Privacy Policy

Who we are

Trading name

British Peptide Labs

Legal entity

AODAEMON LTD — a private limited company registered in England and Wales, Companies House No. 17176945.

VAT status

Not VAT registered

Registered office

Office 113860 Tottenham Court RoadFitzroviaLondonW1T 2EWUnited Kingdom

Contact

info@britishpeptidelabs.com

What we collect

We collect what we need to run the shop and to answer enquiries. Almost all of it you give us yourself.

• Orders and checkout. First name, surname, delivery address (address line, town or city, postcode, county if you give one, and country), company name if you give one, email address, and telephone number if you give one. The same details are collected for billing when they differ. These go to our own store backend and are held there as your basket and, once you place the order, as your order record. Your email address and first name are saved with your basket as soon as you type them, so they are kept even if you leave before pressing Continue.
• Customer account. You do not need an account to order, and we do not offer one in our menus. Our shop software still has account pages; if you create an account there, it stores an email address, a password, first name, surname, telephone number and any addresses you save.
• Contact form. The form on our contact page and the contact pop-up ask for your name, your email address, your telephone number with its country dialling code, and your message.
• Affiliate and wholesale enquiries. Name, email address, company name if you give one, and an optional message.
• Site search. The words you type into the search box. Nothing personal is attached to them.
• Technical information. As with any website, our servers and our providers receive the internet (IP) address your browser connects from and standard request details, so that pages can be delivered and abuse can be spotted.

Where enquiries go, and what we do not send

Messages from the contact form, the contact pop-up and the affiliate and wholesale forms are emailed to our own inbox through our email provider, with your email address set as the reply address so we can answer you. They are not added to any mailing list or customer-management system.

We do not run a newsletter and we do not send text messages. Besides the emails about your own orders (the order confirmation and delivery updates), we send a short series of emails if an order you started was not completed, and after a delivery a request for a Google review and a discount on your next order. These are described below. You can turn them off at checkout with the "Don't send me reminders or offers by email" box, or with the unsubscribe link in any of them.

Why we use it, and our legal basis

UK GDPR requires us to have a legal basis for each use. Ours are:

• To take, process and deliver your order, and to keep you informed about it. Legal basis: performance of a contract with you. Without these details we cannot take payment or arrange delivery.
• To help with an order you started but did not complete. If you give us your email address at checkout and the order is not placed, whether you stopped before paying or the bank payment did not go through, we may send you an email about that order about an hour later, with a link back to it and an offer to help if something went wrong. Legal basis: our legitimate interests in resolving delivery and payment issues with orders customers have started.
• Reminders, offers and review requests. If the order is still not placed, we may send a reminder a day later and a single-use discount two days after that. After an order is dispatched, we may ask once for a Google review and later send a single-use discount on your next order. We only send these when you gave us your email address while ordering or starting an order with us, they are only about our own products, and you were offered a way to refuse them at checkout. Legal basis: the "soft opt-in" in the Privacy and Electronic Communications Regulations, and our legitimate interests in direct marketing of our own products. We never send more than one of these emails in a day to the same address, every one carries an unsubscribe link that takes effect straight away, and you can also object by emailing us.
• To answer enquiries and handle partner requests. Legal basis: our legitimate interests in running the business and replying to people who get in touch.
• To keep the site and our orders secure and to prevent fraud. Legal basis: our legitimate interests in protecting the shop and its customers.
• To meet our record-keeping duties. UK tax, accounting and consumer law require us to keep records of the sales we make. Legal basis: legal obligation.
• For analytics and advertising measurement. Legal basis: your consent. Analytics, the Meta Pixel and the Whop pixel load only after you choose “Allow all” in the cookie banner.
• To understand how customers find us. With every order we record one broad label for how the visit arrived — for example an advert, a search engine, another website, or typed in directly — and the name of that site or campaign. It is worked out from the address you landed on and the site that linked to us, stored only with the order on our own systems, never shared, and nothing is saved in your browser for it. Legal basis: our legitimate interests in knowing which of our marketing works. You can object by emailing us.

Cookies and what your browser stores

We set a small number of first-party cookies. Most of them exist so the shop works at all: they remember your basket, keep you signed in if you have an account, hold a new registration while it is being verified, and remember your language preference. One is a random identifier that lets us cache pages correctly. The full list, with names, purposes and lifetimes, is in our Cookie Policy.

Some other items are kept in your browser’s own storage. They stay on that device and are not sent to us unless stated:

• Your wishlist. The product identifiers you have saved. They stay in the browser you saved them in, are never transmitted to us, and do not follow you to another device.
• Your cookie choice. Whichever option you picked in the banner.
• Your age confirmation. That you confirmed you are 18 or over, for 30 days.
• Your delivery details. Only if you leave “Remember these details on this device” ticked at checkout, so the form fills itself next time. Untick it and they are removed.
• The advert you arrived from. Only after you choose “Allow all”: the advert click identifier and the page you landed on, sent with your order as described under Whop below.

The banner offers two options, “Allow all” and “Close & deny”. There are no separate categories to tick. Your choice is stored in your browser rather than in a cookie, so clearing your browser data brings the banner back.

Who we share it with

We do not sell personal data. We share it only with the providers we need to run the shop and, if you allow it in the cookie banner, with Meta and Whop to measure our advertising.

