Privacy Policy

Last updated: 6 November 2026 · Effective immediately

This Privacy Policy explains how REVIVE LAB ("we", "us", "our") collects, uses, and protects your personal data when you visit revivelab.ae or place an order. We comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

1. Who we are

REVIVE LAB is a UAE-based supplier of research-grade peptides for laboratory use only. Contact: info@revivelab.ae.

2. What data we collect

• Account & order data: full name, laboratory/organisation name, business email, UAE mobile number, delivery address (emirate, city, building, landmark).
• Order details: items ordered, quantity, delivery preferences, optional notes.
• Verification data: your age confirmation (21+ research-use gate).
• Technical data: your browser stores your cart, account, and discount code locally (in your own browser's local storage).
• Analytics cookies: we use Google Analytics 4 to understand aggregate visitor traffic (page views, top products, country of visit, traffic source). Google sets a small cookie on your browser for this purpose. The data is aggregated and anonymous — we cannot identify you individually from analytics data. You can opt out via Google's opt-out browser add-on or by enabling "Do Not Track" / blocking third-party cookies in your browser.
• Visit log, device recognition and fraud prevention: we record each visit and recognise returning devices — see section 2A below for exactly what this includes.

We do not collect payment data — we operate on Cash on Delivery (COD) only.

2A. Device recognition, fingerprinting and fraud prevention

To protect our customers, our orders and our advertising from fraud and abuse, our site records each visit and recognises a device when it comes back. By entering the site after the 21+ notice, which links to this policy, you agree to this processing.

What we record on each page you view

• The page, the seconds it was on your screen, the buttons you pressed, and the site that referred you (for example Google, Instagram or an advert).
• Your IP address, your internet provider or network, and your approximate location (city and country), as reported by our hosting provider from the IP address. We do not use GPS or ask for your location.
• Your browser and device type, operating system version, screen size and whether you are on a phone or a computer.

How we recognise a returning device

• Device identifiers: two random identifiers, one kept in a first-party cookie set by our server and one in your browser's storage. They contain no personal information and last up to 12 months.
• Device fingerprint: a code calculated in your browser from characteristics of your device, so that the same device can be recognised even if cookies are cleared. It is built from: how your device draws a test image (canvas) and processes a short silent audio test, the details your graphics chip reports (WebGL), which common fonts are installed, your screen and display settings, language, region, time zone and calendar settings, processor and memory class, touch support, the speech voices available on the device, and — where your browser provides it — your device model. Only the resulting codes are sent to us, never the underlying image, audio or font list.
• No permission is requested and none is needed: we never access your camera, microphone, contacts, photos, files or precise location, and we never record anything you type into a form except the order details you choose to submit.

With an order

• When you place an order, the order message we receive also contains the IP address, network, approximate location and device type used, and a summary of that visit (pages and time), so we can confirm genuine orders and protect customers against orders placed in their name.

Why we do it

• To detect and block fraudulent orders, fake or repeated invalid clicks on our adverts, automated traffic and abuse.
• To secure checkout and confirm orders, and to recognise returning customers so we can help them quickly.
• To understand how visitors use the site and fix what does not work.

Who processes it

• Cloudflare — hosts the site and stores the visit log.
• Microsoft Clarity — records anonymised session replays and heatmaps (scrolls, taps, page changes) to show us how the site is used. Text you type into form fields is masked.
• Google (Analytics and Ads) — measures traffic and the results of our advertising.

How long we keep it — visit and device records are deleted automatically after 90 days. Order records are kept as described in section 5.

We never sell this data, never use it to build advertising profiles for other companies, and never share it except with the providers above and where the law requires. To ask what we hold about your device, to have it deleted, or to object, email info@revivelab.ae with the approximate date and time of your visit. Private browsing or clearing cookies reduces, but does not fully prevent, device recognition.

3. How we use your data

• To process and deliver your orders.
• To contact you about order status (via WhatsApp, phone call, or email).
• To verify research-use eligibility and the validity of provided contact details.
• To respond to questions and provide customer support.

We do not sell, rent, or share your data with third parties for marketing.

4. How your data is stored and transmitted

Order details are transmitted from your browser through a secure HTTPS connection to a server-side function that forwards an order summary to our internal notification system (Telegram, with the bot credential stored as an encrypted server-side environment variable — never visible in the browser).

Account credentials and cart state are stored only in your own browser's local storage and are not transmitted to our servers.

5. Data retention

Order records are retained for the period required to fulfil the order, handle returns, and meet UAE legal recordkeeping requirements. After that, records are securely deleted or anonymised.

6. Your rights under UAE PDPL

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal recordkeeping obligations).
• Withdraw consent at any time, where consent is the legal basis of processing.
• Lodge a complaint with the UAE Data Office.

To exercise any right, email info@revivelab.ae from the address associated with your account. We will respond within 30 days.

7. Children and age restriction

This website is restricted to users aged 21 years or older and is intended exclusively for qualified researchers and professionals. We do not knowingly collect data from anyone under 21.

8. Security

The site is served exclusively over HTTPS with TLS encryption. We use industry-standard security practices to protect your data in transit and at rest. No transmission over the Internet is 100% secure; if you suspect a breach, contact us immediately.

9. Updates to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change.

10. Contact

For any privacy-related questions or requests: info@revivelab.ae.