place an order or make a payment
- Automatically through standard website logs and cookies (see section 8)
- From payment processors (e.g. Stripe) when you complete a transaction
4. Why we use your data (legal bases)
Under UK GDPR we process personal data only when we have a lawful basis. The main bases we rely on are:
- Contract — to process and fulfil orders and enquiries you make
- Legitimate interests — to operate and improve our website, prevent fraud, and communicate with you about your orders or enquiries
- Consent — where you have given clear consent (for example for marketing emails, if we ever send them)
- Legal obligation — where we must keep records for tax, accounting or regulatory reasons
5. How we use your data
We use personal data for the following purposes only:
- Responding to research enquiries and providing quotations
- Processing and fulfilling orders
- Communicating with you about your order or enquiry
- Improving our website and services
- Preventing fraud and maintaining security
- Complying with legal and accounting obligations
We do not sell your personal data to third parties.
6. Who we share data with
We only share personal data when necessary:
- Payment processors (e.g. Stripe) — to process payments securely
- Shipping / courier services — to deliver orders
- Professional advisers (accountants, legal) — where required
- Law enforcement or regulators — if legally required to do so
All third parties are required to respect the security of your data and to treat it in accordance with the law.
7. International transfers
Some of our suppliers or service providers may be located outside the UK. Where this occurs we ensure appropriate safeguards are in place (such as standard contractual clauses or adequacy decisions) so that your data remains protected to UK standards.
8. Cookies and similar technologies
Our website may use essential cookies required for the site to function. We may also use basic analytics to understand how the site is used. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.
9. Data retention
We keep personal data only for as long as necessary for the purposes set out in this policy, including any legal, accounting or reporting requirements. Order and transaction records are typically retained for up to 6 years to meet UK tax and accounting obligations. Enquiry data that does not result in an order is normally deleted or anonymised within 24 months.
10. Your rights under UK GDPR
You have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to have inaccurate data corrected
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please email us at lukejones@lgjbiotech.com. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
11. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration. Access to personal data is limited to those who need it to perform their duties.
12. Children’s data
Our website and services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it.
13. Research materials disclaimer
All products supplied by LGJ BioLabs are intended strictly for laboratory research purposes only. They are not medicines, not for human or animal consumption, and not for diagnostic or therapeutic use. This Privacy Policy applies to the personal data we process in the course of operating our research supply business.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will be revised when changes are made. Continued use of the website after changes constitutes acceptance of the updated policy.
15. Contact us
For any questions about this Privacy Policy or our data practices, please contact:
Luke Gavin Jones
LGJ BioLabs
Email: lukejones@lgjbiotech.com