Privacy policy

Who we are

Peptora Labs runs peptora.bio and decides how your personal data is used for the purposes below. Peptora Labs is a trading name of Desmond John Balmer, 172 Dumbarton Road, Old Kilpatrick, Glasgow G60 5DU, United Kingdom.

For any privacy question or request, email contact@peptora.bio.

What we collect

We collect only what we need to take, deliver and support your orders:

• Contact details: your email address, name and phone number.
• Delivery details: your address, or the parcel locker you choose.
• Order details: the items, totals, discounts, payment method and payment status. We never receive card details.
• Account details if you create an account: your email, a password stored only as a secure one-way hash, and your reward points.
• Your confirmation at checkout that you are old enough, buying for research use and buying lawfully, stored with a one-way scrambled form of your IP address.
• Messages you send us by WhatsApp or email.
• Technical records our hosting provider keeps to protect the site, such as security logs.

Why we use it

We use your data to:

• take, pack, deliver and track your order, and email you about it (needed to fulfil our contract with you);
• answer your questions and handle returns (contract, and our legitimate interest in good service);
• keep order and payment records and prevent fraud (legal obligations and legitimate interests);
• run your account and reward points (contract).

What we never do

We don't sell your data, and we don't use advertising or tracking cookies.

Who helps us

These services process data for us, each only for its own part of the job:

• Cloudflare: hosting, database and file storage for the site.
• Venipak and its delivery partners DPD, InPost and Evri: delivering your parcel (name, address or locker, phone and email).
• NOWPayments: crypto payments (order number and amount).
• Resend: sending our order and account emails.
• Telegram: internal notifications to our staff about new and paid orders, including your name, delivery address and phone number.
• WhatsApp: only if you contact us there.

International transfers

Some of these providers process data outside the UK and the EU. Where that happens we rely on the legal safeguards they provide, such as standard contractual clauses.

Cookies and browser storage

We use only what the site needs to work: a sign-in cookie if you have an account, your cart, your chosen destination, and a note that you confirmed your age. We use no advertising or analytics cookies.

How long we keep it

• Order and payment records: 6 years, for tax and accounting rules.
• Your account: until you ask us to close it.
• Support messages: up to 2 years after the conversation ends.
• Security logs: kept by our hosting provider for a short period.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email contact@peptora.bio and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Security

The site uses HTTPS throughout, passwords are stored only as secure hashes, and order links are signed so they can't be guessed.

Changes

If we change this policy we update the date at the top of this page.