This policy explains what personal data Peptivitalis Ltd collects when you use peptivitalis.com, why we collect it, who we share it with, how long we keep it, and the rights you have over it under the UK General Data Protection Regulation and the Data Protection Act 2018.
Who we are
Peptivitalis Ltd (company number 17367025, registered office College House, 2nd Floor, 17 King Edwards Road, Ruislip, London HA4 7AE) is the data controller for personal data collected through this website. For anything relating to your personal data, email support@peptivitalis.com.
What we collect
- Identity and contact details — name, email address, telephone number, billing and delivery addresses, and where relevant an organisation name.
- Order details — what you ordered, when, the amount paid and the payment status. Payment is taken through our payment provider using open banking; we do not see or store your bank login details or card numbers.
- Purchase declarations — your confirmation at checkout that you are 18 or over and are purchasing for laboratory research purposes only.
- Correspondence — emails, WhatsApp messages, contact-form submissions and comments you send us or post on the site.
- Technical data — IP address, browser and device type, pages visited and cookie identifiers. See our Cookie Policy for the cookies we use and how to control them.
- Marketing preferences — whether you have subscribed to our email list, and a record of when and how you consented.
Why we use it, and the legal basis
- Processing and delivering your order, including order confirmations, dispatch and tracking notices, and handling returns — necessary to perform our contract with you.
- Recording your age and research-use declarations and declining or cancelling orders where material may be intended for human or veterinary use — our legitimate interest in supplying research reagents responsibly and in meeting our obligations under the Human Medicines Regulations 2012.
- Keeping accounting, tax and company records — our legal obligations under UK tax and company law.
- Answering enquiries and providing support — necessary to perform our contract with you, or our legitimate interest in responding to people who contact us.
- Preventing fraud and keeping the site secure — our legitimate interest in protecting the business and our customers.
- Asking for a review after your order (one invitation from Trustpilot to review our service, and one email from us inviting you to review the products you bought) — our legitimate interest in collecting genuine feedback from real customers. You can object at any time by contacting us.
- Sending our email newsletter (new-lot notifications, restocks and offers) — your consent, which you can withdraw at any time using the unsubscribe link in any email or by contacting us.
- Analytics and non-essential cookies — your consent, given or refused through the cookie banner.
- Publishing comments you submit, after moderation — our legitimate interest in running the site, and your choice to post.
We do not use your data for automated decision-making or profiling, and we do not sell it.
Who we share it with
- Our payment provider, to take payment by open banking and to process refunds.
- Delivery carriers, who receive your name, address and contact details to deliver your order.
- Trustpilot, the independent review platform — we send Trustpilot a copy of the email telling you your order is on its way, which contains your name, contact details, billing and delivery addresses, and what you ordered. Trustpilot uses your name, email address and order number to send you one invitation to review us. If you choose to write a review, Trustpilot’s own privacy policy applies to it.
- Hosting and platform providers — the site runs on WordPress.com and WooCommerce, operated by Automattic, which stores site data and sends our newsletter on our behalf. Order and support emails are sent through Google Workspace.
- Messaging platforms — if you contact us on WhatsApp, your messages are processed by WhatsApp (Meta) under its own privacy policy.
- Analytics providers, only where you have consented to analytics cookies.
- Professional advisers — accountants, lawyers and insurers, where needed.
- Regulators, law-enforcement bodies and courts, where we are required by law to disclose information or where disclosure is necessary to establish or defend legal rights.
International transfers
Some of the providers above process data outside the United Kingdom, including in the United States. Where that happens, the transfer is covered by UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum, which impose data-protection obligations equivalent to those that apply in the UK.
How long we keep it
- Order records, including your purchase declarations — six years after the end of the financial year in which the order was placed, as required for tax and company records.
- Support correspondence — two years after our last exchange.
- Newsletter data — until you unsubscribe; we then keep a minimal suppression record so that we do not email you again.
- Comments — for as long as they are published, or until you ask us to remove them.
- Technical logs — up to twelve months.
Your rights
You have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to have data erased where we no longer need it, to restrict or object to particular uses, to receive the data you gave us in a portable format, and to withdraw any consent you have given. To exercise any of these rights, email support@peptivitalis.com. We will respond within one month and may ask you to confirm your identity first.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve any concern first.
Security
Data is transmitted over encrypted connections, access to order data is limited to people who need it to fulfil orders and provide support, and payment details are handled entirely by our payment provider.
Under-18s
This website is not directed at anyone under 18 and we do not knowingly collect personal data from anyone under 18. If you believe we have done so, contact us and we will delete it.
Changes to this policy
We will post any changes on this page. This policy was last updated on 14 September 2026.