Privacy Policy
This Privacy Policy explains how Peptidesr4u.com ("we", "us", "our") collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Peptidesr4u.com is a data controller registered in England and Wales. For data protection enquiries, contact us at privacy@peptidesr4u.com.
2. Data We Collect
- Identity data: name, title, company name
- Contact data: email address, telephone number, delivery address, billing address
- Transaction data: details of products purchased, payment method (we do not store full card details)
- Technical data: IP address, browser type, operating system, pages visited (via cookies)
- Communications data: emails and messages you send us
3. How We Use Your Data
- To process and fulfil your orders
- To send order confirmations, despatch notifications, and tracking information
- To comply with legal obligations including customs and tax regulations
- To respond to your enquiries and provide customer support
- To send you marketing communications where you have given consent (you may unsubscribe at any time)
- To improve our website and services using aggregated, anonymised analytics
4. Legal Basis for Processing
We process your data under the following legal bases: contract performance (to fulfil your order); legal obligation (customs, tax compliance); legitimate interests (fraud prevention, security); and consent (marketing emails).
5. Data Sharing
We share your data only with: courier partners (for delivery); payment processors; customs authorities (as legally required); and IT service providers acting as data processors under written agreements. We do not sell your personal data to third parties.
6. International Transfers
Where your order requires international shipping, your name and address will be shared with our courier partners and may be transmitted to customs authorities in the destination country. These transfers are necessary for the performance of your contract.
7. Data Retention
Order and transaction records are retained for 7 years to comply with UK tax and accounting obligations. Marketing consent records are retained until you withdraw consent. Technical/analytics data is retained for 26 months.
8. Your Rights
Under UK GDPR you have the right to: access your personal data; correct inaccurate data; request erasure (where legally permissible); object to processing; restrict processing; and data portability. To exercise any right, email privacy@peptidesr4u.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
Our website uses essential cookies required for functionality and, where consent is given, analytical cookies to understand how visitors use the site. You may manage cookie preferences through your browser settings.
10. Changes to This Policy
We may update this policy periodically. The current version will always be available on our website. Material changes will be notified by email to registered customers.
Last updated: January 2025. This policy is governed by the laws of England and Wales.