PRIVACY POLICY
1. Introduction
This Privacy Policy explains how Lionheart Research Labs (“Company”, “we”, “us”, “our”) collects, uses, stores and protects personal data when you access our website https://lionheartresearchlabs.com and make a purchase.
We are committed to handling personal data in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- Applicable Privacy and Electronic Communications Regulations
For the purposes of data protection law, the Company acts as the Data Controller.
2. Personal Data We Collect
We collect only the personal data necessary to process and fulfil sales transactions. This includes:
- Full name
- Billing address
- Delivery address
- Email address
- Phone number
- Order details
- Payment confirmation reference (e.g., bank transfer reference)
We do not collect or store sensitive financial data, such as credit card or bank account numbers.
We do not collect medical information, sensitive personal data or create behavioural profiles.
3. Website Hosting, CDN and E-Commerce Platform
Our website is hosted by Hostinger and uses WooCommerce as the e-commerce platform.
- QUIC.cloud CDN:We use QUIC.cloud (operated by LiteSpeed Technologies Inc.) to provide a faster, more secure website. QUIC.cloud processes visitor IP addresses and browser metadata to route traffic to the nearest server and to protect our site from malicious attacks (DDoS and WAF).
- Hostinger, WooCommerce, and QUIC.cloud act as data processors on our behalf, processing data solely to enable website functionality, order processing and security.
- WhatsApp communications are processed through a third-party communications provider. We do not permit these providers to use personal data for their own marketing or independent purposes.
4. Purpose of Processing
We process personal data strictly for the following purposes:
- Processing and fulfilling customer orders and delivering purchased products.
- Verifying payment received via bank transfer.
- Maintaining transaction records for accounting and legal compliance.
We do not use personal data for:
- Marketing communications.
- Profiling.
- Behavioural advertising.
- Automated decision-making.
5. Lawful Basis for Processing
Under UK GDPR, our lawful bases for processing are:
- Performance of a contract:Processing necessary to fulfil your order.
- Legal obligation:Retaining records to comply with tax and accounting requirements.
6. Data Transfer and International TransfersWe do not sell, rent, trade or share personal data with third parties for marketing or commercial exploitation. Data is only shared where strictly necessary to complete a transaction (e.g., delivery services).
Technical data (such as IP addresses) processed by QUIC.cloud may be transferred outside the UK to their global network of servers. We ensure these transfers are governed by appropriate safeguards, including Data Processing Agreements (DPA) that meet UK GDPR standards.
7. Data Retention
Personal data is retained only for as long as necessary to complete the transaction and comply with statutory accounting, taxation and legal obligations. Once no longer required, personal data is securely deleted or anonymised.
8. Data Security
We implement appropriate technical and organisational measures to safeguard personal data, including:
- Encrypted website connections (HTTPS)
- Secure hosting infrastructure
- Controlled administrative access
While no online system can be guaranteed entirely secure, reasonable measures are taken to prevent unauthorised access, disclosure, or destruction.
9. Your Rights
Under UK GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Request erasure (subject to legal retention obligations)
- Request restriction of processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please contact: lionheartresearchlabs@gmail.com.
ICO Website: www.ico.org.uk
10. Cookies
Our website does not use advertising or behavioural tracking cookies.
We use only essential technical cookies required for website operation, such as managing your shopping basket and the checkout process.
11. Changes to This Policy
We may update this Privacy Policy to reflect legal or operational changes. The current version will always be available on our website.
