Privacy

Privacy and cookie policy.

What we collect, why, how long we keep it, and the cookies this site sets.

What we collect

Name, contact details and billing and delivery addresses for orders.
Order history, payment references and bank transfer confirmations.
VAT and company details for trade accounts; invoices and tax records.
Email addresses for marketing, only if you subscribe; messages you send us.
IP address, device and browser data, pages visited.
A record of your age and research-use confirmation.
We do not collect health, medical or intended personal-use information. Any sent through the contact form is deleted.

Why we use it

Processing, dispatching and supporting orders; reconciling payments and handling returns.
Operating trade accounts and preventing fraud.
Meeting HMRC record-keeping duties.
Marketing emails, based on consent.
Site security and understanding site use; recording eligibility confirmations.
Recipients: hosting, email delivery, carriers, our accountant and our bank. We do not sell personal data.

Retention

Order and invoice records: 6 years from the end of the tax year
Active customer accounts: While active, then 2 years
Marketing consent: Until withdrawn, then a suppression record
Support enquiries: 2 years from resolution
Age and research-use confirmations: 6 years, with the order record
Server and security logs: 90 days

Cookies

age_gate, age_gate_failed: Record the age and research-use confirmation. Necessary.
Basket and session: Keep the basket and checkout working. Strictly necessary.
Signed-in session: Keeps you signed in. Strictly necessary.
cookie_consent: Stores your cookie choices for 12 months. Strictly necessary.
[ANALYTICS COOKIE]: Measures site use under the statistical exception. [PERIOD].

Your rights

Access, correction, erasure, restriction, portability and objection to legitimate-interest processing; objection to direct marketing at any time; protection from solely automated decisions with legal effects. Requests are answered within one month, usually free of charge. Complaints are acknowledged within 5 working days and answered within 30 days. Unresolved complaints can go to the Information Commissioner's Office: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.

Controller

LSPEPTIDES, trading as LS Peptides, company number [COMPANY NUMBER], registered office [REGISTERED ADDRESS]. Privacy requests: [PRIVACY EMAIL].