Apexion Biolabs Privacy Policy

Last updated: 29 July 2026

Complete before publishing:

Legal company name: APEXION BIOLABS
Registered address: contact@apexionbiolabs.co.uk
Company number: 07457417955

This Privacy Policy applies to the Apexion BioLabs research-peptide store, Apexion One, Apexion+, Research Navigator and all related services available through apexionbiolabs.co.uk.

Health information is special-category personal data under UK data-protection law. Where Apexion One processes blood reports, biomarkers or connected wearable information, an ordinary lawful basis and an additional special-category condition are required. Explicit consent must be clear, specific, affirmative and capable of being withdrawn.

1. Who we are

Apexion BioLabs is operated by APEXION BIOLABS UK, trading as Apexion BioLabs.

In this policy, “Apexion”, “we”, “us” and “our” refer to that organisation.

We provide two main services:

Apexion BioLabs Store

An ecommerce website supplying research peptides, laboratory products, accessories and related research materials.

Apexion One

A private digital platform that enables users to upload blood reports, organise biomarkers, connect supported wearable services, view personal trends, use Research Navigator and access Apexion+ features.

Email: contact@apexionbiolabs.co.uk

2. What this policy explains

This policy explains:

What personal information we collect
How we collect it
Why we use it
The legal bases we rely on
Who we share information with
How long we keep information
How Apexion One health information is handled
How peptide-store information is handled
Your privacy rights
How to contact us or request deletion

3. Information collected through the peptide store

When you browse the store, create an account, place an order or contact us about a product, we may collect the following information.

Identity and contact information

Full name
Email address
Telephone number
Billing address
Delivery address
Account username
Password in securely hashed form

Order information

Products purchased
Product quantities
Order value
Order date
Order status
Shipping method
Tracking information
Returns, replacements and refunds
Discount codes
Customer notes
Batch or Certificate of Analysis enquiries

Research-use information

Where required, we may record:

Your confirmation that products are being purchased for research use
Business, organisation or laboratory information
Statements or confirmations made during checkout
Records needed to review suspicious, restricted or inappropriate orders

Payment information

Payment providers may process:

Card information
Bank-account information
Open Banking authorisation
Billing information
Payment authentication
Fraud-prevention information

Apexion normally receives only:

Transaction ID
Payment provider
Payment status
Amount paid
Refund status
Subscription or standing-order status

We do not normally receive or store your complete card number, online-banking login information or full bank-account credentials.

Customer-service information

We may collect:

Emails and contact-form messages
WhatsApp or telephone enquiries
Product questions
Order complaints
Delivery enquiries
Returns and refund communications
Batch, purity or COA enquiries
Records of how an enquiry was resolved

4. Information collected through Apexion One

When you register for or use Apexion One, we may collect:

Account information

First and last name
Email address
Password in securely hashed form
Membership plan
Login history
Security records
Account preferences
Consent choices
Account-deletion requests

Blood-report and biomarker information

You may choose to provide:

PDF blood reports
JPG, JPEG, PNG, HEIC or HEIF screenshots and photographs
Biomarker names
Biomarker values
Units
Reference ranges
Laboratory flags
Test dates
Laboratory names
Report titles
Notes
Historical results
Trends and comparisons

Health measurements

You may also provide or import:

Weight
Body-fat percentage
Waist measurement
Blood pressure
Steps
Resting heart rate
Heart-rate variability
Sleep information
Other supported health measurements

Connected-source information

Where you connect an authorised provider, Apexion may receive information from:

Google Health and Fitbit
Apple Health exports
The Apexion One iPhone companion application
Oura
Garmin
Other integrations displayed inside Apexion One

You choose whether to connect these services.

5. Separation between the peptide store and Apexion One

Apexion BioLabs operates both the research-peptide store and Apexion One, but we treat the information used by each service separately.

We do not use blood reports, biomarkers, wearable data or other Apexion One health information to:

Recommend peptide products
Decide which peptides you should purchase
Personalise peptide advertising
Target marketing based on health information
Determine a dosage, protocol or treatment
Make medical diagnoses
Make decisions about eligibility, credit or insurance
Sell products based on a user’s health condition

Peptide-order history is not automatically used to interpret blood-test results or produce health recommendations.

Apexion One is an organisational and educational platform. It is not intended to diagnose, treat, cure or prevent any medical condition.

