Peptide Rise
Basket

Privacy policy

Information we collect

  • Account details such as name, email address, password hash, sign-in sessions, and verification or reset tokens.
  • Checkout and fulfilment details including addresses, order contents, customer notes, payment method, payment status, provider references, and support messages.
  • Cart identifiers for guest baskets, product reviews, newsletter consent records, and data-rights request records.
  • Anonymous aggregate public-page measurements: page-view totals, daily estimated visitor totals, and daily page totals. We do not store IP addresses, user agents, query strings, referrers, individual browsing histories, or persistent visitor profiles for this measurement.

Why we use it and lawful bases

  • Contract: to create accounts, manage baskets, take orders, arrange payment, fulfil purchases, and provide customer support.
  • Legal obligation: to keep accounting, tax, compliance, fraud-prevention, and consumer-rights records where required.
  • Legitimate interests: to secure the store, prevent abuse, moderate reviews, manage inventory, and improve support operations.
  • Consent: to send newsletter marketing where you have explicitly opted in.
  • Legitimate interests: to understand aggregate use of public pages and improve the website. This uses a date-scoped HMAC key derived transiently from the request IP address and user agent only to avoid double-counting a visitor that day; the key is deleted after one day. You can opt out at any time using Anonymous traffic measurement in the footer.

Retention

  • Account, address, cart, review, and support records are kept while needed to operate the account or handle a request.
  • Order and payment records may be retained for accounting, tax, dispute, fraud-prevention, and legal purposes after an account is closed.
  • Newsletter consent records are kept until you unsubscribe or ask us to remove them, subject to suppression-list needs.
  • Anonymous aggregate page and daily totals may be retained for operational reporting. The temporary, non-reversible daily deduplication key is deleted after one day.
  • Data-rights requests are retained as an audit record of how the request was handled.

Processors and recipients

  • Payment processing is handled through the configured payment provider, such as BTCPay Server for crypto payments or Fena Payments for instant bank transfers and card payments. The store records provider references, payment statuses, amounts, and payment details returned by that provider.
  • Transactional email and hosting/database providers may process personal data for the store operator under their service terms.
  • We may disclose information where required by law, regulators, courts, payment disputes, fraud prevention, or professional advisers.

Your rights

  • You can request access, rectification, erasure, restriction, objection, portability, or withdrawal of newsletter consent.
  • Erasure is reviewed manually. Some order, payment, tax, dispute, security, and legal records may need to be retained where required or justified.
  • Authenticated customers can submit a request from account settings. You can also contact the privacy address below.

Cookies

Essential technologies support store functionality. We also use anonymous, server-side aggregate measurement for public pages. It has no advertising, profiling, cross-site tracking, or third-party analytics script, and you can opt out through the footer. See the cookie policy for details.

Complaints

Please contact us first so we can try to resolve your concern. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.