top of page

Privacy Policy

Last updated: 12/06/2026

​

This privacy policy explains how Citrox Biosciences Ltd collects, uses, stores and protects personal data when you visit, use or make a purchase from citroxprotect.com.

​

Citrox Biosciences Ltd is committed to protecting your privacy and handling your personal data lawfully, fairly and transparently.

This website is operated by:

Citrox Biosciences Ltd
6 Nene Road, Bicton Industrial Estate, Kimbolton, PE28 0LF
REG: 5717359
Email: sales@citroxbio.co.uk
Telephone: +441480862085

 

For the purposes of UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, Citrox Biosciences Ltd is the data controller for the personal data described in this policy.

 

1. About this policy

This privacy policy applies to the website citroxprotect.com and to personal data collected through our online shop, contact forms, email communications, customer relationship management systems, marketing activities, advertising platforms and related business operations.

This policy may be updated from time to time. The latest version will always be available on this page.

 

2. What personal data we collect

We may collect and process the following types of personal data.

Information you provide directly

This may include:

  • Your name

  • Business name, where relevant

  • Billing address

  • Delivery address

  • Email address

  • Telephone number

  • Order details

  • Payment-related information

  • Account information, if you create an account

  • Information submitted through contact forms

  • Customer service enquiries

  • Product reviews or feedback, where enabled

  • Marketing preferences

  • Email subscription details

 

Information collected automatically

When you use our website, certain technical and usage information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Pages viewed

  • Date and time of visits

  • Referring website, search engine, social platform or advert

  • Shopping basket activity

  • Checkout activity

  • Cookie and consent preferences

  • General website usage data

This information helps us operate the website securely, understand how customers use the website, improve the shopping experience and measure advertising performance where permitted.

 

3. How and why we use your personal data

We use personal data for the following purposes.

 

To process and fulfil orders

We use your personal data to:

  • Process your order

  • Take payment

  • Confirm your purchase

  • Arrange delivery

  • Provide order updates

  • Handle returns, refunds, complaints or customer service enquiries

  • Keep business, tax and accounting records

The lawful basis for this processing is usually contract, as the data is required to complete your purchase. Some order records may also be processed to comply with our legal obligations.

 

To operate and secure the website

We use technical data to:

  • Keep the website secure

  • Prevent fraud and misuse

  • Maintain website functionality

  • Troubleshoot technical issues

  • Protect our business, customers and website

The lawful basis for this processing is usually our legitimate interests in operating a secure and functional online shop.

 

To respond to enquiries

If you contact us by email, telephone, online form or social media, we use the information you provide to respond to your enquiry.

The lawful basis may be contract, where the enquiry relates to an order or potential order, or legitimate interests, where we are responding to a general business enquiry.

​

To improve our products, services and website

We may use website usage data, purchase history and customer feedback to:

  • Improve website navigation

  • Understand customer needs

  • Improve products and services

  • Review stock and product demand

  • Improve customer support

  • Improve marketing and product communication

The lawful basis is usually our legitimate interests, unless the activity relies on non-essential cookies or similar technologies, in which case we will ask for your consent.

​

To send marketing communications

Where permitted, we may use your email address to send information about Citrox Protect products, offers, updates and related content.

We will only send marketing emails where:

  • You have given consent; or

  • You bought a product from us, or enquired about a product, and we are contacting you about similar products under the “soft opt-in” rules; and

  • You were given a clear opportunity to opt out.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us directly.

The lawful basis may be consent or legitimate interests, depending on the circumstances. Electronic marketing will also be handled in line with the Privacy and Electronic Communications Regulations.

 

4. Online shop and checkout data

When you make a purchase through our website, we collect the information required to process and fulfil your order. This may include:

  • Name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Products purchased

  • Order value

  • Payment status

  • Delivery details

  • Account details, where an account is created

 

We use this information to:

  • Process payment

  • Send order confirmations

  • Deliver goods

  • Manage returns, refunds and complaints

  • Keep legally required business and accounting records

  • Prevent fraud

  • Improve our store offering

  • Provide customer support

  • Send marketing messages, where permitted

 

We do not store full card details on our own systems. Payments are processed through Wix and/or the payment provider shown at checkout. Payment providers process payment information securely and may act as independent controllers or processors depending on their role.

