Privacy Policy

1. Information we collect

• Personal identification: Name, email address, phone number, and shipping or billing address when you place an order or create an account.
• Payment data: Payment information is processed securely by PCI-DSS compliant third-party payment providers. We do not store your full card or bank details on our servers.
• Technical data: IP address, browser type, device information, pages visited, time on site, referring URL, and similar usage data. Essential cookies collect what is needed to run the site. With your consent, Google Analytics, the Meta Pixel, and Meta Conversions API (CAPI) may also collect or receive this type of data to measure site use and marketing performance.
• Order data: Purchase history, product preferences, and cart contents for the duration of your session and as needed to fulfil orders.
• Communication records: Support messages submitted through our Contact page, email correspondence, and customer service interactions.

2. How we use your information

• Order fulfilment (Art. 6(1)(b) GDPR): Processing and shipping your orders, managing your account, and providing customer support.
• Legitimate interest (Art. 6(1)(f) GDPR): Fraud prevention, website security, service improvement, and maintaining accurate order records.
• Consent (Art. 6(1)(a) GDPR): Non-essential analytics (Google Analytics), marketing technologies (Meta Pixel and Meta Conversions API), and any marketing communications — only where you have given explicit opt-in.
• Legal obligation (Art. 6(1)(c) GDPR): Tax compliance, invoicing records, and regulatory documentation as required by applicable EU law.
• Analytics and marketing measurement: With consent, we use Google Analytics to understand how the site is used and improve it. We use the Meta Pixel and Meta Conversions API (CAPI) to measure ad performance and support marketing on Meta platforms such as Facebook and Instagram. The Pixel collects data in your browser; CAPI sends selected event data from our server to Meta so conversions can still be measured when browser cookies are limited.

3. Data sharing

• Shipping partners: Name and delivery address shared with EU-based logistics providers solely for order fulfilment and tracking.
• Payment processors: Payment data processed by certified third-party providers for secure transaction handling.
• Analytics and advertising partners (if consented): We use Google Analytics (Google LLC) and Meta advertising tools — the Meta Pixel and Meta Conversions API (CAPI) — provided by Meta Platforms, Inc. These providers may receive usage, device, and event data, including pages viewed, how you reached the site, device and browser details, approximate location, actions taken on the site, and conversion events such as purchases. Google uses this for site analytics. Meta uses the Pixel and CAPI to measure ads and help show more relevant ads on its platforms. Data may be processed by Google and Meta, including on servers outside your country. See Google’s Privacy Policy (https://policies.google.com/privacy) and Meta’s Privacy Policy (https://www.facebook.com/privacy/policy/).
• Legal authorities: When required by applicable law, court order, or to prevent fraud and protect our rights.
• We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Cookies

• Essential cookies: Required for cart functionality, session management, authentication, checkout, and security. These cannot be disabled while using the storefront.
• Analytics cookies: Google Analytics helps us understand how visitors use our site so we can improve it. Set only with your consent.
• Marketing cookies and related tools: The Meta Pixel helps us measure advertising performance and support our marketing on Facebook and Instagram. We also use Meta Conversions API (CAPI), a server-side tool that sends conversion and event data to Meta and does not itself place a cookie. Pixel cookies and CAPI are used only with your consent.
• Preference cookies: Remember settings such as language, region, or display preferences where supported.
• You can manage optional cookie preferences at any time using Cookie Settings in the site footer. Essential cookies cannot be disabled while using the storefront. You can also opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout) and manage Meta advertising in Meta Ad Preferences (https://www.facebook.com/settings?tab=ads).

5. Your rights under GDPR

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Correct inaccurate or incomplete personal data.
• Right to erasure (Art. 17): Request deletion of your personal data where applicable (“right to be forgotten”).
• Right to restrict processing (Art. 18): Limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format where applicable.
• Right to object (Art. 21): Object to processing based on legitimate interests in certain cases.
• Right to withdraw consent (Art. 7(3)): Withdraw consent for optional processing at any time, without affecting prior lawful processing.
• To exercise any of these rights, email support@peptides-eu.net with “GDPR Request” in the subject line. We will respond within 30 days as required by GDPR.

6. Data retention

• Order and transaction data: Retained as required for tax, accounting, and legal compliance under applicable EU regulations.
• Account data: Retained while your account is active and deleted upon verified request where retention is no longer required by law.
• Marketing consent records: Maintained until you withdraw consent.
• Browsing and analytics data: Retained only as long as necessary for the stated purpose, then anonymised or deleted.
• Data is processed and stored using providers and infrastructure appropriate to EU-based commerce, with encryption in transit on all site pages.

7. Security

• Encryption: SSL/TLS encryption on all pages and data transmissions between your browser and our services.
• Payment security: Payments processed through PCI-DSS compliant third-party providers.
• Access controls: Personal data access restricted to authorised personnel on a need-to-know basis.
• We review our security practices regularly, but no online transmission or storage system is completely secure.

8. Contact

• Data controller: Peptides EU (peptides-eu.net), Office TC05, 1 Rocky Lane, Aston, Birmingham B6 5RQ, United Kingdom.
• Email: support@peptides-eu.net — include “GDPR Request” in the subject line for data protection inquiries.
• Supervisory authority: If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local EU data protection authority.

9. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

---