Privacy policy

Last updated: 29 April 2026

1. WHO WE ARE

This website and online store are operated by ARO Labs Ltd (we, us, our). NOQA is a product brand owned and operated by ARO Labs Ltd.

We provide access to our website, products, content, features, tools, and services (the Services) to you, the customer. Our online store is hosted on Shopify, which provides the ecommerce platform that allows us to sell our products.

For the purposes of UK data protection law, ARO Labs Ltd is the data controller of your personal information.

ICO Registration Number: ZC125448

Email: support@noqa.co.uk

If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs how your personal information is handled.

2. WHAT PERSONAL INFORMATION WE COLLECT

When we refer to “personal information”, we mean information that identifies you or can reasonably be linked to you.

2.1 Information you provide directly

We may collect personal information when you:

Place an order or attempt to purchase a product
Contact us for customer support
Subscribe to marketing communications
Create an account (if enabled)

This information may include:

Name
Billing and delivery address
Email address
Phone number (if provided)
Order and transaction details
Communications with us

2.2 Information collected automatically

When you visit our website, we may automatically collect:

IP address
Device, browser, and operating system information
Pages viewed and interactions with the site
Referring URLs
Cookie and tracking data

This data helps us understand how our store is used and improve performance.

We do not intentionally collect special category data (such as health or medical data).

3. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes:

3.1 To provide and operate the Services

Processing payments and orders
Shipping and fulfilment
Managing returns and refunds
Communicating about orders and accounts

3.2 Customer support and communication

Responding to enquiries
Handling complaints or issues
Sending service-related messages (order confirmations, shipping updates)

3.3 Marketing and advertising

Where permitted by law and your preferences, we may use your information to:

Send marketing emails or messages
Show relevant advertisements via platforms such as Google, Meta (Facebook/Instagram), and TikTok

Marketing communications are sent only where you have consented or where permitted under applicable law. You can unsubscribe at any time.

3.4 Security and fraud prevention

Detecting fraudulent or abusive activity
Protecting the security of our store, customers, and payment systems

3.5 Legal and regulatory obligations

Complying with legal, accounting, and tax requirements
Responding to lawful requests from authorities
Enforcing our Terms of Service and policies

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

Enable essential site functionality
Analyse website usage and performance
Support advertising and marketing activities

Where required by law, we obtain your consent before using non-essential cookies.

You can manage or withdraw your cookie preferences at any time via our cookie banner or your browser settings.

5. MARKETING COMMUNICATIONS

Transactional emails (order confirmations, shipping updates) are sent as part of providing our Services.
Marketing emails or messages are sent only if you have opted in or where permitted under applicable law.

You can unsubscribe from marketing communications at any time by using the link in our emails or by contacting us.

6. WHO WE SHARE YOUR PERSONAL INFORMATION WITH

We may share your personal information with trusted third parties only where necessary to operate our business, including:

Shopify, which hosts our store and provides ecommerce infrastructure
Payment processors, to securely process transactions
Fulfilment and delivery partners, to ship orders
Marketing and analytics providers, where consent has been given
Professional advisers and authorities, where legally required

We do not sell your personal information.

Some third parties, including Shopify, may act as independent data controllers for certain processing activities. Their handling of your data is governed by their own privacy policies.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers (including Shopify) may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

UK adequacy regulations
Standard Contractual Clauses approved for UK use

8. DATA RETENTION

We retain personal information only for as long as necessary to:

Fulfil orders and provide Services
Meet legal, accounting, and regulatory obligations
Resolve disputes and enforce agreements

When personal information is no longer required, it is securely deleted or anonymised.

9. YOUR RIGHTS

Under UK data protection law, you have the right to:

Request access to your personal information
Request correction of inaccurate or incomplete data
Request deletion of your personal information
Object to or restrict processing in certain circumstances
Withdraw consent where processing is based on consent
Request data portability

You may exercise these rights by contacting support@noqa.co.uk .

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. CHILDREN’S PRIVACY

Our Services are not directed at children, and we do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

11. SECURITY

We take reasonable technical and organisational measures to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.