Last updated: 12 September 2026
LLYD Group Ltd, trading as allbio (“allbio”, “we”, “us” or “our”), operates this website and online store.
This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website, place an order, create or use a customer account, contact us, submit a review or otherwise interact with us.
Our online store is powered by Shopify. Shopify provides the ecommerce technology that enables us to operate our website and process orders.
For the purposes of applicable data protection law, LLYD Group Ltd is the data controller of the personal information described in this policy, except where another organisation, such as Shopify or a payment provider, acts as a separate controller for its own processing activities.
Personal information we collect
Depending on how you interact with us, we may collect or process:
- Contact information, including your name, billing and delivery address, email address and telephone number.
- Order and transaction information, including products viewed or purchased, items placed in your basket, order history, returns, refunds and delivery information.
- Payment information, such as your chosen payment method, payment status and transaction details. Full card information is normally processed securely by our payment providers and is not provided to or stored by us in full.
- Customer account information, including account identifiers, preferences and settings.
- Communications, including information you provide when you contact us about an order, product or customer service enquiry.
- Reviews and other content that you choose to submit, such as product reviews, ratings or photographs.
- Device and technical information, including your IP address, browser type, device information and similar identifiers.
- Usage information, including how you browse and interact with our website.
- Marketing preferences, including whether you have chosen to receive marketing communications from us.
How we collect your information
We may collect personal information:
- directly from you, for example when you place an order, create an account, contact us or submit a review;
- automatically when you use our website, including through cookies and similar technologies;
- from Shopify and other service providers that help us operate our website and fulfil orders;
- from payment providers, delivery providers and other partners where necessary to complete a transaction or provide our services.
How we use your personal information and our lawful bases
Under UK data protection law, we must have a lawful basis for processing your personal information.
To process and fulfil your orders
We use your information to:
- process payments;
- confirm and fulfil orders;
- arrange delivery;
- provide order and delivery updates;
- process returns, replacements and refunds; and
- provide customer service relating to your purchase.
Lawful basis: processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
To comply with legal and regulatory requirements
We may process and retain information where necessary for accounting, tax, fraud prevention, regulatory or other legal requirements.
Lawful basis: compliance with a legal obligation.
To operate, protect and improve our business
We may use information to:
- maintain and improve our website;
- understand how customers use our website;
- prevent fraud, misuse and security incidents;
- troubleshoot technical problems;
- improve our products and customer service; and
- protect our business and customers.
Lawful basis: our legitimate interests in operating, securing and improving our business, provided those interests do not override your rights and interests. Where cookies or similar technologies require consent, we will rely on your consent instead.
To communicate with you
We may use your contact details to respond to enquiries, provide customer support and communicate with you about your orders or account.
Lawful basis: performance of our contract with you and/or our legitimate interests in providing effective customer service.
Marketing
If you choose to receive marketing communications from us, we may send you information about allbio products, offers or news.
We will only send electronic marketing where permitted by applicable law. Depending on the circumstances, we may rely on your consent or on another lawful basis where electronic marketing rules permit us to do so.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us.
Withdrawing from marketing will not affect service messages relating to orders you have placed.
Reviews
If you submit a review, rating, photograph or other content, we may use and display that content in connection with our products, website and marketing.
Lawful basis: our legitimate interests in obtaining customer feedback, improving our products and helping customers make informed purchasing decisions.
Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function, for example to operate your basket, checkout, account and security features.
Other cookies may be used for analytics, personalisation or marketing.
Where required by law, non-essential cookies will not be used unless you have made the appropriate choice through our cookie or privacy settings. You can change your preferences where those controls are available.
How we share personal information
We only share personal information where reasonably necessary for the purposes described in this policy.
This may include sharing information with:
- Shopify, which provides our ecommerce platform and related services;
- payment providers, including Shopify Payments and PayPal;
- delivery and fulfilment providers, so that we can deliver your order;
- IT, cloud hosting and technical service providers;
- review and customer feedback service providers;
- analytics and marketing providers, where applicable and subject to your privacy choices;
- professional advisers, such as accountants, legal advisers or insurers where necessary;
- government bodies, regulators, law enforcement agencies or courts where disclosure is required by law.
We may also disclose information in connection with a sale, restructuring or transfer of all or part of our business.
We do not sell your personal information for money.
Our relationship with Shopify
Our online store is hosted and powered by Shopify.
Shopify collects and processes certain personal information about your access to and use of our store in order to provide its platform and related services to us.
Information submitted through our store may therefore be transmitted to and processed by Shopify and its service providers.
Certain Shopify features may also involve Shopify processing information collected through our store together with information from interactions with Shopify or other merchants. For some of these activities, Shopify may act as a separate data controller and is responsible for explaining how it uses that information and for responding to relevant data protection requests.
You can find further information in Shopify’s Consumer Privacy Policy and through Shopify’s Privacy Portal.
Payment information
Payments made through our website are processed securely by the payment method you select at checkout.
Payment providers may collect and process information such as card details, billing information and fraud-prevention data in accordance with their own privacy policies.
We do not normally receive or store your complete debit or credit card number.
Third-party websites and services
Our website may contain links to websites or services operated by third parties.
If you follow a link to another website, that organisation’s own privacy policy will apply. We are not responsible for the privacy practices or content of third-party websites that we do not control.
How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:
- fulfil and administer orders;
- provide customer service;
- comply with accounting, tax and other legal requirements;
- resolve disputes;
- prevent fraud; and
- establish, exercise or defend legal claims.
Different categories of information may therefore be retained for different periods.
Where information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
Security
We take reasonable technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
Please do not send payment card details or other highly sensitive information to us by ordinary email.
International transfers
Some of the companies that provide services to us, including Shopify and other technology providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally and UK data protection law requires additional protection, appropriate safeguards will be used. These may include UK adequacy regulations or approved contractual safeguards, as appropriate.
Your data protection rights
Depending on the circumstances, you may have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your personal information in certain circumstances;
- ask us to restrict how we use your information;
- object to certain processing, including direct marketing;
- receive certain information in a portable format or ask for it to be transferred to another organisation;
- withdraw your consent at any time where processing is based on consent.
These rights are not absolute and may be subject to exceptions under applicable law.
You will not be charged for exercising your rights in ordinary circumstances. We may need to ask for information to confirm your identity before responding to a request.
To exercise any of these rights, please contact us using the details below.
Children
Our website and services are not directed specifically at children, and we do not knowingly seek to collect personal information from children in circumstances where parental or guardian consent would be required.
If you believe that a child has provided us with personal information inappropriately, please contact us.
Complaints
If you have any questions or concerns about how we use your personal information, please contact us first and we will do our best to resolve the matter.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal obligations.
When we make changes, we will publish the updated version on our website and update the “Last updated” date above.
Contact us
If you have any questions about this Privacy Policy, our privacy practices or your personal information, or if you would like to exercise any of your data protection rights, please contact us:
LLYD Group Ltd trading as allbio
Email: info@allbio.co.uk
Telephone: +44 1233 281 868
Address:
Unit 12, The Glenmore Centre
Moat Way
Sevington
Ashford
TN24 0TL
United Kingdom
For the purposes of applicable data protection law, LLYD Group Ltd is the data controller.