Privacy Policy

Last updated: 1st January 2026
Website: https://www.theorangescientist.co.uk/

1. Introduction

Astflick Group Ltd trading as The Orange Scientist (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you use our website www.theorangescientist.co.uk (“Our Site”), interact with us, or purchase our products and services.

This policy applies to all users, including but not limited to:

Business-to-Business (B2B) customers

Universities, laboratories, NHS trusts and public bodies

Sole traders and partnerships

Consumers and individual website visitors

There is no exemption for business users under UK data protection law. All users are protected equally.

2. Data Controller

For the purposes of UK data protection law, the data controller is:

Astflick Group Ltd
Trading as: The Orange Scientist

3. Definitions

For the purposes of this Privacy Policy:

“Personal data” means any information relating to an identified or identifiable natural person, as defined by the UK GDPR.

“Processing” means any operation performed on personal data.

“Account” means an account created to access features of Our Site.

“Cookies” means small text files placed on your device. See our Cookie Policy for full details.

4. What This Policy Covers

This Privacy Policy applies only to your use of Our Site and your interactions with us.

Our Site may contain links to third-party websites. We have no control over those websites and are not responsible for their privacy practices. You should review their policies before providing personal data.

5. Your Rights Under UK GDPR

You have the following rights:

Right to be informed about how we use your data

Right of access to the personal data we hold about you

Right to rectification of inaccurate or incomplete data

Right to erasure (“right to be forgotten”)

Right to restrict processing

Right to data portability

Right to object to processing (including marketing)

Rights relating to automated decision-making and profiling

To exercise your rights, contact us using the details in section 15.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

6. What Data We Collect

Depending on how you interact with us, we may collect:

6.1 Personal Data

Name

Job title

Business / organisation name

Email address

Telephone number

Billing and delivery addresses

Order and transaction details

6.2 Technical & Usage Data

IP address

Browser type and version

Operating system

Device identifiers

Website usage data

Referring URLs

7. Lawful Bases for Processing

We only process personal data where we have a lawful basis under UK GDPR, including:

Contractual necessity – to supply goods or services

Legal obligation – accounting, tax, regulatory compliance

Legitimate interests – customer service, fraud prevention, site improvement

Consent – marketing communications and non-essential cookies

Where consent is relied upon, it may be withdrawn at any time.

8. How We Use Your Data

We may use your personal data to:

Create and manage accounts

Process orders and payments

Deliver goods and services

Communicate regarding orders and enquiries

Provide customer support

Prevent fraud and ensure security

Improve our website and services

Send marketing communications (where permitted)

Request feedback and reviews

We do not sell personal data.

9. Marketing Communications

We may send marketing communications:

To individuals who have opted in, or

To B2B contacts where permitted under PECR (with opt-out provided)

You may opt out at any time by:

Using unsubscribe links

Managing account preferences

Contacting us directly

10. Data Retention

We retain personal data only for as long as necessary, including:

Orders & financial records: 6 years (legal requirement)

Pharmaceutical / regulated products: up to 10 years

Marketing data: until consent is withdrawn

Customer accounts: until closure or inactivity

Data is securely deleted or anonymised when no longer required.

11. Data Storage & Security

We implement appropriate technical and organisational measures including:

Firewalls and intrusion detection

Secure servers and encryption

PCI-DSS compliant payment processing

Regular software updates

Staff GDPR training

Personal data may be stored within the UK or transferred internationally where necessary, only using lawful safeguards such as UK adequacy regulations or approved contractual clauses.

12. Sharing Your Data

We may share data with trusted third parties where necessary, including:

12.1 Service Providers

Couriers (Royal Mail, DPD, FedEx)

Payment processors (PayPal, Braintree, Amazon Pay)

Fraud prevention (Signifyd)

Customer communications & tracking

Review platforms (Trustpilot)

Marketing platforms (opt-in only)

All processors are required to comply with UK GDPR.

12.2 Legal & Regulatory

We may disclose data where legally required, including court orders or regulatory obligations.

13. Business Transfers

If our business or assets are sold or transferred, personal data may be transferred as part of that transaction. Any new owner will be bound by this Privacy Policy or an equivalent.

14. Cookies

Our Site uses cookies and similar technologies. Full details are provided in our Cookie Policy, including how to manage or withdraw consent.

15. Contact Us

For privacy-related enquiries or to exercise your rights:

Astflick Group Ltd t/a The Orange Scientist
Email: hello@theorangescientist.co.uk

16. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or operational changes. The updated version will always be published on Our Site with the revised date.