Privacy Policy

Last updated: 10 October 2026

1. Data Controller and Contact Details

The entity responsible for processing personal data through this website is:

LABSTELLAR LIMITED
RC Number: 9512047
No. 24, Shtinoye Street
Papa Ajao, Mushin
Lagos State, Nigeria
Telephone: +234 816 331 7936
Email: info@labstellar-freezer.com
Website: https://labstellar-freezer.com

LABSTELLAR LIMITED operates an international B2B online shop specialising in laboratory freezers, ultra-low temperature equipment and related products.

We process personal data in accordance with applicable data protection legislation, including the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the European Union General Data Protection Regulation (GDPR).

2. Categories of Personal Data

Depending on your interactions with our website, we may collect and process the following categories of personal data:

Names and business contact information
Company names and business addresses
Email addresses and telephone numbers
Billing and delivery addresses
Order details, purchase history and invoices
Customer account information
Payment references and transaction information
Customer enquiries and correspondence
IP addresses and technical connection data
Browser, device and operating system information
Cookie preferences and consent records
Website usage information collected through Google Analytics 4 where legally permitted

We obtain personal data directly from customers, through their interactions with our website and, where necessary, from service providers involved in the transaction.

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

Processing customer orders and fulfilling contracts
Managing payments and financial transactions
Arranging international shipping and delivery
Preparing shipping and customs documentation
Providing customer support and responding to enquiries
Coordinating warranty claims and after-sales services
Maintaining customer accounts
Complying with accounting, tax and legal obligations
Protecting our website against fraud and misuse
Analysing website usage where legally permitted and valid consent has been obtained

Depending on the processing activity and applicable law, the legal basis may include contractual necessity, compliance with legal obligations, legitimate interests or consent.

Where the GDPR applies, the relevant legal bases may include:

Article 6(1)(a) GDPR - Consent
Article 6(1)(b) GDPR - Contractual necessity
Article 6(1)(c) GDPR - Compliance with legal obligations
Article 6(1)(f) GDPR - Legitimate interests

Where we process the personal data of employees or representatives of business customers, the appropriate legal basis is determined according to the specific processing activity.

4. Website Hosting and Server Logs

When you visit our website, certain technical data may be processed automatically to display the requested content, maintain website functionality and security, and identify technical errors.

This information may include:

IP address
Date and time of access
Requested pages and files
Browser and operating system information
Referring website
Technical connection information

The processing of this information serves the operation and security of our website and the prevention of misuse.

Where the GDPR applies, processing may be based on our legitimate interests under Article 6(1)(f) GDPR, where appropriate.

Hosting and technical service providers may process such information on our behalf under applicable contractual arrangements.

5. Customer Accounts and Order Processing

When you create a customer account or place an order, we process the information necessary to establish, manage and fulfil the contractual relationship.

This may include:

Customer and company identification details
Billing and delivery addresses
Contact details
Ordered products and quantities
Order values and invoice information
Order-related correspondence

Information marked as mandatory during checkout is required to process the relevant order. Without this information, we may be unable to complete the transaction.

Customer account information may be retained until the account is deleted, subject to applicable legal and contractual retention requirements.

Order and invoice records are retained for the periods required by applicable accounting, tax and other relevant legislation.

6. International Shipping and Manufacturer Fulfilment

LABSTELLAR LIMITED supplies laboratory equipment to international business customers.

Products may be dispatched directly from manufacturers, suppliers or distribution partners, including suppliers located in Denmark.

Where necessary for order fulfilment, we may share relevant personal data with:

Manufacturers and suppliers
Warehouses and distribution partners
Freight forwarders and transport companies
Customs agents and customs authorities
Other logistics service providers

The information shared may include the recipient's name, company name, delivery address, telephone number, email address, product details and shipment references.

Such information is shared to arrange delivery, complete shipping documentation, coordinate customs procedures and provide shipment-related customer support.

Depending on the circumstances, the applicable legal basis may include contractual necessity, legitimate interests or legal obligations.

International transfers of personal data are assessed in accordance with applicable data protection laws.

7. Payment Processing

To process payments for orders placed through our online shop, LABSTELLAR LIMITED works with banks, financial institutions and, where applicable, external payment service providers.

The payment methods currently available are displayed during the checkout process.

Depending on the selected payment method, we may process the following information:

Name of the payer or account holder
Billing information
Order number and payment reference
Payment amount and currency
Transaction date and payment status
Information necessary for payment verification, refunds and accounting

7.1 Bank Transfer

Where payment is made by bank transfer, we process the information required to verify the payment, allocate it to the relevant order and fulfil our contractual obligations.

Financial institutions involved in the transaction may process payment information in accordance with their own legal and regulatory obligations.

7.2 Additional Payment Methods

We may offer additional payment methods, including PayPal or other electronic payment services, subject to availability.

If such payment methods are available, the relevant payment service provider will be identified during the checkout process.

Depending on the selected service, necessary transaction information may be transmitted to the payment provider for payment authorisation, processing, fraud prevention and refunds.

External payment service providers may process personal data in accordance with their own privacy policies and applicable data protection laws.

Further information about the processing of personal data by the respective provider will be made available where required.

7.3 Legal Basis and Data Retention

Payment-related personal data is processed for the performance of contractual obligations, compliance with applicable legal requirements and, where appropriate, legitimate interests in preventing fraud and ensuring secure payments.

Where the GDPR applies, the relevant legal bases may include Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR, depending on the processing activity.