​

5. Wix hosting and website platform

This website is hosted and operated using Wix.

​

Wix may process personal data on our behalf as part of providing website hosting, online store functionality, forms, checkout, analytics tools, security features and related services.

​

Data processed by Wix may include:

  • Customer information

  • Order information

  • Contact form submissions

  • IP addresses

  • Technical data

  • Website usage data

  • Cookie and consent preferences

Wix may store or process data on servers located outside the UK. Where international transfers take place, Wix is responsible for applying appropriate safeguards as described in its own privacy and data processing documentation.

​

We use Wix because it is necessary for the operation, security and performance of our online shop.

​

6. Customer relationship management: Zoho CRM

 

We use Zoho CRM to manage customer, prospect and business contact information.

​

Information stored in Zoho CRM may include:

  • Name

  • Business name

  • Email address

  • Telephone number

  • Postal or business address

  • Enquiry details

  • Order or purchase history

  • Communication history

  • Marketing preferences

  • Notes relating to customer service, sales or account management

 

We use Zoho CRM to:

  • Respond to enquiries

  • Manage customer relationships

  • Keep records of communications

  • Follow up on sales or product enquiries

  • Provide customer support

  • Manage B2B and trade relationships

  • Maintain accurate business records

The lawful basis for this processing is usually contract, where the processing relates to an order, enquiry or potential order, or legitimate interests, where we use CRM records to manage customer relationships and operate our business efficiently.

​

Zoho may process personal data on our behalf as a service provider. Zoho provides data protection documentation, including data processing terms and GDPR-related controls.

​

We may also use other current, predecessor or successor CRM and business-management systems. This allows us to maintain appropriate historic records where information was previously managed using another system.

Providers operating these systems on our behalf are required to protect personal data appropriately and use it only in accordance with our instructions.

​

7. Email marketing: Zoho Campaigns

We use Zoho Campaigns to manage and send email marketing communications.

If you subscribe to our mailing list, opt in to receive marketing, or are eligible to receive marketing under the soft opt-in rules, we may process your details through Zoho Campaigns.

​

Personal data processed for email marketing may include:

  • Name

  • Email address

  • Company name, where relevant

  • Marketing consent status

  • Marketing preferences

  • Subscription source

  • Email engagement data, such as opens, clicks, unsubscribes and bounce information

  • Product interests or customer segment, where relevant

​

We use this information to:

  • Send email newsletters and product updates

  • Send offers and promotional emails

  • Manage unsubscribe requests

  • Maintain suppression lists

  • Measure email campaign performance

  • Improve the relevance of future communications

​

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us directly.

​

If you unsubscribe, we may retain your email address on a suppression list to ensure we do not send you further marketing emails. This is processed on the basis of our legitimate interest in complying with marketing law and respecting your preferences.

 

Zoho Campaigns provides tools for managing consent, subscriber preferences, unsubscribe requests and email campaign compliance.

​

Zoho Campaigns may process personal data on our behalf as a service provider. Where it does so, it is required to protect personal data appropriately and use it only for authorised purposes and in accordance with our instructions.

We may also use other current, predecessor or successor email marketing systems where necessary to maintain historic subscription, consent, preference and suppression records.

​

8. Cookies and similar technologies

Our website uses cookies and similar technologies.

​

Cookies are small files placed on your device when you visit a website. Some cookies are essential for the website to function properly. Others help us understand website usage, measure advertising performance or show relevant adverts.

​

Types of cookies we may use

Essential cookies
These are required for the website to work. They may support functions such as security, shopping basket operation, checkout, account login and consent preferences.

​

Analytics cookies
These help us understand how visitors use the website, such as which pages are visited and how customers move through the site.

​

Advertising and marketing cookies
These may be used to measure advertising performance, show relevant adverts, build advertising audiences, limit ad frequency and understand whether an advert led to a website visit or purchase.

