What we collect, and what we do with it

1. What we collect

To process an order: name, email address, phone number, institution, role, intended-use declaration, shipping and billing addresses, and the items ordered. Payment card details are entered directly with our payment processor and never reach our systems.

If you create an account: the email address you sign in with and the addresses and profile details you choose to save.

If you subscribe to release notes: your email address and the page you subscribed from.

If you write to us: the message and the address it came from.

2. What we use it for

• Fulfilling and shipping your order, and sending its confirmation, certificates and carrier tracking.
• Recording the research-use declaration made at checkout, which we are required to keep.
• Notifying you if a lot you received is withdrawn.
• Sending release notes, only if you asked for them. Every message has a one-click unsubscribe.
• Answering your questions.

3. What we do not do

• We do not sell, rent or share customer information with third parties for marketing.
• We do not build individual profiles from browsing behaviour. Analytics are aggregate.
• We do not send marketing to anyone who has not subscribed.

4. Who else sees it

The carrier sees the shipping address. The payment processor sees the payment details and the billing address. The email provider sees the messages we send you. Each is bound by its own contract with us to use the data only to provide that service.

5. How long we keep it

Order records, including the research-use declaration, are retained for two years after the order, or longer where law requires. Account details are kept until you delete the account. Release-note subscriptions last until you unsubscribe. Support messages are kept for one year.

6. Data stored in your browser

The cart, saved research sets, checklist ticks, the entry-gate acknowledgement and, if you sign in, your session are stored in your browser and are not sent anywhere until you place an order. Clearing site data removes them.

7. Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, subject to the retention we are required to keep for research-use declarations. Write to privacy@peptides.com. We reply within ten business days.

8. Security

Order and account data is stored encrypted at rest and transferred over TLS. Card data never touches this site. Access is limited to the people who fulfil orders and answer support.

9. Changes

Changes are dated at the top of this page. Material changes are emailed to account holders.