Legal
Privacy Policy
This policy explains what personal data Dr Peptide Ltd collects, why we collect it, and what rights you have. We are the data controller for that information.
What we collect
- Identity and contact details — name, email address, telephone number, billing and delivery addresses
- Order information — what you bought, when, and the order value
- Account information — your login credentials, stored in hashed form
- Correspondence — the content of enquiries you send us
- Technical data — IP address, browser and device information, and how you use the site
We do not store full payment card numbers. Card payments are processed by our payment provider, and we receive only the result of the transaction and a masked reference.
Why we use it, and our lawful basis
- To perform our contract with you — processing and delivering orders, handling returns, and providing support
- To meet legal obligations — keeping accounting and tax records
- For our legitimate interests — securing the site, preventing fraud, and improving how the shop works
- With your consent — marketing email, and any non-essential cookies. You can withdraw consent at any time
Who we share it with
We share personal data only with the providers who make the shop work: our payment provider, our delivery couriers, our hosting and email providers, and our accountants. Each processes it on our instructions. We do not sell your personal data.
Where a provider is outside the UK, we rely on an approved transfer mechanism such as UK International Data Transfer Agreement clauses.
How long we keep it
Order and transaction records are kept for six years to satisfy UK tax law. Account data is kept while your account is open and deleted on request. Marketing consent records are kept until you withdraw consent, plus a short period to evidence the withdrawal.
Your rights
Under UK data protection law you have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable form, and withdraw consent. To exercise any of these, email info@drpeptide.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk.
Security
The site is served over TLS, passwords are stored hashed, and access to personal data is limited to staff who need it. No system is perfectly secure, but we take these obligations seriously and will notify you and the ICO of a qualifying breach as the law requires.
Research use only
Not for human consumption.
All products are supplied strictly for in-vitro laboratory research and development use. They are not for human or veterinary consumption, and are not for medical, clinical, diagnostic or cosmetic application.