 

Functional cookies
These may remember preferences or improve the website experience.

Non-essential cookies, including analytics and advertising cookies, should only be set where you have given consent through the website’s cookie banner or privacy settings.

 

You can change or withdraw your cookie preferences at any time through the cookie settings available on the website, where enabled. You can also manage cookies through your browser settings. If you disable certain cookies, some website functions may not work properly.

 

9. Google Analytics, Google Ads and Google tags

We may use Google services, including Google Analytics, Google Ads, Google tags and related measurement tools.

These tools may help us:

  • Understand how visitors use the website

  • Measure website performance

  • Measure advert performance

  • Track conversions, such as purchases or enquiries

  • Improve our advertising

  • Show relevant adverts to people who have visited our website, where permitted

  • Build or use advertising audiences, where permitted

 

Google may process information such as:

  • IP address

  • Device information

  • Browser information

  • Website activity

  • Cookie identifiers

  • Advertising identifiers

  • Conversion events, such as purchases or enquiries

 

Where required, Google Analytics, Google Ads and related cookies or similar technologies will only be used after you have given consent.

 

You can manage your Google advertising preferences through your Google account settings. You may also be able to opt out of certain Google Analytics tracking using Google’s browser tools.

 

10. Social media advertising

We may advertise Citrox Protect products on social media platforms such as Meta platforms, TikTok, LinkedIn, Pinterest or other platforms where we operate business accounts or advertising campaigns.

 

Social media advertising tools may be used to:

  • Measure advert performance

  • Understand whether an advert led to a website visit or purchase

  • Create or reach advertising audiences

  • Show relevant adverts to users of those platforms

  • Limit repeated adverts

  • Improve marketing campaigns

 

Where social media pixels, tags or similar tracking technologies are used on our website, they will be treated as non-essential technologies and should only be activated where you have given the relevant consent.

 

Social media platforms may also process your personal data independently when you use their platforms. Their use of your data is governed by their own privacy policies and account settings.

 

11. Contact forms and communications

If you submit an enquiry through our website, email us, call us or contact us through another communication channel, we may process the personal data you provide to handle your enquiry.

This may include:

  • Name

  • Email address

  • Telephone number

  • Company name

  • Order number, where relevant

  • Details of your enquiry

  • Any additional information you choose to provide

We use this information to respond to your enquiry, provide customer support, handle complaints, process order-related requests and keep appropriate business records.

 

The lawful basis is usually contract, where your enquiry relates to an order or potential order, or legitimate interests, where we process the enquiry to manage our business and respond effectively.

We do not pass this information to third parties for their own marketing purposes.

 

12. Who has access to your data

Access to your personal data is limited to people who need it for business purposes.

This may include:

  • Website administrators

  • Customer service staff

  • Order fulfilment staff

  • Marketing staff

  • Finance or accounting staff

  • Technical service providers

Team members may access order information, customer information and enquiry information where necessary to process orders, support customers, issue refunds, manage stock, run the website or comply with legal obligations.

 

13. Who we share your data with

We may share personal data with trusted third parties where necessary to operate our business, fulfil orders, provide customer support, manage marketing activity or comply with the law.

These may include:

  • Wix, as website platform and hosting provider

  • Payment processors

  • Delivery and courier companies

  • Zoho CRM, for customer relationship management

  • Zoho Campaigns, for email marketing and subscriber management

  • Analytics and advertising providers, including Google

  • Social media advertising platforms, where advertising tools are used

  • IT and website support providers

  • Professional advisers, such as accountants or legal advisers

  • Fraud prevention and security providers

  • Regulators, authorities or law enforcement bodies, where legally required

We do not sell your personal data.

We do not share your personal data with third parties for their own direct marketing unless you have consented or unless another lawful basis clearly applies.

 

14. Data transfer for online orders and delivery

We share personal data with third parties only where necessary in connection with the handling of orders, payment and delivery.

For example, we may share your name, delivery address, email address, telephone number and order details with delivery companies or fulfilment providers so that your order can be delivered.

We may also share payment-related information with payment processors and financial service providers so that payments can be processed securely.