6. How we collect information

We collect information:

Directly from you
When you create an account
When you place an order
When you upload a report or image
When you enter or confirm a biomarker result
When you connect an authorised health provider
From payment providers
From delivery and fulfilment providers
From cookies and similar technology
From customer-support communications
Through OCR, document extraction and optional AI processing
Through security and website-performance logs

7. How and why we use information

Store accounts and orders

We use identity, contact, order and delivery information to:

Create and manage customer accounts
Process orders
Arrange delivery
Provide tracking information
Handle returns, refunds and replacements
Answer product and order questions
Maintain accounting and tax records

Our usual lawful bases are performance of a contract and compliance with legal obligations.

Payment processing

We use transaction information to:

Confirm payment
Process refunds
Prevent duplicate transactions
Manage Apexion+ memberships
Detect fraud
Maintain financial records

Our usual lawful bases are contract, legal obligation and legitimate interests.

Customer support

We use contact and communication information to:

Respond to enquiries
Investigate complaints
Resolve delivery or account problems
Maintain service records

Our usual lawful bases are contract and legitimate interests.

Store security and fraud prevention

We may use technical, order and payment information to:

Protect the website
Prevent fraudulent orders
Detect misuse
Enforce purchase restrictions
Investigate suspicious activity
Protect our legal rights

Our usual lawful bases are legitimate interests and legal obligation.

Apexion One

We use account, report, biomarker and connected-health information to:

Store reports privately
Extract and organise biomarkers
Display trends and history
Update the Dashboard and Timeline
Calculate engagement and data-completeness scores
Generate user-requested summaries
Synchronise authorised health sources
Provide Research Navigator functionality
Deliver Apexion+ features

Health information is processed only where an appropriate lawful basis and special-category condition apply. Where we rely on explicit consent, it must be separate, informed and withdrawable.

Service improvement

We may use technical and aggregated information to:

Fix errors
Improve usability
Monitor performance
Protect system security
Understand which non-health features are used

We do not use identifiable Google Health information for advertising.

8. Google Health and Fitbit data

When you connect Fitbit through Google Health, Apexion One may request read-only access to:

Google Health profile information
Activity and fitness information
Health metrics and measurements
Sleep information

We use this information to provide visible Apexion One features such as:

Connected-source cards
Personal health measurements
Trend charts
Dashboard information
Timeline events
User-requested summaries

Apexion requests only permissions required for active user-facing functionality.

We do not:

Sell Google Health or Fitbit information
Use it for advertising
Use it for targeted peptide marketing
Transfer it to data brokers
Use it for credit or lending decisions
Use it to recommend peptide purchases
Permit staff to view it except where specifically authorised, required for security or legally required

Google requires developers to request only necessary permissions, provide an in-product disclosure, obtain affirmative consent, explain deletion controls and restrict data use to prominent user-facing features.

The use of information received from Google Health API and Developer Tools will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements.

You may disconnect Google Health from Apexion One at any time. Disconnecting stops future synchronisation. You may separately delete previously imported information.

9. Blood-report extraction, OCR and AI

Apexion One may use document extraction, OCR and artificial intelligence to detect:

Biomarker names
Values
Units
Reference ranges
Laboratory flags
Report dates
Laboratory information

Detected information is shown to you for review before saving.

You may:

Correct a value
Change a unit
Remove a detected result
Reject a result
Cancel the report
Save only the values you confirm

Where an external AI provider is used:

We request consent before sending health-related information
We aim to send only information needed for the selected feature
The provider may receive extracted text or confirmed structured values
The original report is not sent unless the interface clearly explains this and you consent
AI output may contain errors
AI summaries are informational and organisational, not medical advice

Google Health information will not be transferred to an AI provider unless that use is clearly disclosed, necessary for a visible feature and separately authorised by the user.

10. Marketing

Where permitted, we may send:

Product announcements
Research-store updates
Stock notifications
Discount information
Apexion One updates
Apexion+ announcements
Educational content
Abandoned-cart reminders

You can unsubscribe at any time.

We do not use blood reports, biomarkers, wearable information or Google Health data to target marketing.

We may retain a minimal suppression record after you unsubscribe so that we do not send further marketing to that address.

11. Cookies and website technology

We may use cookies and similar technologies for:

Essential purposes

Account login
Shopping basket
Checkout
Website security
Session management
Cookie preferences

Optional purposes

Website analytics
Performance monitoring
Marketing measurement
Advertising, where permitted and consented to

Non-essential cookies should not be activated until the user has made an appropriate cookie choice.

A separate Cookie Policy should explain the cookies used on the website.

12. Who we share information with

We may share information with service providers where necessary to operate the business.

Ecommerce and website providers

WordPress
WooCommerce
Hosting providers
Website-security providers
Backup providers

Payment providers

Fena
Elite Pay
Banks and Open Banking providers
Fraud-prevention providers

Payment providers process information under their own privacy notices.

