- Same-day UK dispatch on orders before 3pm
- Certificate status shown on every product
- Shop all research peptides
- Learn: guides and research tools
Legal
Cookie Policy
What we store on your device when you use this site, why we store it, and how you control it.
Last updated: 26 August 2026
Who we are
- Trading name
- British Peptide Labs
- Legal entity
- AODAEMON LTD — a private limited company registered in England and Wales, Companies House No. 17176945.
- VAT status
- Not VAT registered
- Registered office
- Office 113860 Tottenham Court RoadFitzroviaLondonW1T 2EWUnited Kingdom
- Contact
- info@britishpeptidelabs.com
Cookies and device storage in plain terms
A cookie is a small text file that a website asks your browser to save. Your browser sends it back on the next request, so the site can recognise the same browser and keep track of things such as a basket. A site can also keep data in your browser in other ways, for example local storage. That data stays on your device until it is cleared.
This policy covers both. In the UK, the rules on storing anything on your device come from the Privacy and Electronic Communications Regulations (PECR). Where that data is also personal data, the UK GDPR applies as well.
The categories we use
There are two. Strictly necessary items run the shop: the basket, the sign-in session, page caching and your language preference. They do not need your consent, and blocking them stops you from ordering. Analytics is the second category, and it loads only if you agree to it.
We do not run advertising or profiling tags. The lists below are complete for everything we set ourselves.
Strictly necessary cookies
All of these are set by this site, on this domain.
- _medusa_cart_id
- Stored for 7 daysRemembers your basket between visits, so the items you added are still there when you come back. Set by our server and not readable by scripts in the page.
- _medusa_jwt
- Stored for 7 daysKeeps you signed in to a customer account. Set by our server and not readable by scripts in the page.
- _medusa_pending_customer
- Stored for 24 hoursHolds the email address, first name, last name and phone number you entered while a new account is being verified. Set by our server and not readable by scripts in the page.
- _medusa_cache_id
- Stored for 24 hoursA random identifier for your browser. It separates our page cache per browser, so you are never served a page that was built for someone else.
- _medusa_locale
- Stored for 1 yearRemembers your language preference. This one is readable by scripts in the page.
Storage in your browser that is not a cookie
Two items are kept in your browser's local storage. They are not cookies, but PECR treats storing them on your device in the same way, so we list them here.
- bpl:wishlist
- Stored for Until you clear itThe products you have saved. It lives in that browser only. It is never sent to any server and it does not sync between your devices.
- bpl-tracking-consent
- Stored for Until you clear itThe choice you made in the cookie banner: allow-all or deny.
Analytics cookies
We use Google Tag Manager. It loads only if you press “Allow all” in the cookie banner. If you press “Close & deny”, or if you make no choice at all, no Google script is loaded and no Google cookie is set.
At present the only thing recorded is a press on a WhatsApp button, so that we can see how often people reach us that way. Once Google Tag Manager has loaded, Google may set cookies of its own. Those are Google's: we do not control them and we cannot list them here.
On the home page and on our advertising landing pages we also use the Whop measurement pixel (t.whop.tw), which tells us how many people who arrived from an advert went on to order. It is covered by the same choice: press “Close & deny”, or answer nothing, and it is never loaded. Once loaded it may set cookies of its own, which are Whop's rather than ours.
Third parties your browser contacts
The country selectors on this site show flag icons. Your browser downloads those images from the jsDelivr content delivery network (cdn.jsdelivr.net). This happens on every page and it does not depend on your consent choice, because the images are needed to draw the interface. Making that request tells jsDelivr the IP address you are browsing from.
On the checkout page, and only there, your card details are entered in a field hosted by our payment provider rather than by us. That provider may set cookies of its own, which are necessary to process the payment and to keep it secure.
How we ask for consent
A banner appears at the bottom of the page shortly after it loads. It offers two options and nothing else. “Allow all” loads Google Tag Manager, and the Whop pixel on the pages named above, which may then set cookies of their own. “Close & deny” loads nothing beyond the strictly necessary items above. There is no per-category preference panel.
Your answer is saved in your browser's local storage, under bpl-tracking-consent, not in a cookie. Until you answer, no analytics script loads. The banner does not cover the strictly necessary cookies: they need no consent and cannot be switched off without breaking the shop.
Changing or withdrawing your choice
There is currently no “Cookie settings” link that reopens the banner. To change your answer, clear this site's data in your browser. That deletes bpl-tracking-consent, which resets your choice, so the banner appears again on your next visit and you can answer differently.
In most browsers you do this from the icon to the left of the address bar, under an option named “Cookies and site data”, or from the privacy section of the browser settings. Note the side effects: clearing site data also removes bpl:wishlist and the strictly necessary cookies, so your saved products are lost, your basket is emptied and you are signed out.
Controlling cookies in your browser
Every browser lets you block or delete cookies, either for one site or for all sites, and lets you review what a site has stored. If you block the strictly necessary cookies for this site, you will not be able to keep a basket, sign in, or place an order. A private or incognito window discards everything when you close it, so the banner appears again on every fresh session.
Browsers also carry a “Do Not Track” setting. There is no agreed standard for how a site should respond to it, and this site does not respond to it. Your answer in the banner is what governs analytics here.
Related policies
Our Privacy Policy explains what personal data we handle, why we hold it and what rights you have over it. Our Terms & Conditions set out the terms on which we supply.
Contact us
Questions about this policy, or about anything we store on your device, go to info@britishpeptidelabs.com. Support is by email only — we do not operate a telephone line. Our registered office is set out at the top of this page.