Privacy policy

Privacy Policy

MP Bio Science Ltd trading as Boditronics

MP Bio Science Ltd (trading as Boditronics) is committed to protecting your privacy and handling your personal information fairly, lawfully and securely. This Privacy Policy explains what information we collect, how we use it, who we may share it with, how long we keep it and the rights available to you.

This policy applies to information processed through the Boditronics website and our related sales, customer service, fulfilment and marketplace activities.

1. Who We Are

Boditronics is a trading name of MP Bio Science Ltd.

MP Bio Science Ltd
3A Harrison Court
Hilton Business Park
Hilton
Derby
DE65 5UR
United Kingdom

Email: customerservices@boditronics.co.uk

MP Bio Science Ltd is the data controller for personal information processed through the Boditronics website and our direct business activities.

2. Information We Collect

Depending on how you interact with us, we may collect or process:

  • your name;
  • billing and delivery address;
  • email address;
  • telephone number;
  • order and purchase information;
  • delivery and fulfilment information;
  • customer service correspondence;
  • payment status and transaction references;
  • website usage, device and IP information; and
  • marketing preferences.

Where you buy through a marketplace such as Amazon, we may receive the order and fulfilment information necessary to process that order.

3. Payment Information

Boditronics uses third-party payment providers and marketplaces to process customer payments, including Shopify Payments, Stripe, PayPal and Amazon where applicable.

MP Bio Science Ltd does not store customers' payment-card details on its own servers. Payment-card information is handled by the relevant payment provider or marketplace in accordance with its own privacy and security policies.

4. Where We Obtain Personal Information

We may obtain personal information:

  • directly from you through our website, email, telephone or other contact;
  • from marketplaces through which you place an order, including Amazon;
  • from payment providers confirming payment or transaction status; and
  • from delivery carriers and fulfilment providers in connection with delivery, returns or refunds.

Where we receive information from a marketplace, we use it only for the purposes permitted by that marketplace and applicable law.

5. How We Use Personal Information

We may use personal information where necessary to:

  • process, fulfil and deliver orders;
  • communicate with you about an order;
  • provide customer service and deal with returns, refunds or complaints;
  • maintain appropriate accounting, VAT, tax and audit records;
  • prevent fraud and protect our systems and business;
  • manage customer and business relationships;
  • comply with legal and regulatory requirements; and
  • send marketing communications where we have a lawful basis to do so and subject to your preferences.

Our lawful bases for processing may include performance of a contract, compliance with a legal obligation, our legitimate interests in operating and protecting our business, and consent where consent is required.

6. Amazon Marketplace Information

Where a customer purchases a Boditronics product through Amazon, Amazon may provide us with information necessary to fulfil and account for that order.

For merchant-fulfilled orders, this may include the recipient's name and delivery address. We use this information only where required to process and despatch the order, provide customer service, deal with refunds or disputes, or meet applicable accounting, tax, audit or legal obligations.

We aim to minimise the Amazon personal information we retain. Operational delivery information is deleted or anonymised when it is no longer required. Amazon order references and non-personal financial information may be retained for accounting, reconciliation and audit purposes.

We do not use Amazon customer information for unrelated marketing purposes.

7. Sharing Personal Information

We do not sell personal information.

We may share the minimum information necessary with organisations that help us operate our business, including:

  • payment processors;
  • delivery carriers and fulfilment providers;
  • website hosting, IT and infrastructure providers;
  • professional advisers, accountants and auditors;
  • marketplaces such as Amazon where necessary to operate or reconcile marketplace transactions; and
  • regulators, law-enforcement bodies or public authorities where legally required.

For merchant-fulfilled Amazon orders, the minimum recipient information required for delivery may be shared with our contracted delivery carrier or fulfilment provider.

Service providers are permitted to process personal information only as necessary to provide their services to us and must protect it appropriately.

8. International Transfers

Some service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are used where required.

9. How Long We Keep Personal Information

We keep personal information only for as long as necessary for the purpose for which it was collected, or for longer where this is required by law.

  • Amazon merchant-fulfilled delivery information: deleted or anonymised from operational systems as soon as it is no longer required for fulfilment and normally within 30 days after delivery, unless a legal, regulatory or dispute-related reason requires longer retention.
  • Accounting, VAT and tax records: retained for the period required by applicable law and our accounting obligations.
  • Payment-card data: not stored on MP Bio Science Ltd servers.
  • Security and audit logs: retained according to our security and regulatory requirements and designed to avoid unnecessary personal information.
  • Marketing information: retained only while we have a lawful basis and business need to use it.
  • Customer-service records: retained only for as long as reasonably required to deal with the matter and any related legal obligations.

We periodically review information and securely delete or anonymise information that is no longer required.

10. Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Measures include, where appropriate, HTTPS/TLS encryption in transit, firewalls and controlled network access, named user accounts, role-based access controls, strong passwords, Multi-Factor Authentication where supported, anti-malware and security updates, restricted administrative access, secure credential handling, logging and monitoring, and testing changes before production deployment.

Access to personal information is restricted to authorised personnel who require it for their duties.

11. Cookies and Website Information

Our website may use cookies and similar technologies for essential website operation, security, analytics and, where applicable, marketing.

Where consent is required for non-essential cookies, we use website privacy controls to allow you to make appropriate choices.

We may also collect technical information such as IP addresses and website usage information for security, administration, analytics and service improvement.

12. Marketing

Where permitted, we may contact customers about Boditronics products and services. You can opt out of marketing communications at any time using the unsubscribe option provided or by contacting us.

Opting out of marketing does not affect communications that are necessary to process an order or provide customer service.

13. Your Data Protection Rights

Depending on the circumstances, you may have rights to:

  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • request deletion of information;
  • restrict or object to certain processing;
  • request transfer of information in applicable circumstances; and
  • withdraw consent where processing is based on consent.

Some rights are subject to legal exceptions, including where we must retain records for accounting, tax or other legal purposes.

To exercise your rights, contact customerservices@boditronics.co.uk.

14. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate.

You also have the right to complain to the UK Information Commissioner's Office (ICO). Further information is available at https://ico.org.uk/make-a-complaint/.

15. Links to Other Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. Please review the privacy information provided by the operator of any external site you visit.

16. Changes to This Policy

We review this Privacy Policy periodically and may update it when our processing activities, systems or legal obligations change. The current version will be published on this page.

Last updated: 17 September 2026.