Privacy policy

Last updated: 24 June 2026

This Privacy Policy explains how SYNCLAB LTD, trading as Holy Water Supply Co. (“Holy Water Supply Co.”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you visit our website, contact us, create an account, place an order or otherwise use our services.

1. Who we are

The data controller responsible for your personal information is:

Legal entity: SYNCLAB LTD
Trading name: Holy Water Supply Co.
Company number: 17213434
Registered address: 128 City Road, London, United Kingdom, EC1V 2NX
Email: contact@holywatersupply.com
Telephone: +6285190422874

For questions about this Privacy Policy or the way we handle your personal information, contact us using the details above.

2. Personal information we collect

Depending on how you interact with our website, we may collect the following categories of personal information:

Identity and contact information

This may include your:

  • Name

  • Company or organisation name

  • Billing address

  • Delivery address

  • Email address

  • Telephone number

  • Account login information

Order and transaction information

This may include:

  • Products ordered

  • Order value

  • Order status

  • Delivery information

  • Payment status

  • Refund and cancellation information

  • Communications relating to an order

Payment information

Payments may be processed by Shopify or an independent payment-service provider.

We do not normally receive or store your complete payment-card number. Payment providers process payment information in accordance with their own privacy notices and security standards.

Where an order is placed using a deferred payment option, we may use your email address and order details to send you a secure payment link.

Website and device information

When you browse our website, we or our service providers may automatically collect:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Time zone

  • Pages visited

  • Referring website

  • Shopping-cart activity

  • Checkout activity

  • Cookie identifiers

  • General location derived from your IP address

  • Website performance and error information

Communications

We collect information you provide when you:

  • Contact customer support

  • Submit a contact form

  • Request product information or documentation

  • Ask about an order

  • Respond to an email

  • Make a complaint

  • Communicate with us through social media

Please do not send medical records, diagnoses, health information or other sensitive personal information through our contact forms.

Marketing information

Where permitted, we may collect:

  • Marketing preferences

  • Email subscription status

  • Advertising interactions

  • Cookie and tracking preferences

  • Records of consent or withdrawal of consent

Business and verification information

As our products are supplied for laboratory research purposes, we may request information necessary to assess or verify a customer or order, including:

  • Organisation or business name

  • Professional or institutional contact details

  • Intended research or analytical context

  • Evidence that an order is for a legitimate research purpose

  • Fraud-prevention or identity-verification information

3. How we collect personal information

We collect personal information:

  • Directly from you when you place an order, contact us or create an account

  • Automatically through cookies and similar technologies

  • From Shopify and applications connected to our store

  • From payment processors

  • From delivery and fulfilment providers

  • From fraud-prevention and verification providers

  • From analytics and advertising providers

  • From publicly available business or professional sources where appropriate

4. How and why we use personal information

We use personal information only where we have a lawful basis to do so.

To perform a contract or take steps at your request

We may use your information to:

  • Create and manage your order

  • Review your order

  • Send a payment link

  • Process or confirm payment

  • Arrange delivery

  • Provide order updates

  • Manage returns, cancellations and refunds

  • Provide customer service

  • Create and manage your customer account

  • Respond to product or documentation enquiries

To comply with legal obligations

We may use or retain information to:

  • Maintain accounting and tax records

  • Respond to lawful requests from authorities

  • Comply with consumer-protection obligations

  • Comply with fraud-prevention requirements

  • Establish, exercise or defend legal claims

  • Meet applicable product, trading or regulatory obligations

For our legitimate interests

Where those interests are not overridden by your rights, we may process information to:

  • Operate and improve our website

  • Maintain website and account security

  • Prevent fraud, misuse and unauthorised transactions

  • Review suspicious orders

  • Protect our business, customers and service providers

  • Understand website performance

  • Improve our products and customer service

  • Keep records of customer communications

  • Manage and develop our business

  • Enforce our terms and policies

Where enabled, automated tools may flag orders or activity for fraud or security review. A flagged transaction may be reviewed before it is accepted, paid or fulfilled.

With your consent

Where consent is required, we may use information to:

  • Send promotional emails

  • Store or access non-essential cookies

  • Measure advertising performance

  • Personalise advertising

  • Use optional analytics or tracking technologies

You may withdraw your consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

5. Shopify

Our online store is hosted by Shopify.

Shopify processes personal information when you visit our website, create an account, place an order or interact with services made available through the Shopify platform.

Shopify may process information through infrastructure and service providers located in different countries. Shopify’s handling of personal information is also governed by Shopify’s own privacy documentation.

Where Shopify Network Intelligence or related Shopify services are enabled, Shopify may process information about customer interactions with our store and with other Shopify merchants to provide, secure and improve Shopify services.

6. How we share personal information

We may share personal information with organisations that help us operate our business, including:

Shopify

Shopify hosts our store and provides ecommerce, checkout, order-management, security and related services.

Payment providers

Payment providers process payments, issue payment links, detect fraud and manage payment disputes.

