Privacy policy
Last updated 5 October 2026
This policy explains what personal data we collect when you use R3TA.pro, why we collect it, and your rights. The data controller is the company named at the foot of every page of this website. You can contact us at the support email address shown there.
What we collect
Data | When | Why | Legal basis |
|---|---|---|---|
Name, email, phone (optional), delivery address | When you order | To process, deliver and support your order | Performance of contract |
Order details and your research-use and age declarations, with date, IP address and browser | When you order | To document the sale and meet our legal duties | Legal obligation; legitimate interest |
Account email and password (stored as a secure hash) | When you create an account | To let you sign in and see your orders | Performance of contract |
Payment status and PayPal transaction reference | When you pay | To match payments to orders and handle refunds | Performance of contract |
Analytics data (pages viewed, device type, approximate location) | Only if you accept analytics cookies | To understand how the site is used and improve it | Consent |
Security check result (Cloudflare Turnstile) | When you sign up, sign in or reset a password | To protect accounts from bots | Legitimate interest |
We do not see or store your full card details. Card and PayPal payments are processed by PayPal.
Who we share data with
- PayPal — to process payments (PayPal is an independent controller for your payment data).
- Carriers — your name, address and phone, to deliver your order.
- Google (Google Analytics) — only if you accept analytics cookies.
- Cloudflare — security checks (Turnstile) and DNS.
- Our hosting provider — which stores the website and its database.
We do not sell your personal data. We share data with authorities only where the law requires it.
Cookies
Cookie | Purpose | Duration |
|---|---|---|
`r3ta_ruo_ok` | Remembers that you confirmed age and research use | 1 year |
`r3ta_consent` | Remembers your cookie choice | 6 months |
`payload-token` | Keeps you signed in to your account | Up to 14 days |
Google Analytics (`_ga`, `_ga_*`) | Analytics — only after you accept | Up to 2 years |
Until you accept analytics cookies, Google Analytics runs in a cookieless mode and stores nothing on your device. You can change your choice at any time by deleting the r3ta_consent cookie in your browser; the cookie bar then appears again.
How long we keep data
- Order and invoice records: 6 years, to meet tax and accounting rules.
- Account data: until you ask us to delete your account (orders are kept as above).
- Analytics data: up to 2 months (Google Analytics default retention).
International transfers
Some providers (such as Google, PayPal and Cloudflare) may process data outside the UK and EU. They do so under recognised safeguards such as standard contractual clauses.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To use these rights, email us. You also have the right to complain to a data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk), or the authority in your EU country.
Changes
We may update this policy. The date of the latest update is shown at the top of this page.