Cookie Policy

Who we are

Trading name

British Peptide Labs

Legal entity

AODAEMON LTD — a private limited company registered in England and Wales, Companies House No. 17176945.

VAT status

Not VAT registered

Registered office

Office 113860 Tottenham Court RoadFitzroviaLondonW1T 2EWUnited Kingdom

Contact

info@britishpeptidelabs.com

Cookies and device storage in plain terms

A cookie is a small text file that a website asks your browser to save. Your browser sends it back on the next request, so the site can recognise the same browser and keep track of things such as a basket. A site can also keep data in your browser in other ways, for example local storage. That data stays on your device until it is cleared.

This policy covers both. In the UK, the rules on storing anything on your device come from the Privacy and Electronic Communications Regulations (PECR). Where that data is also personal data, the UK GDPR applies as well.

The categories we use

There are two. Strictly necessary items run the shop: the basket, the sign-in session, page caching and your language preference. They do not need your consent, and blocking them stops you from ordering. Analytics and advertising measurement is the second category, and it loads only if you agree to it.

The lists below are complete for everything we set ourselves, and for the cookies of the third-party tags that load once you agree.

Strictly necessary cookies

All of these are set by this site, on this domain.

_medusa_cart_id

Stored for 7 daysRemembers your basket between visits, so the items you added are still there when you come back. Set by our server and not readable by scripts in the page.

_medusa_jwt

Stored for 7 daysKeeps you signed in to a customer account. Set by our server and not readable by scripts in the page.

_medusa_pending_customer

Stored for 24 hoursHolds the email address, first name, last name and phone number you entered while a new account is being verified. Set by our server and not readable by scripts in the page.

_medusa_cache_id

Stored for 24 hoursA random identifier for your browser. It separates our page cache per browser, so you are never served a page that was built for someone else.

_medusa_locale

Stored for 1 yearRemembers your language preference. This one is readable by scripts in the page.

Storage in your browser that is not a cookie

Two items are kept in your browser's local storage. They are not cookies, but PECR treats storing them on your device in the same way, so we list them here.

bpl:wishlist

Stored for Until you clear itThe products you have saved. It lives in that browser only. It is never sent to any server and it does not sync between your devices.

bpl-tracking-consent

Stored for Until you clear itThe choice you made in the cookie banner: allow-all or deny.

bpl-age-confirmed

Stored for 30 daysRecords that you confirmed you are 18 or over, so the age check is not shown on every page. After 30 days we ask again.

Analytics and advertising cookies

We use Google Tag Manager. It loads only if you press “Allow all” in the cookie banner. If you press “Close & deny”, or if you make no choice at all, no Google or Meta script is loaded and no Google or Meta cookie is set.

Google Tag Manager loads Google Analytics, which records the pages you view, the products you look at, what you add to or remove from your basket, the checkout steps you reach, searches, certificate downloads, presses on a WhatsApp button and the fact that a contact form was sent (never what you wrote in it). Links to an order are shortened before anything is sent, so the private part of the address never reaches Google.

Google Tag Manager also loads the Meta Pixel (connect.facebook.net), Meta's measurement tag. It tells Meta which pages of this site you view, so we can measure our adverts on Facebook and Instagram and show them to people who have visited the site. Meta may connect this to a Facebook or Instagram account you are signed in to, and uses it under its own privacy policy. Pages that carry a link to an order are never reported to Meta.

_ga

Stored for 2 yearsSet by Google Analytics. A random identifier that lets us tell one visitor from another without knowing who you are.

_ga_QJ6EK56T7Z

Stored for 2 yearsSet by Google Analytics. Keeps track of the current visit, so pages viewed in one sitting are counted together.

_fbp

Stored for 3 monthsSet by the Meta Pixel. A random identifier for your browser, so Meta can recognise the same browser across visits to this site.

_fbc

Stored for 3 monthsSet by the Meta Pixel, and only when you arrive from a link on Facebook or Instagram. Records which advert click brought you here.

If you allowed analytics before placing an order, our server tells Google Analytics once the payment is confirmed: the order number, the products, the amounts and the random identifier from the _ga cookie, so the order is linked to your visit. Your name, email address, telephone number and delivery address are never sent.

We also use the Whop measurement pixel (t.whop.tw), which tells us how many people who arrived from an advert went on to order. It reports the pages you view, the products you open and add to your basket, and whether you send an enquiry. It is covered by the same choice: press “Close & deny”, or answer nothing, and it is never loaded. Pages that carry a link to an order are never reported to Whop. Once loaded it may set cookies of its own, which are Whop's rather than ours. With the same consent, we keep the advert click identifier and campaign tags from the link you arrived on in your browser's local storage (bpl-fbclid, up to 90 days), and read the Whop pixel's visitor identifier when you order, so an order can be matched to the advert; our Privacy Policy explains what is sent to Whop when you order.

The same choice also loads the Google Ads tag (googletagmanager.com), which tells Google which pages you view, so we can measure our Google adverts and show them to people who have visited the site. Links to an order are shortened before anything is sent, and pages that carry one are never reported. It may set cookies of its own, which are Google's rather than ours.

Third parties your browser contacts

The country selectors on this site show flag icons. Your browser downloads those images from the jsDelivr content delivery network (cdn.jsdelivr.net). This happens on every page and it does not depend on your consent choice, because the images are needed to draw the interface. Making that request tells jsDelivr the IP address you are browsing from.

On the checkout page, and only there, your card details are entered in a field hosted by our payment provider rather than by us. That provider may set cookies of its own, which are necessary to process the payment and to keep it secure.

How we ask for consent

A banner appears at the bottom of the page shortly after it loads. It offers two options and nothing else. “Allow all” loads Google Tag Manager, which loads Google Analytics and the Meta Pixel, the Google Ads tag and the Whop pixel, which may then set cookies of their own. “Close & deny” loads nothing beyond the strictly necessary items above. There is no per-category preference panel.

Your answer is saved in your browser's local storage, under bpl-tracking-consent, not in a cookie. Until you answer, no analytics script loads. The banner does not cover the strictly necessary cookies: they need no consent and cannot be switched off without breaking the shop.

Changing or withdrawing your choice

There is currently no “Cookie settings” link that reopens the banner. To change your answer, clear this site's data in your browser. That deletes bpl-tracking-consent, which resets your choice, so the banner appears again on your next visit and you can answer differently.

In most browsers you do this from the icon to the left of the address bar, under an option named “Cookies and site data”, or from the privacy section of the browser settings. Note the side effects: clearing site data also removes bpl:wishlist and the strictly necessary cookies, so your saved products are lost, your basket is emptied and you are signed out.

Controlling cookies in your browser

Every browser lets you block or delete cookies, either for one site or for all sites, and lets you review what a site has stored. If you block the strictly necessary cookies for this site, you will not be able to keep a basket, sign in, or place an order. A private or incognito window discards everything when you close it, so the banner appears again on every fresh session.

Browsers also carry a “Do Not Track” setting. There is no agreed standard for how a site should respond to it, and this site does not respond to it. Your answer in the banner is what governs analytics here.

Related policies

Our Privacy Policy explains what personal data we handle, why we hold it and what rights you have over it. Our Terms & Conditions set out the terms on which we supply.

Contact us

Questions about this policy, or about anything we store on your device, go to info@britishpeptidelabs.com. Support is by email only — we do not operate a telephone line. Our registered office is set out at the top of this page.