Delivery and fulfilment providers

We share necessary contact, address and order information with couriers, warehouses, fulfilment partners and logistics providers.

Technology providers

We may use providers for:

  • Website hosting

  • Email delivery

  • Customer support

  • Data storage

  • Website security

  • Fraud prevention

  • Account management

  • Analytics

  • Cookie-consent management

Analytics and advertising providers

Subject to your choices and applicable law, we may share online identifiers and website-interaction information with analytics, search, social-media or advertising providers.

Depending on the law that applies where you live, some advertising-related disclosures may be considered “sharing”, “targeted advertising” or similar activity.

We do not sell personal information for money.

Professional advisers

We may share information with accountants, auditors, insurers, legal advisers, banks and other professional service providers where necessary.

Government bodies and authorities

We may disclose information when required by law, regulation, court order or a lawful request from a competent authority.

Business transactions

If our business, assets or operations are sold, reorganised, financed or transferred, personal information may be disclosed to relevant advisers and transaction participants, subject to appropriate confidentiality protections.

7. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is lawful. These measures may include:

  • Transfers to countries recognised as providing adequate protection

  • Approved contractual safeguards

  • International data-transfer agreements

  • Other protections permitted by applicable data-protection law

You may contact us for further information about the safeguards used for international transfers.

8. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, security and dispute-resolution requirements.

Typical retention periods include:

  • Order and transaction records: generally up to six years after the end of the relevant financial year, or longer where legally required

  • Customer account information: while the account remains active and for a reasonable period afterward

  • Customer-service communications: normally for up to two years after the enquiry is closed, unless needed for an order, dispute or legal obligation

  • Marketing records: until you unsubscribe or withdraw consent, after which limited suppression information may be retained to respect your preference

  • Fraud and security records: for as long as reasonably necessary to protect our services and comply with legal obligations

  • Cookie information: for the period disclosed in our cookie settings or cookie banner

We may retain information for longer where necessary to resolve a dispute, respond to a complaint, comply with an investigation or establish or defend legal claims.

9. Cookies and similar technologies

Our website uses cookies and similar technologies.

Essential cookies

Essential cookies are required for functions such as:

  • Shopping-cart operation

  • Checkout

  • Account login

  • Security

  • Fraud prevention

  • Remembering privacy preferences

These cookies cannot always be disabled without affecting website functionality.

Optional cookies

With your consent where required, optional cookies may be used for:

  • Analytics

  • Website-performance measurement

  • Personalisation

  • Advertising

  • Advertising-performance measurement

You can manage optional cookies through the cookie banner or privacy settings displayed on our website. You may also control cookies through your browser, although blocking certain cookies may affect website functionality.

10. Marketing communications

We may send marketing messages where you have consented or where otherwise permitted by law.

You can unsubscribe at any time by:

Stopping marketing messages will not prevent us from sending service communications relating to an order, payment, account, security issue or customer-support request.

11. Security

We use reasonable administrative, organisational and technical safeguards designed to protect personal information against:

  • Unauthorised access

  • Loss

  • Misuse

  • Disclosure

  • Alteration

  • Destruction

No website, electronic transmission or storage system can be guaranteed to be completely secure.

You are responsible for keeping your account password confidential and notifying us if you believe your account or information has been compromised.

12. Your data-protection rights

Depending on your location and applicable law, you may have the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request deletion of your information

  • Request restriction of processing

  • Object to certain processing

  • Receive certain information in a portable format

  • Withdraw consent

  • Object to direct marketing

  • Complain to a data-protection authority

  • Request information about international-transfer safeguards

These rights are subject to legal conditions and exceptions.

To exercise a right, email contact@holywatersupply.com. We may need to verify your identity before processing your request.

We normally respond within the period required by applicable law.

13. United Kingdom complaints

Please contact us first if you have a concern about how we handle personal information.

You also have the right to complain to the United Kingdom Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

14. Customers outside the United Kingdom

Customers in other countries may have additional privacy rights under local law.

Where required, we will provide applicable mechanisms to:

  • Access personal information

  • Correct or delete information

  • Withdraw consent

  • Opt out of targeted advertising

  • Opt out of the sale or sharing of personal information

  • Appeal certain privacy decisions

Contact us to submit a request.

15. Children’s privacy

Our website and products are not directed to children.

You must be at least 18 years old and legally capable of entering into a contract to place an order.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so that we can review and, where appropriate, delete it.

16. Third-party websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy, content or security practices of third parties. You should review the privacy policy of any external website before providing personal information.

17. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to:

  • Our services

  • Our service providers

  • Our legal obligations

  • Our data-processing practices

  • Applicable laws or regulations

The revised policy will be posted on this page with an updated revision date.

18. Contact us

For privacy questions, requests or complaints, contact:

SYNCLAB LTD
Trading as Holy Water Supply Co.
Company number: 17213434
128 City Road
London
United Kingdom
EC1V 2NX

Email: contact@holywatersupply.com
Telephone: +6285190422874