How we handle personal information

The operator of Peptrion Labs is responsible for the personal information described here. Privacy enquiries can be sent to [email protected].

We may collect identity and contact details, delivery and billing information, order and payment-status records, support messages and technical information required to operate and protect the website.

The website uses limited browser storage and session technology for functions such as the shopping cart, age-verification preference, account sessions and security. See our Cookie Policy for details.

Information is used to process and fulfil orders, communicate about purchases, provide support, maintain records, secure the website and meet applicable legal obligations. Depending on the activity, our lawful basis may be performance of a contract, compliance with a legal obligation, our legitimate interests in operating and protecting the business and website, or consent where consent is required. Marketing emails are sent only where an appropriate permission applies, and you can withdraw marketing consent at any time.

Information may be shared where necessary with service providers that help us operate the website and fulfil orders. This includes Fena for Pay by Bank/Open Banking payment processing and payment-status confirmation, as well as providers used for website hosting and security, email communications and delivery/fulfilment. These providers receive only information reasonably required for their role. Your bank authorisation takes place through the Open Banking payment flow; Peptrion Labs does not ask you to provide online-banking passwords or security credentials to us. We do not sell personal information.

Some providers may process information outside the UK. Where law requires safeguards for a restricted transfer, appropriate mechanisms should be used.

Records are kept only for as long as reasonably necessary for the purpose for which they were collected. Order, payment-status and accounting records may be retained for the period required by applicable tax, accounting and legal obligations. Account information is retained while an account remains active and for an appropriate period afterwards where records are required. Support and security records are retained only as long as reasonably necessary for support, fraud prevention, dispute handling and security. Marketing contact details are retained until consent is withdrawn or the information is no longer needed, subject to keeping a minimal suppression record where necessary to respect an opt-out.

Depending on the circumstances, UK data-protection law may give you rights including access, correction, erasure, restriction, objection and data portability.

Contact us first if you have a privacy concern. You may also have the right to complain to the UK Information Commissioner's Office.

We use reasonable technical and organisational measures and may update this policy as services or legal obligations change.