Privacy Policy

PGNA Labs ("we", "us", "our") operates the website at pgnalabs.co.uk. We are the data controller responsible for your personal information collected through this website.

For any privacy-related enquiries, please contact us at [email protected].

We collect the following categories of personal data when you use our website:

• Account information: Name, email address, and password (hashed) when you create an account.
• Order information: Shipping name and address, order history, and product preferences.
• Communication data: Messages you send to us via email or contact forms.
• Usage data: Pages visited, time on site, and browser/device information collected via analytics tools.

We do not collect or store any payment information. All payment processing is handled entirely by Fena's secure open banking infrastructure.

We use your personal data for the following purposes:

• To process and fulfil your orders, including sending dispatch and delivery notifications.
• To manage your account and provide customer support.
• To send transactional emails related to your orders (e.g. order confirmation, tracking updates).
• To comply with our legal obligations.
• To improve our website and product offerings based on aggregated usage data.

We will not use your personal data for unsolicited marketing without your explicit consent.

All payments on PGNA Labs are processed through Fena, an FCA-regulated open banking payment provider. When you make a payment, you are redirected to Fena's secure platform to authorise the transaction directly with your bank.

PGNA Labs never sees, receives, or stores your bank account details, card numbers, or any other financial credentials. Fena's own privacy policy governs the processing of your payment data.

Your personal data is stored securely on our website infrastructure. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

We retain your account and order data for as long as your account is active or as required to fulfil our legal obligations (typically 6 years for financial records under UK law).

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

• Royal Mail / courier services: Your name and delivery address are shared solely for the purpose of fulfilling your order.
• Fena: Your email address may be shared with Fena to facilitate payment processing and confirmation.
• Legal authorities: Where required by law or to protect our legal rights.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing of your data for certain purposes.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Our website uses essential cookies to maintain your session and shopping cart. We do not use tracking or advertising cookies. You can manage cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the date of the most recent update noted at the top. We encourage you to review this policy periodically.

For any questions or concerns about this Privacy Policy or how we handle your data, please contact us at [email protected].