1. Introduction and Who We Are

Welcome to PEPTIDE PHARMA. We are committed to protecting the privacy and security of our customers and site visitors.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is PEPTIDE PHARMA, registered in [England & Wales / Scotland / Northern Ireland].

This policy outlines how we collect, use, and protect your personal data when you visit https://www.peptidepharma.co.uk  to purchase peptide pens, accessories, or related research products.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data: First name, last name, date of birth (strictly for age verification purposes).
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial Data: Bank account and payment card details. Note: We do not store full card details; these are processed by our third-party payment providers (e.g., Stripe, PayPal, Worldpay).
• Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types, operating system, and platform.
• Profile Data: Your username and password (if you create an account), purchases or orders made by you, and your preferences.

Special Category Data (Health Data)

We may collect data concerning your health (e.g., BMI, medical history) if necessary to facilitate a prescription or consultation with a registered healthcare professional. We process this data under the specific condition of Article 9(2)(h) of the UK GDPR (Provision of health or social care).

We do not knowingly collect health data unless you voluntarily provide it to customer support.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

1. Performance of Contract: To process and deliver your order (e.g., sending the peptide pen to your address).
2. Legitimate Interest: To manage our business, prevent fraud, and keep our records updated.
3. Legal Obligation: To comply with a legal or regulatory obligation (e.g., tax laws, age verification requirements).
4. Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time.

4. Disclosures of Your Personal Data

We may share your personal data with the parties set out below for the purposes set out in Section 3:

• Service Providers: Companies that provide IT and system administration services.
• Logistics Partners: Royal Mail, DPD, DHL, or other couriers to deliver your goods.
• Payment Processors: To securely process your payment.
• Professional Advisers: Lawyers, bankers, auditors, and insurers.
• HM Revenue & Customs & Regulators: Authorities who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

5. International Transfers

If our service providers (e.g., Shopify, Klaviyo, Google Analytics) are based outside the UK, specifically in the USA, their processing of your personal data will involve a transfer of data outside the UK.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• The country is deemed to provide an adequate level of protection by the UK Government (the “Adequacy Decision”).
• We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (the International Data Transfer Agreement or IDTA).

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• For tax purposes, the law requires us to keep basic information about our customers (Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers.

7. Your Legal Rights

Under the UK GDPR, you have rights in relation to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of the data we hold about you.
• Right to Erasure: Request us to delete your data (the “right to be forgotten”).
• Right to Restriction: Ask us to suspend the processing of your data.
• Right to Object: Object to processing your data where we are relying on a legitimate interest.
• Right to Transfer: Request the transfer of your data to you or a third party.

To exercise any of these rights, please contact us.

8. Age Restriction

The sale of peptide pens and research chemicals is strictly prohibited to persons under the age of 18. We use age verification checks. By using this site, you affirm that you are at least 18 years of age.

9. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. You can set your browser to refuse all or some browser cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.