Privacy Policy

Data you give us directly:

- Identity and contact data — name, business or institution name, job title, email address, phone number, billing and delivery addresses.
- Order data — products ordered, order history, delivery instructions, and any eligibility information you provide to confirm business or institutional status.
- Communications — the content of emails, contact-form submissions, and CoA requests.

Data collected automatically:

- Technical data — IP address, browser type and version, device type, operating system, and pages visited, collected via server logs and analytics cookies (see Section 5).

Payment data: Payments are processed by our payment provider. When you pay by bank transfer (open banking) via Fena (fena.co), your payment is authorised directly with your own bank through Fena's regulated open-banking service. We do not receive or store your bank login credentials or full account credentials; we receive confirmation of payment and the details needed to reconcile your order.

We do not intentionally collect any special category (sensitive) personal data, and we do not sell personal data.

Under UK data protection law (UK GDPR and the Data Protection Act 2018), we must have a lawful basis for each use of your personal data:

- To process and fulfil orders (including payment, delivery, and providing certificates of analysis) — *performance of a contract*.
- To verify business or institutional eligibility and screen orders consistent with our research-use-only supply policy — *legitimate interests* (ensuring lawful supply of our products) and *compliance with legal obligations*.
- To respond to enquiries — *legitimate interests*.
- To keep accounting and tax records — *legal obligation*.
- To send marketing emails about our products to subscribers and existing business customers — *consent*, or *legitimate interests* for similar-products marketing to existing customers (with an opt-out in every message). You can unsubscribe at any time using the link in any marketing email or by contacting us.
- To operate, secure, and improve the Site, including analytics — *legitimate interests* and, for analytics cookies, *consent* (see Section 5).
- To prevent fraud and abuse — *legitimate interests*.

We share personal data only as needed with:

- Payment provider: Fena (open-banking payment initiation), which processes your payment as a regulated payment service provider.
- Couriers and delivery partners, to deliver your order (name, delivery address, contact details).
- Email marketing platform *(e.g. Mailchimp/Klaviyo — [INSERT ACTUAL PROVIDER])*, which stores subscriber email addresses and sends our marketing emails on our behalf.
- Analytics provider: Google (Google Analytics), which processes technical usage data as described in Section 5.
- Website hosting and IT service providers, who host the Site and our business systems.
- Professional advisers (accountants, lawyers, insurers) where necessary.
- Regulators, law enforcement, or other authorities where we are required to do so by law.

We require service providers acting as our processors to protect personal data and use it only on our instructions.

Some of our service providers (for example Google, and some email marketing platforms) may process personal data outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure an adequate level of protection through safeguards recognised by UK law, such as UK adequacy regulations (including the UK–US Data Bridge where applicable) or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

The Site uses:

- Strictly necessary cookies — required for core functions such as the shopping cart and checkout. These do not require consent.
- Analytics cookies (Google Analytics) — help us understand how visitors use the Site. These are set only with your consent, which you can give or refuse via the cookie banner and change at any time via the cookie settings link on the Site.

You can also block or delete cookies through your browser settings, though some Site features may not function without strictly necessary cookies.

- Order and transaction records — at least 6 years from the end of the relevant financial year, as required for tax and accounting purposes.
- Eligibility/verification records — for as long as you remain a customer and for 6 years thereafter, to evidence our supply controls.
- Marketing lists — until you unsubscribe or after a prolonged period of inactivity.
- Enquiry correspondence — up to 2 years after the enquiry is closed, unless connected to an order.
- Analytics data — retained in accordance with the retention period configured in Google Analytics.

When personal data is no longer needed, we delete or anonymise it.

We use appropriate technical and organisational measures to protect personal data, including encryption of the Site (HTTPS), access controls, and reputable third-party providers. Payments are handled by regulated payment providers; we do not store bank credentials or card numbers on our systems.

Under UK data protection law you have the right to:

- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data in certain circumstances;
- Restrict or object to processing in certain circumstances, including an absolute right to object to direct marketing;
- Data portability for data you provided to us that we process by automated means on the basis of contract or consent;
- Withdraw consent at any time where processing is based on consent (this does not affect processing before withdrawal).

To exercise any of these rights, contact us at sales@torpeptides.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113. We would appreciate the chance to address your concerns first.

The Site and our products are directed at businesses and research institutions. We do not knowingly collect personal data from anyone under 18.

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows the current version. Material changes will be highlighted on the Site.