Privacy Policy

Who we are

This website is operated by Peptide Vault Research Labs (“we”, “us”, “our”). We are the data controller for personal data collected through this website and processed in connection with your account and orders.

For any privacy-related enquiry, please contact us at privacy@peptidevault.co.

What data we collect

• Account data: name, email address, password hash and any preferences you set.
• Order data: shipping address, order contents, payment references (transaction IDs, PayPal order IDs, on-chain crypto hashes). We do not store card numbers.
• Guest checkout data: the email address and name you provide at checkout to send order confirmations.
• Technical data: IP address, device and browser information, log data and cookies necessary for the site to function.
• Correspondence: messages you send us via email or support forms.

How we use your data

• To create and secure your account and provide the services you request.
• To process orders, take payment, fulfil shipping and provide customer support.
• To send transactional emails such as order confirmations, dispatch notifications and payment updates.
• To keep records for accounting, tax and legal-compliance purposes.
• To detect and prevent fraud, abuse and unlawful activity on the platform.

We do not sell your personal data, and we do not use it for third-party advertising.

Legal bases (UK GDPR)

• Contract: to fulfil orders and provide the requested services.
• Legal obligation: to keep accounting and regulatory records.
• Legitimate interests: to secure the site, prevent fraud and improve our service.
• Consent: where required, for example for optional marketing communications.

Cookies

We use strictly necessary cookies to keep you signed in, maintain your basket and remember checkout preferences. We do not use third-party advertising or cross-site tracking cookies. You can clear or block cookies in your browser, but the site may not function correctly without them.

Who we share your data with

We share personal data only with providers who help us run the service, and only for the purposes described here:

• Payment processors (PayPal, GoCardless, blockchain networks for crypto payments) to take and verify payments.
• Shipping carriers, so your order can be delivered.
• Cloud infrastructure and email delivery providers used to host the site and send transactional messages.
• Regulators, law enforcement or professional advisors where required by law.

International transfers

Some of our providers process data outside your country of residence. Where personal data leaves the UK/EEA, we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep your data

Account data is kept for as long as your account is active. Order and transaction records are retained for at least six years to meet accounting, tax and consumer-protection obligations. Support correspondence is kept for as long as it is relevant to your enquiry.

Your rights

Subject to applicable law, you have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to receive a portable copy. To exercise any of these rights, email privacy@peptidevault.co. You also have the right to complain to your local data-protection authority (in the UK, the Information Commissioner's Office).

Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it was last revised. Material changes will be communicated where appropriate.