This policy explains how Omni Peptides ("we", "us") collects and uses your personal data, and how we use cookies. We are the data controller for the personal data described here. We handle your data in accordance with the UK GDPR and the Data Protection Act 2018.
| Data | Why we collect it | Lawful basis |
|---|---|---|
| Name, email, phone, delivery address | To process, dispatch and support your order | Performance of a contract |
| Order contents and history | To fulfil your order, handle returns and keep accounting records | Contract / legal obligation |
| Payment confirmation (we never see or store card numbers) | To confirm payment has been taken | Contract |
| Age and research-use confirmations given at checkout | To evidence that supply conditions were accepted | Legal obligation / legitimate interests |
| Affiliate referral code and click data, if you arrive via an affiliate link | To attribute referrals and pay commission | Legitimate interests |
| Analytics and advertising identifiers | To measure and improve our marketing | Consent (you can decline) |
We share personal data only with processors who help us run the business, under contract and only for the purposes above:
We do not sell your personal data. We may disclose data where required by law or to a regulator or law enforcement body.
Some of our providers process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or by an International Data Transfer Agreement / the UK Addendum to the EU Standard Contractual Clauses.
Order and transaction records are kept for 6 years after the end of the relevant financial year, to meet HMRC and accounting requirements. Support correspondence is kept for up to 2 years. Marketing and analytics data is kept for up to 2 years from collection, or until you withdraw consent. Affiliate records are kept for 6 years for tax purposes.
We use two kinds of cookies and similar technologies:
Declining marketing cookies does not affect your ability to browse or order.
Under UK GDPR you have the right to: access a copy of your data; have inaccurate data corrected; have your data erased where we no longer need it; restrict or object to processing; data portability; and to withdraw consent at any time where processing is based on consent.
To exercise any of these, contact us via WhatsApp using the contact option on our homepage. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Data is transmitted over encrypted connections and stored in access-controlled systems. Payment card details never reach our servers. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
We may update this policy. The "last updated" date above shows when it last changed.