Science Engineered Limited
Last updated: 13 November 2026
1. Who we are
Science Engineered Limited ("Science Engineered", "we", "us", "our") designs, makes and sells research equipment and related services. This notice explains how we use personal data when you visit scienceengineered.com, contact us, ask for a quote, buy from us, or use our software tools, including ValidLab.
We are the data controller for your personal data.
- Company: Science Engineered Limited, registered in England and Wales, company number 13873386
- Registered office: 1 Dukes Passage, Brighton, East Sussex, BN1 1BS
- Email for data protection matters: contact@scienceengineered.com
We are a small company and have not appointed a Data Protection Officer. Our director is responsible for data protection and can be contacted at contact@scienceengineered.com.
2. The personal data we collect and why
Enquiries, quotes and consultations
Your name, email address, organisation, phone number if you give it and the details of your enquiry, including any files you upload with a quote request.
- Why: to answer you, prepare quotes and keep a record of what we discussed.
- Lawful basis: our legitimate interests in responding to enquiries and running our business (UK GDPR Article 6(1)(f)), or steps you have asked us to take before entering a contract (Article 6(1)(b)).
Orders
Your name, email address, phone number, delivery and billing address, organisation and purchase order number if relevant, the products you buy and the payment status. Card payments are entered directly into Stripe's secure checkout and we never see or store your full card number.
- Why: to process, deliver and support your order, handle returns and warranty claims and keep our accounts.
- Lawful basis: performance of a contract (Article 6(1)(b)) and our legal obligation to keep tax and accounting records (Article 6(1)(c)).
Invoice accounts
For institutions that buy on invoice terms: the names and contact details of the people we deal with in purchasing and finance.
- Why: to set up and manage your account and collect payment.
- Lawful basis: performance of a contract (Article 6(1)(b)) and our legitimate interests in managing business accounts (Article 6(1)(f)).
ValidLab and other software tools
If you use ValidLab or our other online tools, we process the settings and data you enter so that the tool can produce your results. If you use the ValidLab assistant, the text you type is sent to an AI provider to generate an answer (see section 4).
- Why: to provide the tool you asked to use.
- Lawful basis: performance of a contract or the steps you ask us to take (Article 6(1)(b)).
- Please do not enter personal data about patients, research participants or other people into ValidLab or its assistant. The tools are designed for anonymised or summary data only.
Marketing
We send product news and updates by email only if you have agreed, or, for existing business customers, where it relates to similar products and you can opt out at any time. Every email has an unsubscribe link.
- Lawful basis: consent (Article 6(1)(a)) or our legitimate interests in telling customers about our products (Article 6(1)(f)), in line with the Privacy and Electronic Communications Regulations 2003.
Website use
Our website stores small amounts of information on your device that it needs to work, such as the contents of your basket. We do not use analytics or advertising cookies. See our Cookie Notice.
3. Where your data comes from
Mostly from you. If your organisation places an order or sets up an account, we may receive your contact details from a colleague.
4. Who we share your data with
We do not sell your personal data. We share it only with the providers below, who act on our instructions under written contracts and only as much as they need.
| Provider | What they do for us | Where |
|---|---|---|
| Stripe | Card payments and refunds | United Kingdom and United States |
| Royal Mail, DPD, DHL or UPS | Delivering your order | United Kingdom and the destination country for international orders |
| Our email hosting provider (20i Limited) | Business email | United Kingdom |
| Our accounting software provider | Invoicing and tax records | United Kingdom or European Economic Area |
| Telegram | Sends our team an instant alert when a new order, quote request or enquiry arrives. The alert contains only your name and the subject of your request | Outside the United Kingdom |
| AI provider for the ValidLab assistant: DeepSeek, with OpenAI as an alternative | Generates answers to questions typed into the ValidLab assistant. Only the text you type and the tool context are sent | China (DeepSeek); United States (OpenAI) |
Our website and order records are hosted on our own equipment in the United Kingdom.
We may also share data with our professional advisers, insurers, or the police, a court or a regulator where the law requires it.
5. Transfers outside the UK
Where a provider is outside the UK, we make sure the transfer is protected:
- The European Economic Area is covered by UK adequacy regulations.
- Stripe is certified under the UK Extension to the EU-US Data Privacy Framework.
- For OpenAI we rely on the UK Addendum to the EU Standard Contractual Clauses in its data processing terms.
- For other providers we use the International Data Transfer Agreement or the UK Addendum where they apply.
- China is not covered by UK adequacy regulations. This is why we ask you not to enter personal data into the ValidLab assistant and why we do not send your name, email or account details to the AI provider.
6. How long we keep your data
| Data | How long |
|---|---|
| Orders, invoices and payment records | 6 years from the end of the financial year they relate to, for tax and accounting law |
| Warranty and returns records | 6 years from delivery |
| Enquiries and quotes that do not lead to an order | 2 years from the last contact |
| Data you save in ValidLab or our other tools | Until you delete it or close your account, then deleted within 30 days |
| Marketing list | Until you unsubscribe |
7. Security
Data is encrypted in transit. Card payments are handled by Stripe, which is certified to PCI DSS Level 1. Access to our systems is limited to the people who need it.
If a data breach creates a risk to you, we will tell the ICO within 72 hours of finding out and, where the risk is high, we will tell you without undue delay.
8. Your rights
You have the right to ask for a copy of your data, to have it corrected, to have it deleted where we no longer need it, to restrict or object to our use of it, to receive it in a portable format, to withdraw consent at any time and to stop marketing at any time.
Email contact@scienceengineered.com to use your rights. We will reply within one month, or within three months for complex requests if we tell you within the first month. There is normally no charge.
9. Complaints about how we use your data
Please tell us first at contact@scienceengineered.com. We will acknowledge your complaint within 30 days, look into it properly and tell you the outcome.
You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
10. Changes
We will update this notice when our practices change. The date at the top shows the latest version.