Legal
Privacy Policy
How VaultLabs collects, uses, retains, and shares personal data. Version 2.0.
Last updated: 2026-08-06 · Version 2.0 · Effective 2026-01-01
Data controller identity
VaultLabs For Laboratories Chemicals Trading L.L.C is the data controller for personal data collected through vaultlabs.shop. Privacy contact: support@vaultlabs.shop. Registered address: Office A-34, Fronds Building, Sheikh Zayed Road, Al Quoz Industrial Area 3, Dubai, UAE. This policy is intended to align with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, as amended — "UAE PDPL") where applicable.
Data we collect
(1) Checkout and order data — name, email, phone, delivery address, emirate, products, quantities, prices, payment status, delivery option, order notes; (2) Account data — login credentials, saved addresses, order history; (3) Verification data — research purchaser declarations, age/research gate acknowledgements, wholesale applications, institutional affiliation, laboratory details, identity or import documents you submit; (4) Payment data — transaction references and status from Tamara, Apple Pay (we do not store full card numbers); (5) Device and technical data — IP address, browser/device type, pages viewed, referral URLs, cookie identifiers; (6) Communications — email, WhatsApp, Telegram messages, and support tickets; (7) Marketing preferences — opt-in/opt-out records where applicable.
Service providers and recipients
We share data only as needed to operate the service: payment processing (Tamara, Apple Pay); courier and logistics partners for delivery; email (Resend); hosting (Vercel); analytics/advertising (Google Analytics / Google Ads) where enabled; professional advisers or authorities when required by law. We do not sell personal data. Processors are engaged under appropriate contractual or operational safeguards.
WhatsApp and Telegram
If you contact us via WhatsApp or Telegram, we process your messages, phone/username identifiers, and any attachments you send to respond to enquiries, fulfil orders, and maintain support records. These platforms operate under their own privacy policies. Avoid sending sensitive verification documents via messaging unless we explicitly request it — prefer email for documentary evidence.
Purposes and lawful bases
We process data to: perform contracts (order fulfilment); comply with legal obligations (tax, accounting, regulatory requests); pursue legitimate interests (fraud prevention, research-use verification, service improvement, dispute defence) balanced against your rights; and, where required, based on consent (non-essential cookies, optional marketing). Research verification processing supports our research-use-only model and risk management.
Retention periods
Order and checkout agreement records: 7 years. Verification documents: up to 7 years where provided. Support correspondence: 3 years after closure where needed for quality or legal records. Marketing preferences: 24 months unless you opt out sooner. Analytics data: up to 26 months. Security logs: up to 12 months. We delete or anonymise data when no longer necessary, subject to legal holds.
International transfers
Some processors (payment, hosting, email, analytics) may process data outside the UAE. Where required, we implement appropriate safeguards consistent with applicable UAE data protection requirements, including contractual protections with processors.
Marketing opt-in and opt-out
We send transactional messages about orders without separate marketing consent. Promotional emails or messages are sent only where permitted by law and your preferences. You may opt out of direct marketing at any time via unsubscribe links or by emailing support@vaultlabs.shop.
Your rights
Under the UAE PDPL where applicable, you may request access, correction, erasure, restriction, portability, or object to certain processing, and withdraw consent where processing is consent-based. You may lodge a complaint with the UAE Data Office where applicable. Contact support@vaultlabs.shop to exercise rights — we may verify your identity and respond within statutory timeframes.
Data breach procedure
We maintain incident response procedures. Where a personal data breach is likely to pose a risk and notification is required by applicable law, we will notify the relevant authority and affected individuals in accordance with UAE PDPL requirements.
Children and minors
Our services are intended for qualified research buyers aged 21 or older. We do not knowingly collect personal data from children or minors.
Policy updates
Version 2.0 · Last updated 2026-08-06. Material changes will be posted on this page.
These pages provide the current commercial policies of VaultLabs.shop and are not a substitute for independent legal advice.