Legal
Privacy policy
Last updated 17 September 2026
Immortals Lab collects the minimum needed to confirm, deliver and invoice an order. This page says what that is, where it goes and how long we keep it.
What we collect
At checkout: your name, gender (for how we address you), WhatsApp number, e-mail if you give one, emirate, delivery address, a map link for the courier, optional delivery notes, how you heard about us, and whether you agreed to hear about new batches.
Your order itself: the compounds, strengths and pen options you chose, prices, discount code and the payment status.
Messages you send us on WhatsApp, and our replies, are stored by WhatsApp and, for order-related messages, in our order system so the team can follow the order.
We do not collect card numbers. Payment is taken by our payment provider on their own secure page; we receive only the confirmation that it succeeded.
What we use it for
To confirm and deliver your order, issue the invoice, book the courier, and answer you on WhatsApp.
To keep the records the UAE tax and company authorities require us to keep.
To tell you about new batches — only if you ticked that box, and you can ask us to stop at any time.
Who sees it
Our courier receives your name, number, emirate, address and map link — nothing else — to deliver the parcel.
Our invoicing system (Zoho), our payment provider (STRABL), our hosting and database providers (Vercel, Supabase) and WhatsApp (Meta) process the data on our behalf. Their servers may be outside the UAE.
We never sell or rent your details, and we do not share them with advertisers.
Cookies and analytics
The site sets no advertising or tracking cookies. Your browser remembers two things locally: that you confirmed your eligibility to enter the catalogue, and the details you typed at checkout so you do not retype them next time. Both can be cleared from your browser.
We use privacy-friendly, cookie-free page-view analytics to see which pages are visited. It does not identify you.
How long we keep it
Order and invoice records: as long as UAE tax and commercial law requires, currently at least five years after the financial year of the order.
Marketing consent: until you withdraw it.
Your rights
You can ask what we hold about you, ask us to correct it, ask us to stop marketing messages, or ask us to delete data we are not legally required to keep. Write to support@immortalslab.com or message us on WhatsApp.