• Wallid, our Pay by Bank provider. We send it the order amount and a payment reference only, not your name, email address, delivery address or telephone number. You approve the payment in your own bank; we never see your bank login or account details.
• Royal Mail Tracked 24. Your name, company name if you give one, delivery address, telephone number and email address, so the parcel can be delivered and the carrier can send you tracking and delivery updates. Delivery terms are on our Shipping page.
• Google Tag Manager and Google Analytics. Loaded only if you choose “Allow all” in the cookie banner. Decline, and no Google script is loaded at all. With your consent, Google Analytics receives the pages and products you view and your basket and checkout steps, and, once a payment is confirmed, the order number, products and amounts. Never your name, email address, telephone number or delivery address.
• Meta (Facebook and Instagram). Loaded only if you choose “Allow all” in the cookie banner. With your consent, the Meta Pixel sends Meta the pages you view on this site, your IP address, basic browser details and the identifier in its _fbp cookie, so we can measure our adverts and show them to people who have visited the site. Meta may connect this to a Facebook or Instagram account and uses it under its own privacy policy. Pages that carry a link to an order are never reported, and your name, email address, telephone number and delivery address are never sent.
• Whop. Our advertising measurement provider, used to tell which adverts lead to orders. Loaded only if you choose “Allow all” in the cookie banner. With your consent, the Whop pixel receives the pages you view, the products you open and add to your basket, and whether you send an enquiry. When you place an order with that consent, we also send Whop your email address, the order number and total, the advert click identifier and campaign tags from the link you arrived on, the visitor identifier the Whop pixel set in your browser, your IP address and basic browser details, so the order can be matched to the advert. We hold the identifiers, IP address and browser details with the order only until they are sent, then delete them. Without your consent, nothing is sent to Whop. Your name, telephone number and delivery address are never sent.
• Resend. Our email provider. It receives your email address, your name and the contents of your order or basket so it can send order confirmations, delivery updates and the reminder, offer and review emails described above, and it carries our internal copies of new orders and enquiries to our own inbox. It processes this on our behalf, records whether you unsubscribe, and does not use it for its own purposes.
• jsDelivr. A third-party content delivery network. The flag icons in our country selectors are fetched from cdn.jsdelivr.net, and that happens on every page. The request tells jsDelivr your IP address and basic browser details. It is part of drawing the page rather than tracking, so it happens whatever you choose in the cookie banner.
• Hosting and infrastructure providers. The companies that run our servers, our database and our email process data on our behalf, under terms that only allow them to act on our instructions.

Sending data outside the United Kingdom

We are a UK business selling to UK addresses, and we keep data in the UK wherever we can. Some of the providers above operate internationally, so parts of your data may be processed outside the United Kingdom, for example in the European Economic Area or the United States. Where that happens, the transfer relies on a UK adequacy decision (including the UK–US data bridge) or on the UK International Data Transfer Agreement or Addendum in the provider’s data processing terms. If you want to know where a particular part of your data is handled, email us and we will tell you what we know.

How long we keep it

Order and payment records are kept for six years from the end of the financial year the order falls in, as UK tax law requires, and for as long as we may need them to deal with a query, a return or a legal claim. Account details are kept while the account is open. Basket data is short-lived and expires on its own. The link in an email about an unfinished order stops working after seven days, or as soon as the order is placed. Discount codes are single-use and expire on the date shown in the email. If you unsubscribe, we keep a note of your email address so that we do not email you again. Anything else is kept only for as long as we need it for the purpose we collected it for, and you can ask us to delete what we hold at any time.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have anything inaccurate corrected;
• ask us to delete data we no longer need to keep;
• ask us to restrict how we use it while a concern is resolved;
• receive the data you gave us in a portable form, or have it sent straight to another provider;
• object to us using it on the basis of our legitimate interests, including the emails about an unfinished order and our reminders, offers and review requests, which stop as soon as you unsubscribe or ask;
• withdraw your consent at any time where consent is the basis we relied on. Withdrawing it does not affect anything done before you withdrew it.

We do not make decisions about you based solely on automated processing.

To use any of these rights, email info@britishpeptidelabs.com. There is no charge. We will respond within one month, and we may ask you to confirm who you are before we release anything.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk. We would rather you came to us first so we can put it right.

Security

Traffic between your browser and this site is encrypted in transit. Payments are approved in your own bank through our Pay by Bank provider, so no card or bank login details reach our systems. The cookies that carry your basket and your session are set http-only, so page scripts cannot read them. Access to the store backend is limited to the people who need it, through individual accounts. No system is completely secure, but we take reasonable technical and organisational measures and we review them.

Age

This site is not aimed at anyone under 18, and we do not knowingly collect data about children. For research use only. Not for human or veterinary use. Sold strictly for in-vitro laboratory research; not for diagnosis or treatment. If you believe a child has given us their details, email us and we will delete them.

Changes to this policy

We update this page when what we do changes. The date at the top shows when it was last revised. Where a change materially affects how we use your data, we will say so plainly rather than quietly editing the text.

How to contact us

For anything in this policy, including a request about your rights, email info@britishpeptidelabs.com, or use the contact form. We do not operate a telephone line. Our registered office is listed at the top of this page. Our Terms and Conditions and Cookie Policy sit alongside this policy.