Bag0
Education and safety boundary

Curiolab sells educational and recreational STEM kits. Products are not intended for diagnosis, treatment, clinical use or professional testing. Adults must order and supervise children according to each product guide.

PRIVACY / DATA FIELD GUIDE

Privacy Policy

Last updated: 21 July 2026

Who is responsible

PISCES SCIENTIFIC LTD, at Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP, United Kingdom, is the data controller for information processed through Curiolab. Privacy enquiries may be sent to support@piscesscii.shop.

What we collect and where it comes from

We collect order and account details you provide: adult customer name, email, phone, billing and delivery address, country, order contents, support messages, returns correspondence and membership status. School-order forms may include organisation setting, quantity, ages and budget. We receive transaction identifiers, payment status, fraud signals and limited billing details from payment providers; we do not receive full card numbers.

Technical data may include IP address, device and browser information, security events, cookie choices and basic site interaction data. Delivery carriers return tracking and delivery events. We do not intentionally collect children’s personal information.

Collection sources

We collect information directly from adults when they use checkout, create or manage a membership, enter a billing or shipping address, submit the contact form or bulk school-order form, request support, or start a return. Payment providers send us payment status and transaction references, delivery carriers send tracking and delivery events, and our hosting and security systems produce limited technical logs.

For order fulfilment, we use the shipping address, recipient contact details, purchased items and delivery instructions to prepare the parcel, select a carrier, provide tracking and handle delivery questions. Carriers receive only the information needed to deliver the order.

Why we use it and legal bases

We use order, billing, shipping address, delivery and return data for order fulfilment and to perform our contract; account and membership data to deliver subscribed benefits; security and fraud data for legitimate interests and legal compliance; and support details to answer requests. Consent supports optional communications, non-essential cookies and form follow-up where required. Tax, accounting, consumer-protection and dispute records are processed to meet legal obligations.

Who we share it with

Necessary data may be shared with hosting and database processors, Stripe or PayPal for payment, email providers for receipts and support, analytics providers where consented, and delivery carriers for fulfilment. Payment providers process payment data under their own notices and Curiolab never handles full card numbers. We may share data with professional advisers, regulators or authorities when legally required.

No AI provider receives order, payment, address or support data through the storefront.

International transfers

Our worldwide store uses processors that may handle data outside the United Kingdom or European Economic Area. Where required, we use adequacy regulations, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses and supplementary safeguards.

How long we keep it

Contact, school-order and abandoned-checkout leads are kept for no more than 24 months. Order, refund, accounting and tax records may be retained for up to 7 years. Support records are normally kept for 24 months after resolution. Security logs are generally kept for 12 months. Cookie preferences persist only for the stated cookie duration. We delete or anonymise information when it is no longer required.

GDPR and CCPA rights

UK and EEA users may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting prior processing. You may complain to the UK Information Commissioner’s Office or your relevant supervisory authority.

California residents may request access, correction or deletion and information about categories collected and disclosed. We do not sell personal information and do not share it for cross-context behavioural advertising. We do not discriminate for exercising privacy rights. To make a request, email us; we will verify identity proportionately.

Do Not Sell or Share

Curiolab does not sell personal information or share it for cross-context behavioural advertising. Requests or questions may be sent to support@piscesscii.shop with “Privacy request” in the subject.

Cookies and analytics

Essential cookies support security, admin authentication, checkout continuity and privacy choices. Session storage keeps the bag on the current device and is not a long-term tracking cookie. Optional analytics or marketing cookies operate only where legally required consent has been given. See the Cookie Policy for categories and controls.

Security

We apply access controls, encrypted transport, provider security controls, secret separation and data minimisation. No internet system is risk-free; we investigate incidents and notify affected people and authorities where law requires.

Automated decisions and children

We do not make decisions producing legal or similarly significant effects using automated processing. The Curiosity Finder is a transparent rule-based product filter. Adults place orders. Users under 13 must not submit information; users aged 13–17 need guardian permission and products remain subject to adult supervision.

Contact

PISCES SCIENTIFIC LTD
Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP, United Kingdom
support@piscesscii.shop
+44 7106320488