Privacy & Cookie Policy
Last updated: October 2026 · Applies to https://www.madeinlab.uk
1. Who We Are (Data Controller)
This Privacy & Cookie Policy explains how Made In Lab Perfumes UK (“we”, “us”, “our”), operating at https://www.madeinlab.uk as part of the BeautyOK Europe network, collects, uses, and safeguards personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Data Protection Contact Email: contact@madeinlab.uk
2. What Data We Collect & Lawful Basis (Article 6 UK GDPR)
- Contact Form Enquiries (
/contact/): When you submit our contact form, we collect your name, email address, enquiry topic, optional perfume reference, and message content. Lawful basis: Your explicit consent (Art. 6(1)(a) UK GDPR) and our legitimate interest in responding to customer enquiries (Art. 6(1)(f) UK GDPR). - AI Dupe Assistant Prompts (
/ai-dupe-assistant/): When you ask our AI Fragrance Sommelier for scent recommendations, your text prompt is processed via Google Gemini API to generate a fragrance recommendation. Please do not enter sensitive personal data into the fragrance search or chat box. Lawful basis: Legitimate interest in providing an interactive scent finder (Art. 6(1)(f) UK GDPR). - Anti-Spam & Security Rate-Limiting: To protect our contact form and AI endpoint from automated bot abuse, we temporarily process a one-way cryptographic hash (SHA-256) of your IP address in short-lived server cache files (retained for up to 60 minutes). Lawful basis: Legitimate interest in network and information security (Art. 6(1)(f) UK GDPR).
- Website Analytics & Outbound Attribution (GA4): We use Google Analytics 4 (Tag ID:
GT-K5M2TFPW) and UTM link parameters (utm_source=madeinlab.uk) to understand aggregate visitor traffic and measure referrals to our official UK store partner BeautyShopOK.co.uk.
3. Cookies & Browser Storage We Use
| Name | Type / Provider | Purpose | Expiry |
|---|---|---|---|
pfAiWidgetDismissed / pfAiFabDismissed |
Session Storage (Strictly Necessary UI) | Remembers if you closed the floating AI Dupe Assistant prompt during your current browser tab session so it does not pop up again. | End of browser session |
_ga, _ga_* |
Google Analytics 4 (Analytics) | Distinguishes unique visitors and tracks anonymous page views and outbound store clicks in aggregate. | Up to 13–24 months |
4. Data Sharing & International Transfers
We never sell or rent your personal data to third parties. Data is shared only with trusted service providers strictly necessary to operate the Website: our web hosting infrastructure (LH.pl in the European Economic Area — covered by UK adequacy regulations) and Google (Google Analytics 4 & Google Gemini API for non-personal scent queries). When you click through to purchase perfumes on BeautyShopOK.co.uk, any personal data you provide during checkout is governed by BeautyShopOK.co.uk’s own Privacy Policy.
5. Data Retention
Contact form enquiries sent to contact@madeinlab.uk are retained only for as long as necessary to resolve your enquiry and for up to 12 months thereafter for customer service continuity, unless you request earlier deletion. Anti-spam rate-limiting hashes expire automatically within 1 hour.
6. Your Rights Under UK GDPR
Under the UK GDPR, you have the right to:
- Request access to the personal data we hold about you (Subject Access Request);
- Request rectification of inaccurate data or erasure (“right to be forgotten”);
- Restrict or object to processing based on legitimate interests;
- Withdraw your consent at any time by emailing contact@madeinlab.uk.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at https://ico.org.uk/ (Tel: 0303 123 1113).