Privacy policy

A2B Peptides Ltd (“we”) is the controller of the personal data described here. Contact us at supports@a2bpeptides.co.uk.

What we collect and why

• Account details (name, email, password stored securely as a hash) — to provide your account. Lawful basis: contract.
• Orders and delivery details (items, address, phone, order history, membership and rewards) — to fulfil and support your orders. Lawful basis: contract.
• Payment records — payments are made by bank transfer or through our payment provider; we do not store full card details. We keep records of what was paid. Lawful basis: contract and legal obligation.
• Support messages — to answer your questions. Lawful basis: legitimate interests.
• Service emails (order, dispatch, invoice and account emails) — Lawful basis: contract.
• Website analytics — only if you allow analytics cookies. Pages viewed, traffic source and device type, without your name, email, address or payment details. Lawful basis: consent.

Who we share it with

Service providers that host our website and database, send our emails, process payments, deliver parcels and (with your consent) provide analytics such as Google. They act on our instructions. Some may process data outside the UK under appropriate safeguards. We do not sell your personal data.

How long we keep it

Account data is kept while your account is open. Order and payment records are kept for as long as required for tax and accounting purposes (HMRC generally requires six years). Analytics data is retained according to our Google Analytics retention setting.

Your rights

Under UK GDPR you can ask to access, correct or delete your data, restrict or object to its use, receive a copy, and withdraw consent at any time (for cookies use “Cookie settings” in the footer). Email us to make a request. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

See our cookie policy.