Delivery and fulfilment providers

We may provide delivery companies with:

Name
Delivery address
Telephone number
Email address
Parcel and tracking information

They receive only information necessary to fulfil and deliver an order.

Connected-health providers

Google Health and Fitbit
Apple
Oura
Garmin

Information is exchanged only after you initiate or authorise the connection.

AI and extraction providers

Where you enable an AI feature, relevant information may be processed by a configured provider such as Google Gemini.

Email and communication providers

We may use providers to send:

Order confirmations
Password-reset emails
Membership messages
Delivery information
Customer-support replies
Marketing messages where permitted

Professional advisers and authorities

Information may be disclosed to:

Lawyers
Accountants
Insurers
Regulators
Courts
Law-enforcement agencies
Tax authorities

This will occur only where reasonably necessary or legally required.

We do not sell personal information, peptide-order information, biomarker information or connected-health data.

13. International transfers

Some providers may process information outside the United Kingdom.

Where required, we use an appropriate transfer mechanism, which may include:

A UK adequacy regulation
The UK International Data Transfer Agreement
The UK Addendum to approved standard contractual clauses
Another legally recognised safeguard

You may contact us for further information about relevant transfer safeguards.

14. Data retention

We keep information only for as long as needed for the relevant purpose.

Information	Intended retention
Store account information	While the account remains active
Peptide and product orders	Up to six years where required for tax, accounting or legal purposes
Billing and transaction records	Up to six years where legally required
Delivery and tracking records	Normally up to three years
Returns and customer-support records	Normally up to three years after closure
Marketing preferences	Until withdrawn, plus a suppression record
Apexion One account information	While the account remains active
Blood reports and biomarker data	Until deleted by the user or the account is closed
Connected-health information	Until deleted, consent is withdrawn or the account is closed
OAuth access and refresh tokens	Until disconnection, revocation or account closure
AI summaries	Until deleted or the associated account is closed
Security and access logs	Normally up to twelve months
Backups	Removed through the normal backup-rotation schedule

These periods should be confirmed against Apexion’s actual hosting, accounting, ecommerce and backup arrangements before publication.

15. Security

We use technical and organisational controls designed to protect personal information, including:

HTTPS encryption
Secure password hashing
Role-based access controls
Private report storage
Restricted administrative access
Secure OAuth tokens
Database protections
Security monitoring
Backups
Software updates
Payment-provider security controls

No online system can guarantee absolute security.

Customers should protect their account passwords and email accounts and notify us promptly of suspected unauthorised access.

16. Your privacy rights

Depending on the circumstances, you may have the right to:

Request access to your personal information
Correct inaccurate information
Request deletion
Restrict processing
Object to processing
Receive portable information
Withdraw consent
Object to direct marketing
Request information about automated processing
Complain to a data-protection authority

These rights are not always absolute and legal exceptions may apply.

Send requests to: info@apexionbiolabs.co.uk

We may need to verify your identity before completing a request.

17. Deleting information

Store information

You may request deletion of your store account. We may retain order, payment and tax records where legally required.

Apexion One information

Inside Apexion One, you may be able to:

Delete reports
Delete biomarker results
Disconnect health providers
Delete imported health information
Revoke Google Health access
Delete your Apexion One account

When an account is deleted, information is removed or anonymised from active systems unless retention is required by law. Residual copies may remain temporarily in protected backups until the backup cycle expires.

18. Children

The Apexion BioLabs store and Apexion One are intended for adults aged 18 or over.

We do not knowingly create accounts for or collect health information from children.

Where we become aware that an account belongs to someone under 18, we may suspend or delete it, subject to legal requirements.

19. Research products

Products sold through Apexion BioLabs are presented and supplied for research purposes in accordance with the descriptions and notices displayed on the website.

Information collected during an order may be used to:

Confirm the order
Review compliance with store policies
Respond to research or batch enquiries
Prevent fraud or misuse
Meet legal or regulatory obligations

We do not use Apexion One health information to determine whether a research product is suitable for an individual.

20. Third-party websites

The website may link to:

Payment pages
Delivery providers
Laboratory reports
Certificates of Analysis
Research sources
Connected-health services
Other external websites

Those third parties operate under their own privacy policies. Apexion is not responsible for an independent third party’s processing after you leave our services.

21. Complaints

Please contact us first:

Email: contact@apexionbiolabs.co.uk

You may also complain to the UK Information Commissioner’s Office where you believe your personal information has been processed unlawfully.

22. Changes to this policy

We may update this policy when:

Store operations change
New payment providers are introduced
Apexion One features change
New wearable integrations are added
Data practices change
Legal requirements change