1. Who we are
UK Peptides operates the website ukpeptides.org. We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
When you place an order or contact us, we may collect:
- Name and delivery address
- Email address
- Order history and transaction data
- IP address and browser data collected automatically via analytics
We do not collect or store payment card details. Bank transfer payments are processed externally.
3. How we use your data
We use your personal data to:
- Process and fulfil your orders
- Send order confirmations, tracking information, and Certificates of Analysis
- Respond to enquiries and customer service requests
- Comply with legal obligations
- Improve our website and services via analytics
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal basis for processing
- Contract performance: to fulfil your order
- Legal obligation: to comply with applicable UK law
- Legitimate interests: to improve our services and prevent fraud
- Consent: where you have opted in to receive communications from us
5. How long we keep your data
Order data is retained for 7 years in accordance with UK tax and accounting requirements. You may request deletion of your personal data at any time subject to any legal retention obligations.
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (right to erasure)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time where consent is the legal basis
To exercise any of these rights, contact us via the contact page.
7. Cookies
We use essential cookies to operate the website and analytics cookies to understand how visitors use the site. Non-essential cookies are only set with your consent via the cookie banner.
You can manage or delete cookies through your browser settings at any time.
8. Third-party services
We use Google Analytics 4 to collect anonymised usage data. Google's privacy policy is available at policies.google.com/privacy. Analytics data is anonymised and does not identify individuals.
9. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data transmitted.
10. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.