Privacy Policy

Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Epic Peptides (the operator of epicpeptides.co.uk) ("we", "us", "our") collects, uses, and protects your personal information when you use our website. We are the data controller for the personal data we process.

Trading name: Epic Peptides Email: hello@epicpeptides.co.uk Legal entity: Epic Peptides is a trading name operated by [Insert owner / sole-trader name], trading from [Insert trading address]. We are not registered for VAT.

If you have any questions about this policy or your personal data, contact us at hello@epicpeptides.co.uk.

What personal information we collect

We may collect and process the following personal data:

• Account information: name, email address, password (stored securely), phone number, date of birth, and postal address when you create an account.
• Order information: name, contact details, delivery address, and order contents when you place an order.
• Marketing information: name and email address (and any other details you choose to provide) when you subscribe to our newsletter.
• Communications: the content of messages you send us through contact forms or email.
• Usage data: pages visited, browser type, device type, and general location (country/region), collected through cookies and similar technologies. See our Cookie Policy.
• Information you give us: any other information you voluntarily provide when using our services.

We do not collect or process special category data (such as health data) beyond what is necessary to fulfil your requests.

How we use your information and our lawful basis

We process your personal data only where we have a lawful basis under the UK GDPR:

| Purpose | Lawful basis | |---|---| | Creating and managing your account, and processing orders and payments | Performance of a contract (Article 6(1)(b)) | | Sending order confirmations, delivery updates, and customer service responses | Performance of a contract and legitimate interests (Article 6(1)(f)) | | Sending our newsletter (only if you have subscribed) | Consent (Article 6(1)(a)) | | Improving our website, products, and services (using anonymised analytics where possible) | Legitimate interests (Article 6(1)(f)) | | Preventing fraud and protecting the security of our site and customers | Legitimate interests (Article 6(1)(f)) and legal obligations | | Meeting legal, tax, and accounting obligations | Legal obligation (Article 6(1)(c)) |

Recipients and sharing of your data

We do not sell your personal data. We may share it with the following categories of recipients where necessary:

• Service providers: our website hosting platform (Base44) and payment processing partners, who process data on our behalf under contract.
• Delivery providers: to fulfil your orders.
• Email providers: to send you order and account emails (and newsletters, where you have consented).
• Professional advisers: such as accountants, where required for legal or tax compliance.
• Authorities: where required by law, court order, or to protect our legal rights.

All processors are bound by contractual obligations to keep your data secure and to process it only on our instructions.

International transfers

Our website is hosted by a platform whose servers and sub-processors may be located outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and we only transfer the minimum data necessary to provide the service.

How long we keep your data

We keep personal data only for as long as is necessary for the purpose it was collected:

• Account data: for the lifetime of your account, then a reasonable period for record-keeping.
• Order data: for the period required by law for tax and accounting records (typically up to six years).
• Marketing data: until you unsubscribe or withdraw consent, whichever is sooner.
• Cookies: in line with our Cookie Policy.

Data security

We apply appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and secure data storage with our hosting provider. No system can be guaranteed completely secure, but we work to protect your information.

Your data protection rights

Under the UK GDPR, you have the following rights:

• Right of access — to be told what data we hold about you and receive a copy.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to ask us to delete your personal data ("the right to be forgotten").
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format and to have it transferred to another controller.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making — not to be subject to decisions based solely on automated processing that significantly affect you.
• Right to withdraw consent — at any time, where we rely on consent (for example, the newsletter).

To exercise any of these rights, contact us at hello@epicpeptides.co.uk. We will respond within one month, as required by law, and may ask for information to confirm your identity.

Right to complain to the ICO

If you are not satisfied with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns first, but you may contact the ICO at any time.

Children

Our website and products are not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a child, contact us and we will delete it.

Marketing

We only send marketing emails to people who have subscribed to our newsletter. You can unsubscribe at any time using the link in any email or by contacting us. We will never sell or share your email address for marketing purposes.

Cookies

For details of how we use cookies and how to control them, see our Cookie Policy.

Changes to this policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "last updated" date. We encourage you to review it periodically.

Contact

If you have any questions about this Privacy Policy or your personal data, contact us:

Epic Peptides Email: hello@epicpeptides.co.uk [Insert trading address]