Payment records are retained only for as long as necessary for contractual, accounting, tax and other applicable legal obligations.

8. Customer Enquiries and Communication

When you contact us by email, telephone or website contact form, we process the information provided to respond to your enquiry.

This may include your name, company details, contact information and the content of your communication.

Correspondence may be retained where necessary for customer service, contractual administration, legal compliance or the establishment, exercise or defence of legal claims.

9. Cookies and Consent Management

Our website uses cookies and similar technologies to provide essential website functions and, where applicable, analyse website usage.

9.1 Essential Cookies

Essential technologies may be used to maintain shopping carts, customer sessions, authentication, security settings and technical functions required to operate the online shop.

These technologies are used where permitted under applicable law without consent.

9.2 JTL Cookie Consent Management

Our website uses the consent management functionality provided by JTL-Shop to manage preferences concerning non-essential cookies and similar technologies.

Where required by applicable law, non-essential technologies are activated only after the corresponding consent has been provided.

Visitors may reject or withdraw consent for non-essential technologies through the website's cookie preference settings.

10. Google Analytics 4

Our website uses Google Analytics 4 (GA4), a web analytics service provided by Google, to analyse website usage and improve the functionality and usability of our online shop.

Depending on the configuration and consent provided, Google Analytics may process:

Page views and website interactions
Approximate geographic location
Device and browser characteristics
Technical identifiers
Session and engagement information
Purchase-related events and transaction information

Where consent is legally required, non-essential analytics technologies are used only after valid consent has been obtained.

Where the GDPR applies, the legal basis for consent-based analytics processing is Article 6(1)(a) GDPR.

Google may process data using international technical infrastructure, including systems outside Nigeria or the European Economic Area.

Such international processing is subject to applicable data protection requirements and relevant transfer safeguards.

Further information can be found in Google's Privacy Policy.

You may withdraw analytics consent through the cookie settings provided on our website.

11. Marketing Communications

We do not currently operate a newsletter subscription service through this website.

Emails required to respond to customer enquiries, provide quotations, confirm orders or fulfil contractual obligations may nevertheless be sent.

If we introduce newsletters or other electronic marketing services in the future, this Privacy Policy will be updated accordingly, and any legally required consent will be obtained.

12. Recipients of Personal Data

We disclose personal data only where reasonably necessary for legitimate and lawful business purposes or where required by law.

Depending on the circumstances, recipients may include:

Website hosting and administration providers
Technical support and IT service providers
Manufacturers and product suppliers
Logistics companies and customs agents
Banks and authorised payment service providers
Accounting and professional service providers
Google, in connection with enabled analytics processing
Public authorities where legally required

Where external service providers act as data processors on our behalf, appropriate data protection arrangements are implemented as required by applicable law.

Other recipients may act as independent data controllers, depending on their legal responsibilities and the processing activity.

13. International Data Transfers

LABSTELLAR LIMITED operates internationally, and personal data may be processed or transferred in countries other than the country where it was originally collected.

Such transfers may occur in connection with website hosting, analytics, payment processing, manufacturer fulfilment and international shipping.

Transfers of personal data from Nigeria are assessed under applicable provisions of the Nigeria Data Protection Act 2023.

Where the GDPR applies, international transfers outside the European Economic Area are assessed under the requirements of Chapter V GDPR.

Depending on the transaction and legal requirements, appropriate transfer mechanisms may include applicable adequacy decisions, approved contractual safeguards or other lawful transfer grounds.

Further information about applicable transfer safeguards may be requested using our contact details below.

14. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, subject to applicable statutory retention obligations.

Retention periods depend on the category of personal data and the relevant contractual, accounting, tax, security or legal obligations.

Order and invoice information is retained for the applicable statutory periods.

Customer enquiry data is retained for the period necessary to address the enquiry and any associated lawful purposes.

Analytics information is retained according to the Google Analytics 4 configuration and the applicable processing arrangements.

Where continued retention is no longer required, personal data will be deleted or anonymised in accordance with applicable law.

15. Information Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration, disclosure or destruction.

Such measures may include access restrictions, secure connections, regular system maintenance and appropriate controls over service providers.

Security measures are reviewed and adapted where appropriate to the nature of the data and the risks associated with processing.

16. Your Data Protection Rights

Subject to applicable law and statutory conditions, individuals may have the following rights:

The right to information about data processing
The right to request access to personal data
The right to request correction of inaccurate data
The right to request deletion where applicable
The right to object to certain processing
The right to withdraw consent
The right to data portability where applicable
Rights concerning certain automated decisions
The right to lodge a complaint with a competent data protection authority

Where the GDPR applies, additional rights may include the right to restrict processing and other rights provided under the GDPR.

These rights may be subject to statutory conditions, exceptions or limitations.

To exercise your rights, please contact: info@labstellar-freezer.com.

17. Complaints

If you have concerns regarding the processing of your personal data, you may contact us using the details provided in this policy.

Where applicable, individuals may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Official website: https://ndpc.gov.ng/.

Where the GDPR applies, individuals may also have the right to lodge a complaint with a competent supervisory authority in the European Economic Area.

18. Third-Party Websites

Our website may contain links to websites operated by independent third parties.

We are not responsible for the privacy practices of such third-party websites.

We recommend reviewing their privacy policies before providing personal data.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business activities, technical systems, service providers or applicable legal requirements.

The latest version will be published on this website with its revision date.

Privacy