Privacy Policy

Who we are

Trading name

British Peptide Labs

Legal entity

AODAEMON LTD — a private limited company registered in England and Wales, Companies House No. 17176945.

VAT status

Not VAT registered

Registered office

Office 113860 Tottenham Court RoadFitzroviaLondonW1T 2EWUnited Kingdom

Contact

info@britishpeptidelabs.com

What we collect

We collect what we need to run the shop and to answer enquiries. Almost all of it you give us yourself.

• Orders and checkout. First name, surname, delivery address (address line, town or city, postcode, county if you give one, and country), company name if you give one, email address, and telephone number if you give one. The same details are collected for billing when they differ. These go to our own store backend and are held there as your basket and, once you place the order, as your order record.
• Customer account. An account is optional and can be created from the top navigation. It stores an email address, a password, first name, surname, telephone number and any addresses you save.
• Contact form. The form on our contact page and the contact pop-up ask for your name, your telephone number with its country dialling code, and your message. They do not ask for an email address.
• Affiliate and wholesale enquiries. Name, email address, company name if you give one, and an optional message.
• Homepage sign-up. An email address, plus two optional marketing consent boxes, one for email and one for text messages. Both are unticked by default.
• Site search. The words you type into the search box. Nothing personal is attached to them.
• Technical information. As with any website, our servers and our providers receive the internet (IP) address your browser connects from and standard request details, so that pages can be delivered and abuse can be spotted.

Where enquiry forms go at the moment

We would rather be straight with you than describe a system we do not have. The contact form, the contact pop-up and the affiliate and wholesale forms are not yet connected to a mailbox or to any customer-management system. When you submit one, the details are written to an entry in our server log. That entry holds the name you gave, the length of your message, and your telephone number or email address with most of the characters hidden. Because nothing reaches an inbox, we may not be able to reply. Until this is finished, please email us at info@britishpeptidelabs.com instead.

The homepage sign-up form is not connected to a mailing platform either. No address is added to a mailing list, and no marketing email or text message is sent. If that changes, we will update this page before it does.

Why we use it, and our legal basis

UK GDPR requires us to have a legal basis for each use. Ours are:

• To take, process and deliver your order, and to keep you informed about it. Legal basis: performance of a contract with you. Without these details we cannot take payment or arrange delivery.
• To answer enquiries and handle partner requests. Legal basis: our legitimate interests in running the business and replying to people who get in touch.
• To keep the site and our orders secure and to prevent fraud. Legal basis: our legitimate interests in protecting the shop and its customers.
• To meet our record-keeping duties. UK tax, accounting and consumer law require us to keep records of the sales we make. Legal basis: legal obligation.
• For analytics and marketing. Legal basis: your consent. Analytics load only after you choose “Allow all” in the cookie banner, and marketing consent counts only where you tick the box yourself.

Cookies and what your browser stores

We set a small number of first-party cookies. Most of them exist so the shop works at all: they remember your basket, keep you signed in if you have an account, hold a new registration while it is being verified, and remember your language preference. One is a random identifier that lets us cache pages correctly. The full list, with names, purposes and lifetimes, is in our Cookie Policy.

Two other items are kept in your browser and never sent to any server:

• Your wishlist. The product identifiers you have saved. They stay in the browser you saved them in, are never transmitted to us, and do not follow you to another device.
• Your cookie choice. Whichever option you picked in the banner.

The banner offers two options, “Allow all” and “Close & deny”. There are no separate categories to tick. Your choice is stored in your browser rather than in a cookie, so clearing your browser data brings the banner back.

Who we share it with

We do not sell personal data, and we do not pass it to anyone for third-party marketing. We share it only with the providers we need to run the shop.

• Our payment provider. Card details are typed into a field hosted by the provider and never pass through our servers. To authorise a payment we pass on your name, billing address, email address and telephone number.
• Royal Mail Tracked 24. Your name and delivery address, so the parcel can be delivered. Delivery terms are on our Shipping page.
• Google Tag Manager. Loaded only if you choose “Allow all” in the cookie banner. Decline, and no Google script is loaded at all.
• jsDelivr. A third-party content delivery network. The flag icons in our country selectors are fetched from cdn.jsdelivr.net, and that happens on every page. The request tells jsDelivr your IP address and basic browser details. It is part of drawing the page rather than tracking, so it happens whatever you choose in the cookie banner.
• Hosting and infrastructure providers. The companies that run our servers, our database and our email process data on our behalf, under terms that only allow them to act on our instructions.

Sending data outside the United Kingdom

We are a UK business selling to UK addresses, and we keep data in the UK wherever we can. Some of the providers above operate internationally, so parts of your data may be processed outside the United Kingdom. Where that happens, we rely on the safeguards UK data protection law requires for such transfers. If you want to know where a particular part of your data is handled, email us and we will tell you what we know.

How long we keep it

Order and payment records are kept for as long as UK tax and accounting law requires records of a sale to be kept, and for as long as we may need them to deal with a query, a return or a legal claim. Account details are kept while the account is open. Basket data is short-lived and expires on its own. We are still settling exact periods for everything else, and rather than publish a figure we cannot stand behind, we will set them out here once they are fixed. In the meantime you can ask us to delete what we hold.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have anything inaccurate corrected;
• ask us to delete data we no longer need to keep;
• ask us to restrict how we use it while a concern is resolved;
• receive the data you gave us in a portable form, or have it sent straight to another provider;
• object to us using it on the basis of our legitimate interests;
• withdraw your consent at any time where consent is the basis we relied on. Withdrawing it does not affect anything done before you withdrew it.

To use any of these rights, email info@britishpeptidelabs.com. There is no charge. We will respond within one month, and we may ask you to confirm who you are before we release anything.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk. We would rather you came to us first so we can put it right.

Security

Traffic between your browser and this site is encrypted in transit. Card details are handled entirely by our payment provider and never reach our systems. The cookies that carry your basket and your session are set http-only, so page scripts cannot read them. Access to the store backend is limited to the people who need it, through individual accounts. No system is completely secure, but we take reasonable technical and organisational measures and we review them.

Age

This site is not aimed at anyone under 18, and we do not knowingly collect data about children. For research use only. Not for human or veterinary use. Sold strictly for in-vitro laboratory research; not for diagnosis or treatment. If you believe a child has given us their details, email us and we will delete them.

Changes to this policy

We update this page when what we do changes. The date at the top shows when it was last revised. Where a change materially affects how we use your data, we will say so plainly rather than quietly editing the text.

How to contact us

For anything in this policy, including a request about your rights, email info@britishpeptidelabs.com. Email is the only way to reach us: we do not operate a telephone line. Our registered office is listed at the top of this page. Our Terms and Conditions and Cookie Policy sit alongside this policy.