This notice explains what personal data Core Research collects when you use core-research.net, place an order or send an enquiry, why it is collected, how long it is kept, and the rights you have over it under UK data protection law.

Who is responsible for your data

Core Research, Birmingham, United Kingdom, is the data controller for the personal data described here. For anything in this notice, email info@core-research.net or call 07756 625584, 9am to 9pm.

What we collect, and why

When you place an order

Name, billing and delivery address, email address, telephone number, the items ordered and the order value, and the IP address of the device used. We use this to process and deliver the order, to communicate about it, to detect fraud and abuse, and to keep the accounting records that UK tax law requires. Lawful basis: performance of a contract, and our legal obligations for business records. You do not need an account to order, and we do not offer account registration at present.

When you send an enquiry

Name, email address, organisation if given, the enquiry type, any order or lot reference you quote, the message, and the IP address and time of submission. We use this to answer the enquiry and to prevent abuse of the form. Enquiries are also reviewed against our research-use-only policy; enquiries outside it are not answered on those terms. Lawful basis: our legitimate interest in responding to and recording business correspondence. Enquiries are emailed to our enquiry mailbox and stored in the website’s database.

When you browse

The web server keeps standard access logs (IP address, browser type, pages requested, time) for security, error diagnosis and capacity planning. Lawful basis: our legitimate interest in running a secure service.

What we do not do

• No marketing lists. Your details are used to fulfil the order or answer the enquiry you sent, and are not added to any mailing list.
• No tracking. No analytics, advertising or tracking scripts run on this site, and no data is sold or shared for marketing.
• No banking details. We never receive or store your banking credentials or card details. See payment, below.

Who receives your data

• Payment provider. Payments are intended to be taken through Fena, an open-banking service in which you authorise the payment in your own banking app. The provider receives the payment amount and reference; we receive confirmation that the payment was made. This section will be updated when the payment service goes live.
• Delivery carrier. Name, delivery address and, where the carrier offers delivery updates, your telephone number or email address. We use carriers such as Royal Mail and DPD; the shipping and delivery page has the detail.
• Hosting and email. The website, its database and its email run on a server operated for us by a hosting provider, who processes data only on our instructions.
• Fonts and other resources. Page typefaces are served from this website itself. No third-party scripts, fonts or other resources are loaded when you browse.
• Authorities. Where the law requires it, for example a lawful request from a regulator or HMRC.

Cookies

Browsing the site sets no cookies. Adding an item to the basket or starting checkout sets WooCommerce’s essential session cookies, which hold the basket contents and the checkout state and expire when the session ends or within two days. These are strictly necessary for the shop to work, so no consent banner is shown. No analytics or advertising cookies are used.

How long we keep it

• Order records: seven years, to meet HMRC record-keeping requirements.
• Enquiries: twelve months from the last message, then deleted.
• Server logs and backups: the site database, including order and enquiry records, is backed up daily. Logs and backups are retained for a limited period for security and recovery, then deleted.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it where there is no legal reason to keep it, ask us to restrict or object to its use, and ask for data you gave us in a machine-readable form. Email info@core-research.net; we respond within one month. If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

The site supplies materials for laboratory research and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes to this notice

This notice was last updated on 6 September 2026.