Privacy Policy
Last updated: 24 April 2026
1. Who we are
This website (evolvdna.co.uk) is operated by SVIUK Ltd, trading as Evolv DNA.
- Registered office: 190 Queen Street, Withernsea, East Yorkshire, HU19 2LG, United Kingdom
- Companies House number: 08555933
- VAT number: GB 182 458 978
- ICO Data Protection registration: ZA352524
SVIUK Ltd is the data controller for the personal information collected on this website. If you have any questions about this policy or how we handle your personal information, please contact us at sales@evolvdna.co.uk.
2. What this policy covers
This policy explains what personal information we collect when you visit or buy from evolvdna.co.uk, why we collect it, how we use it, who we share it with, how long we keep it, and the rights you have over your information.
It applies to all personal information we process as data controller. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. Information we collect
When you place an order
(Whether as a registered customer or as a guest)
- Name, billing and delivery address, email address, telephone number
- Order details (products, quantities, prices)
- Payment confirmation details — we do not store full payment card details, which are handled directly by our payment provider
When you create an account
- The information above, plus any preferences or saved details you choose to store in your account
When you pass our age verification check
- Information required to confirm you are 18 or over. This may include details you provide directly or information obtained through a third-party age verification provider. Sensitive verification data (such as photo ID or date of birth) is not retained on our servers.
When you contact us
- Any information you provide in your message (email, contact form, phone)
When you leave a review
- Your name (or display name), review content, and purchase details required to verify the review was by a genuine customer
When you visit the site
- Anonymous analytics data about how pages are used. We run our own self-hosted, cookieless analytics that do not track individuals across the web and do not store any cookies on your device.
- Technical data necessary for the site to function (IP address for security, session data)
4. How we use your information and the lawful basis for doing so
| Purpose |
Lawful basis |
| Processing and fulfilling your order | Contract |
| Managing your customer account | Contract |
| Age verification | Legal obligation |
| Responding to your queries | Legitimate interest |
| Meeting our legal and tax obligations (invoicing, VAT, accounting) | Legal obligation |
| Direct marketing about similar products to existing customers (soft opt-in) | Legitimate interest |
| Direct marketing where you have specifically subscribed | Consent |
| Fraud prevention and site security | Legitimate interest |
| Understanding site usage (anonymous analytics) | Legitimate interest |
| Managing warranty and returns | Contract / Legitimate interest |
You can opt out of marketing at any time by using the unsubscribe link in any marketing email, or by contacting us directly.
5. Who we share your information with
We share personal information only with the following categories of recipient, and only to the extent necessary:
- Payment providers (currently Viva Wallet) — to process your payment. Your card details are entered directly with the payment provider and are not stored by us.
- Shipping carriers (Royal Mail, DHL, UPS) — we share your name, delivery address, and phone number so they can deliver your order.
- Our IOSS fiscal representative — for EU orders, we share order information required for VAT reporting under the EU Import One-Stop Shop scheme.
- Age verification provider — to confirm eligibility to purchase. Sensitive verification data is held by the verification provider, not us.
- Review platform (TrustMate) — after purchase, we may share your email and order details with TrustMate so they can invite you to leave a review. You can decline.
- HMRC, regulators, and law enforcement — where required by law.
- Professional advisers (accountants, legal advisers) — where reasonably required in the course of our business.
We do not sell your personal information to third parties.
6. International transfers
Some of our processors may be based outside the UK. Where this is the case, we ensure that transfers are made under the UK GDPR's international transfer safeguards, including the International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or on the basis of a UK adequacy decision.
7. How long we keep your information
- Transaction records (orders, invoices, name, address, order details): 6 years after the last transaction, to comply with HMRC VAT record-keeping requirements.
- Customer account data: while your account is active, and for 6 years after your last transaction. You can close your account at any time.
- Marketing data: until you unsubscribe, or for a reasonable period of inactivity (typically 2 years without engagement), whichever is sooner.
- Age verification records: in accordance with our age verification provider's retention policy; typically a confirmation of pass/fail only, not the underlying verification documents.
- Correspondence: typically 2 years after the matter is resolved.
- Anonymous analytics: aggregated, non-identifying site-usage data, retained for up to 24 months on our own infrastructure.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Rectify inaccurate or incomplete information
- Erase your information in certain circumstances
- Restrict how we process your information
- Portability — receive your information in a portable format, or have it transferred to another controller
- Object to processing based on legitimate interest, including direct marketing
- Withdraw consent where consent is our lawful basis
To exercise any of these rights, please email sales@evolvdna.co.uk. We will respond within one month.
9. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
10. Cookies
This site uses a minimal number of essential cookies required for functionality (for example, to remember items in your basket). We do not use third-party advertising cookies or cross-site tracking cookies. Our analytics is self-hosted on our own infrastructure and runs in cookieless mode — no analytics cookies are stored on your device.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last changed. Material changes will be notified to account holders by email where appropriate.