1. Data Controller


The data controller responsible for processing your personal data on this website is: BIONIX Research

2. Categories of Data We Collect

We collect and process the following information only to operate this website, process orders, and provide customer support:

2.1 Account, Order & Checkout Data

  • Name
  • Billing and shipping address
  • Email address
  • Order details
  • Payment status (not full card data)

2.2 Technical Data

  • IP address
  • Browser type
  • Device information
  • Session data (for security and functionality)

2.3 Optional User-Generated Data

If you leave a review or comment, we store the data you submit plus technical metadata to prevent abuse and spam.

2.4 Uploaded Media

If you upload files (e.g., for return verification), we recommend removing embedded location data.

3. Purposes & Legal Basis (GDPR Art. 6)

We process personal data for the following purposes:

3.1 Contract Fulfilment (Art. 6(1)(b))

To process and deliver your order, manage payments, handle customer service requests.

3.2 Legal Compliance (Art. 6(1)(c))

To meet EU commercial, tax, and accounting requirements (data must be stored for statutory periods).

3.3 Legitimate Interests (Art. 6(1)(f))

To maintain website security, prevent fraud, and improve user experience.

We do not sell personal data, profile visitors, or use automated decision-making.

4. Cookies

We use essential cookies necessary for:

  • website security
  • account login
  • cart functionality
  • session stability

Optional cookies may be used only with your consent.

You can adjust cookie settings at any time in your browser.

5. Data Sharing

We share personal data only with:

5.1 Fulfillment Partners (EU-based)

Shipping providers receive only the information required to deliver your order.

5.2 Payment Service Providers

Payments are processed exclusively by secure, PCI-compliant third-party providers.
We do not store full credit card information.

5.3 Technical Service Providers

Hosting provider and security systems necessary for website operation.

We never share data with advertisers or unrelated third parties.

6. Data Retention

  • Order data: Retained for the legally required period (typically 7 years under EU commercial law).
  • Account data: Stored until you request deletion.
  • Reviews: Stored indefinitely unless removal is requested.
  • Technical logs: Automatically deleted periodically.

7. Your Rights (GDPR)

You have the right to:

  • access your personal data
  • request correction or deletion
  • request restriction of processing
  • request data portability
  • withdraw consent (if applicable)
  • object to legitimate interest processing

Requests can be sent to: info@bionixresearch.com

If you believe your rights have been violated, you may contact your national data protection authority.

8. Data Security

We protect your data through:

  • SSL/TLS encrypted transmission
  • restricted-access hosting
  • secure backup systems
  • anti-spam and anti-fraud systems

Only authorised personnel may access customer data.

9. International Transfers

We process data exclusively within the European Union.
No personal data is transferred outside the EU/EEA unless adequate protection (GDPR Chapter V) is ensured.

10. Updates to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The revised version will be posted on this page.