Privacy Policy

What we collect

Contact and order details you give us: name, email, phone, and shipping address.

Newsletter signups: your email address.

Payment and order-status data depends on the method you choose. For Pay by Bank, Fena and your bank handle payment initiation and confirmation; for card payments, our payments partner (PeptidesPayment) processes the transaction; for cryptocurrency, NOWPayments handles the transaction when that option is available. We do not receive or store your online-banking login credentials.

Basic technical data needed to run the site, and small browser-storage flags (for the age confirmation and to avoid repeating the newsletter popup).

Why we use it (lawful basis)

To take and fulfil your order and provide support (contract) — including text messages about your order or payment when you give us your mobile number.

To send the newsletter and your discount code (consent — you can withdraw any time).

To send marketing texts about offers and restocks only if you tick the SMS opt-in box at checkout (consent — reply STOP or contact us to withdraw).

To keep records, prevent misuse, and meet legal obligations (legitimate interests / legal obligation).

Who we share it with

Service providers who process data on our behalf include Fena (Pay by Bank), PeptidesPayment (card checkout and payments), NOWPayments (cryptocurrency, when offered), Resend (email delivery), Twilio (SMS delivery), Vercel (website hosting), and PostHog (cookieless website analytics, EU-hosted — no cookies or on-device storage are used). They act only as needed to provide their service.

We do not sell your personal data.

If you accept TikTok advertising measurement, we share an ad click identifier, page and product views, cart additions, checkout starts, and the value and currency of a confirmed paid order with TikTok to measure advertising. The isolated Pixel also receives browser and network information. Our integration does not share your name, email, phone, address, product selections or payment links with TikTok. You can reject or withdraw using Cookie settings in the footer. Withdrawal stops future browser measurement and requests revocation for recent orders still accessible in this browser; events already delivered cannot be recalled here.

Google Ads receives conversion measurements for confirmed paid orders, including an order reference, GBP amount, currency and, where present, the Google ad click identifier. Our conversion event does not include your name, email, address or order contents. If you accept ad measurement, Google may use advertising storage and advertising user data to link the order to the ad you clicked. If you reject it or make no choice, both stay denied. Advertising personalisation and analytics storage are always denied.

Retention

We keep order records for as long as needed for the order and to meet legal/accounting obligations, and newsletter data until you unsubscribe.

Your rights

You have the right to access, correct, delete, or restrict your data, to object to processing, and to data portability. Email orders@indexpeptides.uk to exercise these.

You can unsubscribe from emails at any time via the link in any email.

You can complain to the UK Information Commissioner's Office (ico.org.uk).

Our contact details: 7 Seafore Close, Liverpool L31 2JS, phone 07879 046750, email orders@indexpeptides.uk.

Cookies & storage

Ad measurement for Google and TikTok is off until you accept cookies in the “We use cookies” message. We save your choice for 180 days in browser storage and do not ask again during that time; you can change it at any time using Cookie settings in the footer. The Pixel runs in an isolated frame and cannot read this site’s browser storage, contact forms or checkout pages. TikTok may receive its own third-party cookies if your browser permits them. Its first-party cookie feature and advanced matching are disabled.

Our Google tag denies advertising storage unless you accept ad measurement, always denies analytics storage, and PostHog runs cookieless. We use browser storage to remember your age confirmation and newsletter prompt, retain your checkout, and check payment status after returning from a payment provider. Order-status credentials expire after seven days and are kept in session storage; they cannot make payments or reveal your contact details.

To understand how the site is used, our cookieless analytics record page views and the referring website or campaign link (for example a search engine or a tagged social-media link) using a privacy-preserving, non-identifying hash.