Privacy policy

Who controls your data

Voryxion Labs is a trading name of Marcus Davis, sole trader.

• Data controller: Marcus Davis, trading as Voryxion Labs
• Legal entity: Marcus Davis
• Registered address: 51 Cobden Avenue Baffins Portsmouth Hampshire PO3 6NB United Kingdom
• Privacy contact: support@voryxionlabs.co.uk

Personal data we collect

• Account data: email address and any name you add to your profile.
• Order data: delivery name, address, town or city, county, postcode, country, chosen delivery method and the items ordered.
• Newsletter data: email address, where you have chosen to subscribe.
• Support data: anything you send us when you get in touch about an order or a policy.
• Technical data created by hosting and security logs, such as IP address and browser information.

• Payment data: the payment method you chose, the unique payment reference generated for your order, and whatever you tell us to help us match your payment (for example a bank reference or a Solana transaction signature).
• Consent data: your cookie choice, stored in your browser so we do not ask again.

There is no card checkout on this site, so card numbers are never entered here, never reach us and are never stored. Bank transfers are made through your own bank, and SOL payments are made from your own wallet; we only see what your bank statement or the public blockchain record shows us.

You can order as a guest without creating an account. Guest orders are looked up using a private link containing a random token, so no one can browse other people's orders.

Purposes and lawful bases

• Creating and running your account and processing orders — performance of a contract.
• Responding to support, returns and cancellation requests — performance of a contract and our legitimate interests in running the business.
• Keeping accounting and transaction records — compliance with a legal obligation.
• Sending newsletter updates — consent, withdrawable at any time.
• Matching, confirming and, where necessary, refunding payments made by bank transfer or SOL — performance of a contract.
• Storing your cookie choice — compliance with a legal obligation and your consent for anything non-essential.
• Keeping the site secure and preventing fraud or abuse — our legitimate interests.

Processors and recipients

Website hosting and application platform (Lovable); database, account authentication and order storage (Supabase); transactional order emails (Lovable managed email service); delivery carrier (Royal Mail) for the delivery name and address on your parcel; publicly available market-rate sources (CoinGecko and Kraken) used only to price SOL payments, which receive no personal data. Bank transfers are handled by your own bank and by our business bank; SOL payments are made from your own wallet to our published address and are recorded on the public Solana blockchain. Some providers process data outside the UK; where that happens it is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

We do not sell personal data, and we do not share it for advertising or profiling. Data may also be disclosed where we are legally required to do so.

Retention

Order and transaction records are kept for six years after the end of the relevant tax year, as required for UK tax and accounting purposes. Account details are kept while your account is open and deleted within 30 days of you asking us to close it, except where they form part of an order record. Support correspondence is kept for up to two years. Newsletter subscriptions are kept until you unsubscribe, plus a suppression record so we do not email you again.

Cookies, storage and analytics

Only strictly necessary browser storage is in use. Specifically: your basket contents, the sign-in session token that keeps you logged in, and a record of the cookie choice you make on the consent banner. These are needed for the store to work and cannot be switched off while you use it.

No analytics provider is installed on this site and no measurement data is collected. No marketing, advertising, profiling or cross-site tracking technologies are used, and none are planned as part of ordering from us. If analytics is ever added, it will stay switched off until you actively accept it, and this page will be updated to name the provider before it runs.

You can change or withdraw your choice at any time — open cookie settings or use the “Cookie settings” link in the footer. Refusing non-essential cookies is as easy as accepting them, and refusing does not limit your ability to shop.

No analytics, advertising or tracking cookies are used. The site uses only strictly necessary browser storage: your basket, your sign-in session token and your recorded cookie choice.

Your rights

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Ask for erasure, where the data is no longer needed.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent for marketing or non-essential cookies at any time.

To exercise any of these, contact support@voryxionlabs.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how your data has been handled.