Privacy policy

Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how PEPTIDESHOP LTD collects, uses, shares and protects personal information when you visit www.peptideshop.co.uk, contact us, create an account or place an order.

PEPTIDESHOP LTD is the data controller responsible for the personal information described in this policy.

1. Our Details

Company: PEPTIDESHOP LTD
Company number: [TO BE ADDED]
Registered office: [TO BE ADDED]
Email: peptideshop.co@gmail.com
Website: www.peptideshop.co.uk

2. Personal Information We Collect

Depending on how you interact with us, we may collect:

Information You Provide

  • Your name
  • Billing and delivery addresses
  • Email address
  • Telephone number
  • Account login information
  • Order and transaction details
  • Delivery instructions
  • Messages, enquiries, complaints and customer-service correspondence
  • Marketing preferences
  • Information supplied when requesting a cancellation, return or refund

Please do not provide medical information or other sensitive personal information when contacting us unless it is necessary and specifically requested.

Information Collected Automatically

When you use our website, we and our service providers may automatically collect:

  • IP address
  • Device and browser information
  • Operating system
  • Website activity and pages viewed
  • Referring website or source
  • Cookie identifiers
  • Approximate location derived from an IP address
  • Information used for security, fraud prevention and website performance

Payment Information

Payments are processed by third-party payment providers.

We do not normally receive or store your complete payment-card details. Payment providers may collect and process payment information directly under their own privacy policies.

3. How We Use Personal Information

We may use personal information to:

  • Process and fulfil orders
  • Take and verify payments
  • Arrange delivery and provide tracking information
  • Create and manage customer accounts
  • Respond to questions and provide customer support
  • Handle cancellations, returns, refunds and complaints
  • Detect and prevent fraud, misuse and security threats
  • Enforce our Terms and research-use restrictions
  • Maintain business, tax and accounting records
  • Improve our website, products and customer service
  • Send marketing communications where permitted
  • Comply with legal and regulatory obligations
  • Establish, exercise or defend legal claims

We will not sell your personal information.

4. Our Lawful Bases

Under UK data-protection law, we rely on one or more of the following lawful bases:

Contract

We process information where it is necessary to take steps at your request or fulfil our contract with you, including processing orders, taking payment, arranging delivery and handling returns.

Legal Obligation

We process information where necessary to comply with legal duties, including tax, accounting, consumer-protection and regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights.

These interests include:

  • Operating and improving our business
  • Securing our website and systems
  • Preventing fraud and misuse
  • Managing customer enquiries
  • Maintaining appropriate business records
  • Establishing or defending legal claims

Consent

We rely on consent where required, including for certain electronic marketing and non-essential cookies.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

5. Marketing Communications

We may send marketing emails where you have consented or where another lawful permission applies.

You can unsubscribe at any time by:

  • Using the unsubscribe link in a marketing email
  • Emailing peptideshop.co@gmail.com

Service messages concerning an order, account, security matter or policy change are not marketing communications and may still be sent where necessary.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

  • Operate essential website functions
  • Maintain baskets and customer sessions
  • Remember preferences
  • Protect the website and prevent fraud
  • Understand website performance and usage
  • Support analytics and marketing where permitted

Essential cookies may be used without consent where they are strictly necessary.

Non-essential cookies will only be used where the appropriate consent has been obtained. You can manage available choices through the website’s cookie settings or your browser.

Blocking certain cookies may affect how the website functions.

7. How We Share Personal Information

We may share personal information with service providers where reasonably necessary to operate the business, including:

  • Shopify, which hosts and supports our ecommerce store
  • Payment processors and banking providers
  • Delivery companies and fulfilment providers
  • Email, customer-support and communication providers
  • Website hosting, security and fraud-prevention providers
  • Analytics and marketing providers where permitted
  • Accountants, solicitors, insurers and professional advisers
  • Government bodies, regulators, courts and law-enforcement authorities where legally required

Service providers are only given the information reasonably required to perform their services.

We may also disclose information in connection with a business sale, restructuring, merger or transfer, subject to appropriate confidentiality and data-protection safeguards.

8. Shopify

Our online store is hosted through Shopify.

Shopify processes certain personal information to provide its ecommerce platform, operate the website and support transactions.

Shopify may process information in countries outside the United Kingdom. Its handling of personal information is also governed by its own privacy documentation and applicable contractual safeguards.

9. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where this occurs, we will take reasonable steps to ensure an appropriate legal safeguard is used, such as:

  • A UK adequacy regulation
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved Standard Contractual Clauses
  • Another safeguard permitted under UK data-protection law

You may contact us for further information about safeguards relevant to your personal information.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Order, payment and accounting records will normally be retained for up to six years after the relevant transaction or the end of the applicable accounting period, unless a longer period is legally required.

Customer-service correspondence will be retained for as long as reasonably necessary to resolve the matter and maintain appropriate records.

Marketing information will be retained until you unsubscribe, withdraw consent or the information is no longer required, subject to keeping a limited suppression record so that we can respect your request.

Retention periods may vary where information is relevant to a complaint, legal claim, fraud investigation or regulatory obligation.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

No online system is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping account passwords confidential and should contact us promptly if you suspect unauthorised account activity.

12. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

  • Request access to your personal information
  • Request correction of inaccurate or incomplete information
  • Request deletion of your information
  • Request restriction of processing
  • Object to certain processing
  • Receive certain information in a portable format
  • Withdraw consent
  • Object to direct marketing at any time
  • Complain to the Information Commissioner’s Office

These rights are not absolute and may be limited where an exemption or overriding legal obligation applies.

We may ask for information needed to confirm your identity before responding to a request.

To exercise a right, email peptideshop.co@gmail.com.

13. Your Right to Object

You have the right to object to the use of your personal information for direct marketing at any time.

You may also object to processing based on legitimate interests. We will stop that processing unless we have compelling legitimate grounds to continue or the processing is required for legal claims.

14. Children

Our products and services are not intended for anyone under 18.

We do not knowingly accept orders from or collect personal information from children. If you believe a child has provided personal information to us, contact peptideshop.co@gmail.com.

15. Third-Party Links

Our website may contain links to websites operated by other organisations.

We are not responsible for their privacy practices. You should review the privacy policy of any third-party website before providing personal information.

16. Changes to This Policy

We may update this Privacy Policy when our practices, service providers or legal obligations change.

The latest version will be published on this page with an updated revision date. Material changes may also be communicated by another appropriate method.

17. Complaints

Please contact us first if you have concerns about how we use your personal information.

You also have the right to complain to the UK Information Commissioner’s Office:

Website: www.ico.org.uk
Telephone: 0303 123 1113

18. Contact Us

For privacy questions or data-rights requests, contact:

PEPTIDESHOP LTD
Email: peptideshop.co@gmail.com
Website: www.peptideshop.co.uk
Registered office: [TO BE ADDED]
Company number: [TO BE ADDED]