Privacy Policy
1. Who we are
Mix Labs UK Ltd is the “data controller” for personal data collected through this Website, meaning we decide how and why your personal data is processed.
If you have questions about this Privacy Policy or how we handle your information, contact us at info@mixlabs.co.uk or 01892 481101.
2. What we collect
We may collect the following categories of personal data:
| Category | Examples |
|---|---|
| Identity & contact | Name, email address, phone number, billing/delivery address. |
| Order & account details | Order contents, order history, customer notes, communications with support. |
| Payment-related data | Payment status, transaction references, fraud screening results. We do not store full card details on our systems. |
| Website usage | Pages viewed, device/browser type, IP address, approximate location, referral source, interaction data. |
| Age-compliance signals | Date of birth confirmation at entry (cookie-based), and any age-verification outcomes where applied. |
| Cookies & identifiers | Cookie IDs, session identifiers, analytics/advertising identifiers (where enabled). |
If you choose not to provide certain information (e.g., delivery address), we may be unable to fulfil your order.
3. How we use your data
We use your personal data for the following purposes:
- To process orders (payment processing, fulfilment, delivery updates, and customer service).
- To manage the Website (account creation, order history, customer support, troubleshooting).
- To enforce compliance (age restriction, fraud prevention, policy enforcement, legal obligations).
- To improve performance (analytics, diagnostics, and Website optimisation).
- To send service messages (order confirmations, dispatch updates, support responses).
- To send marketing where permitted (see Section 5).
4. Legal bases
Under UK GDPR, we rely on one or more of the following legal bases to process personal data:
- Contract: to process and deliver your order, manage payments, and provide customer service.
- Legal obligation: to comply with applicable laws and regulations (e.g., tax, accounting, and age-restricted sales compliance).
- Legitimate interests: to operate and protect our business (fraud prevention, security, service improvement, dispute handling), provided these interests are not overridden by your rights.
- Consent: for certain cookies/analytics and for marketing communications where required.
5. Marketing
We may send marketing communications by email/SMS where you have opted in or where otherwise permitted by law.
You can opt out at any time by using the unsubscribe link in emails, adjusting your account preferences (where available), or contacting us at info@mixlabs.co.uk.
Even if you opt out of marketing, we may still send non-marketing messages such as order confirmations and delivery updates.
6. Cookies & analytics
We use cookies and similar technologies to make the Website work, remember preferences, support age-gating, and (where enabled) analyse Website usage and measure marketing performance.
6.1 Essential cookies
These are required for the Website to function (e.g., shopping cart, checkout flow, security, and session management).
6.2 Age-gate cookie
When you confirm you are 18+ at entry, we may set a cookie so you are not repeatedly prompted within a period of time (unless cookies are cleared).
6.3 Analytics & advertising cookies
Where enabled, these help us understand Website performance and measure the effectiveness of marketing. You can typically control these via our cookie banner/preferences and via your browser settings.
Note: exact cookies may vary depending on Shopify, theme configuration, and apps enabled on the Website.
7. Sharing your data
We share personal data only where necessary to operate the Website, fulfil orders, comply with law, or protect our business. This includes sharing with:
| Recipient type | Examples / purpose |
|---|---|
| E-commerce platform | Shopify hosts our online store and processes Website/store data on our behalf. |
| Payment processors | Worldpay and related payment services to process transactions, prevent fraud, and handle disputes/chargebacks. |
| Delivery & fulfilment | Royal Mail and related logistics services for dispatch and tracking. |
| Customer support tools | Email/telephony providers and support tooling used to respond to enquiries. |
| Analytics/marketing tools | Analytics and advertising platforms where enabled (e.g., performance measurement and conversion tracking). |
| Professional advisers | Accountants, insurers, legal advisers where required. |
| Legal & compliance | Regulators, law enforcement, or other parties where required by law or to protect rights. |
Where we use service providers (“processors”), we expect them to handle personal data securely and only for the purposes we specify.
8. International transfers
Some of our service providers (including Shopify and certain analytics/marketing tools) may process personal data outside the UK. Where this occurs, we take steps designed to ensure appropriate safeguards are in place (for example, contractual protections such as standard contractual clauses and/or other recognised transfer mechanisms).
9. Data retention
We keep personal data only for as long as necessary for the purposes described in this policy, including to:
- fulfil orders and provide customer support,
- maintain business records,
- comply with legal, tax, and accounting requirements, and
- handle disputes, chargebacks, and fraud prevention.
Retention periods vary depending on the type of data and the reason we hold it. When data is no longer needed, we will delete or anonymise it where appropriate.
10. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. No system is 100% secure, but we work to maintain safeguards and restrict access to those who need it.
11. Your rights
Under UK GDPR you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (in certain circumstances)
- Restrict processing (in certain circumstances)
- Object to processing based on legitimate interests
- Data portability (in certain circumstances)
- Withdraw consent where processing is based on consent
To exercise your rights, contact info@mixlabs.co.uk. We may need to verify your identity before responding.
12. Children & age-restricted products
This Website sells age-restricted nicotine products and is strictly for customers aged 18+. We do not knowingly market to or intend to collect personal data from individuals under 18.
If you believe a person under 18 has provided us with personal data, please contact us and we will take appropriate steps.
13. Contact & complaints
For privacy-related enquiries, contact:
- Email: info@mixlabs.co.uk
- Telephone: 01892 481101
- Post: Mix Labs UK Ltd, Goshen Farm, Brenchley Road, Matfield, TN12 7DT
If you are not satisfied with our response, you can complain to the UK Information Commissioner’s Office (ICO).
14. Changes to this policy
We may update this Privacy Policy from time to time. The version posted on the Website is the current version. Material changes will be reflected by updating the “Last updated” date above.