Privacy Policy

1. Information We Collect

• Identity & contact data: name, email address, phone number, and delivery address.
• Order & transaction data: items ordered, quantities, pricing, payment method (bank transfer details or payment-link reference), order number, and order status.
• Account data: email and password (stored as a hashed credential), role, and registration date.
• Technical data: IP address, browser type, device information, and usage analytics gathered via cookies or similar technologies.
• Communications: any correspondence you send to us, including contact-form submissions and email content.

2. How We Use Your Information

We process your personal data for the following purposes:

• Processing and fulfilling orders, including arranging delivery and handling bank transfer payments.
• Communicating with you about your orders, account, and customer-service enquiries.
• Mirroring order records to our internal operations dashboard for fulfilment, accounting, and record-keeping.
• Sending transactional emails such as order confirmations and payment instructions.
• Delivering marketing communications where you have opted in (for example, our newsletter).
• Maintaining the security, integrity, and fraud prevention of our platform.
• Complying with our legal, regulatory, and tax obligations.

3. Legal Basis for Processing (UK & EU GDPR)

We rely on the following lawful bases: (a) performance of a contract (to fulfil your order); (b) compliance with a legal obligation (e.g. tax and accounting records); (c) our legitimate interests (e.g. fraud prevention, platform security, and internal analytics); and (d) your consent (e.g. for marketing emails and non-essential cookies), which you may withdraw at any time.

4. Sharing and Disclosure of Data

We do not sell your personal data. We may share it with:

• Payment providers that process your payment-link checkout, on their own terms.
• Delivery and fulfilment partners to the extent necessary to dispatch your order.
• Our internal operations dashboard, where order records are mirrored for fulfilment and administration.
• Service providers such as email delivery, hosting, and analytics vendors acting on our behalf under confidentiality obligations.
• Regulatory or law-enforcement authorities where required by law or to protect our rights, safety, or property.

5. International Data Transfers

Your information may be processed in countries outside your country of residence, including the United Kingdom and the United States. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or rely on an applicable adequacy decision, and we take steps to ensure a comparable level of protection.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy and to satisfy our legal, accounting, and tax obligations. Order and transaction records are typically retained for the period required by applicable tax and business law, after which they are deleted or anonymised. Account data is retained for the lifetime of your account and deleted upon request, subject to legal retention requirements.

7. Security

We implement appropriate technical and organisational measures — including encryption in transit, hashed authentication credentials, strict access controls, and secure server-side order validation — to protect your personal data against unauthorised access, alteration, disclosure, or loss. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you may have the right to:

• Request access to, or a copy of, the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your personal data ("right to be forgotten").
• Request restriction of, or object to, our processing of your data.
• Request portability of your data in a structured, machine-readable format.
• Withdraw consent to processing carried out on the basis of consent (including marketing).
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at enquire@nxtpeptides.co.uk.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the website, remember your preferences, understand how the site is used, and deliver relevant marketing. You can control cookies through your browser settings; disabling them may affect site functionality. Where required, we obtain your consent before placing non-essential cookies.

10. Marketing

Where you opt in to our newsletter or marketing, we use your email address to send you promotional content. You can unsubscribe at any time via the link in any marketing email or by contacting us. We will never sell your contact details to third-party marketers.

11. Children's Privacy

Our website is not intended for individuals under 18. We do not knowingly collect personal data from anyone under 18. Purchasers must confirm they are 18 or older at checkout.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "last updated" date. Continued use of our website after any change constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at enquire@nxtpeptides.co.uk.