The lawful basis for this processing is usually contract, as it is necessary to fulfil your order, or legitimate interests, where processing is needed to prevent fraud, resolve delivery issues or manage business operations.

 

15. International transfers

Some of our service providers may process personal data outside the UK.

This may apply to providers such as Wix, Zoho, Google, social media platforms, email marketing platforms and payment providers.

Where personal data is transferred outside the UK, we will rely on appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, international data transfer agreements, data processing agreements or other recognised legal transfer mechanisms.

 

16. How long we keep your data

We only keep personal data for as long as necessary for the purposes described in this policy.

Typical retention periods include:

  • Order and transaction records: usually kept for up to 6 years for accounting, tax and legal purposes

  • Customer service enquiries: kept for as long as needed to handle the enquiry and any follow-up issues

  • CRM records: kept for as long as there is an active customer, prospect, trade or business relationship, or as otherwise required for legitimate business purposes

  • Marketing data: kept until you unsubscribe, withdraw consent or object to marketing, unless we need to retain limited data on a suppression list

  • Account data: kept while your account remains active, unless deletion is requested and no legal reason requires retention

  • Cookie consent records: kept for a reasonable period to demonstrate compliance

  • Analytics data: retained according to the settings used in the relevant analytics platform

We may keep data for longer where required to comply with legal obligations, resolve disputes, prevent fraud or enforce our terms.

 

17. Security

We take reasonable steps to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.

Our website uses SSL/TLS encryption. You can identify an encrypted connection by the padlock symbol in your browser and by the website address beginning with “https”.

No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, but we take appropriate technical and organisational measures to protect your information.

 

18. Your rights

Under UK data protection law, you may have the following rights:

  • The right to access your personal data

  • The right to correct inaccurate personal data

  • The right to request deletion of your personal data

  • The right to restrict processing

  • The right to object to processing

  • The right to data portability

  • The right to withdraw consent, where processing is based on consent

  • The right to complain to the Information Commissioner’s Office

To exercise your rights, contact us using the details in this policy.

We may need to verify your identity before responding to a request.

 

19. Withdrawing consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time.

This includes consent for:

  • Non-essential cookies

  • Analytics cookies

  • Advertising cookies

  • Email marketing, where consent is the lawful basis

  • Certain personalised marketing activities

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

 

20. Objecting to marketing

You can object to direct marketing at any time.

You can do this by:

  • Clicking the unsubscribe link in a marketing email

  • Changing your email preferences, where preference tools are available

  • Contacting us directly

If you object to marketing, we will stop sending marketing communications to you. We may keep limited details on a suppression list to ensure your preference is respected.

 

21. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113

​

We will acknowledge a data protection complaint within 30 days, take appropriate steps to investigate it without undue delay, keep you informed where appropriate and notify you of the outcome.

​

22. Children’s privacy

Our website is not intended for children under the age of 18.

We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child, we will take appropriate steps to delete it.

​

23. External links and embedded content

Our website may contain links to third-party websites or embedded content, such as videos, images, social media content or external resources.

Third-party websites and platforms may collect data about you, use cookies, and monitor your interaction with their content. We are not responsible for the privacy practices of third-party websites. You should review their privacy policies before providing personal data or interacting with their services.

​

24. Social media communication

We may operate social media accounts for Citrox Protect and Citrox Biosciences Ltd.

If you contact us through social media, your interaction may be visible to the relevant platform and governed by that platform’s privacy policy.

Please avoid sending sensitive personal information through social media messages or public comments. For order-specific or sensitive enquiries, please contact us by email or through the website.

​

25. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our website, services, advertising setup, legal obligations or business operations.

The latest version will always be available on this page. The “Last updated” date at the top of this policy will indicate when it was most recently revised.

​

26. Contact us

For questions about this privacy policy or how we handle personal data, contact:

Citrox Biosciences LtdCitrox Biosciences Ltd
6 Nene Road
Bicton Industrial Park
Kimbolton
Cambridgeshire
PE28 0LF
Email: sales@citroxbio.co.uk
Telephone: 01480 862085

bottom of page