Privacy Policy

What information do we collect?

We collect information from you when you register on our site or place an order. When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address, mailing address or phone number. You may, however, visit our site anonymously.

What do we use your information for?

Any of the information we collect from you may be used in one of the following ways:

• •To personalise your experience — your information helps us to better respond to your individual needs
• •To improve our website — we continually strive to improve our website offerings based on the information and feedback we receive from you
• •To improve customer service — your information helps us to more effectively respond to your customer service requests and support needs
• •To process transactions

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information.

We use industry-standard SSL encryption across our entire website. All card payments are processed securely by our third-party payment providers. We do not collect, store, or have access to your card details at any point. Your payment information is entered directly on our payment provider's secure platform and never passes through our servers.

After a transaction, no financial information (card numbers, bank details, etc.) is retained on our systems. We never have access to your full card number.

Do we use cookies?

Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognise your browser and capture and remember certain information.

We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety.

Third-Party Links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

Your Rights Under UK GDPR

Under UK GDPR, you have the right to:

• •Access the personal data we hold about you
• •Request correction of inaccurate data
• •Request erasure of your personal data ("right to be forgotten")
• •Object to or restrict processing of your data
• •Request transfer of your data to another service

To exercise any of these rights, contact our Data Protection Officer at privacy@allmypeptides.com.

Lawful Basis for Processing

We process personal data only where UK GDPR gives us a lawful basis to do so. Contract (Article 6(1)(b)): processing your order, taking payment, arranging delivery, handling returns, and operating your account and AMP Rewards balance. Legal obligation (Article 6(1)(c)): keeping accounting and tax records, and responding to lawful requests from regulators or law enforcement. Legitimate interests (Article 6(1)(f)): preventing fraud and payment abuse, securing the website, and understanding aggregate site usage — balanced against your rights and privacy. Consent (Article 6(1)(a)): analytics and advertising cookies, and marketing email to anyone who is not an existing customer. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How Long We Keep Your Data

We keep personal data only as long as we need it. Order and transaction records, including invoices, are retained for six years after the end of the relevant financial year, to meet HMRC and Companies Act record-keeping requirements. Account and AMP Rewards data is retained while your account is open and for 24 months after your last activity, after which it is deleted or anonymised. Customer support correspondence is retained for 24 months. Marketing suppression records — the list of people who have unsubscribed — are kept indefinitely, because we need them to keep honouring your opt-out. Website analytics data is retained for 14 months. Where you ask us to erase your data we will do so unless we are required to keep it for one of the purposes above.

Who We Share Your Data With

We do not sell your personal data. We share it only with service providers who process it on our instructions, under written terms, and only for the purposes described in this policy.

Payment processing: card and open banking payments are handled by our payment providers on their own hosted checkout pages. We never receive or store your full card number or bank credentials. These providers act as independent controllers for fraud prevention and regulatory purposes and publish their own privacy notices. Hosting and security: Cloudflare (website hosting, database and content delivery). Email: our transactional email provider, used to send order confirmations, dispatch notifications and, where you have opted in, marketing. Delivery: Royal Mail and other carriers receive the name, delivery address and, where supplied, the phone number needed to deliver your parcel. Analytics and advertising: Google and TikTok, only where you have accepted analytics and advertising cookies. Professional advisers, auditors, and regulators or law enforcement where we are legally required to disclose.