Privacy policy

This Privacy Policy explains how PeptiChill (“we”, “us”) collects, uses and protects information you provide when using our website, peptidecooler.co.uk, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data we collect

• Order data: name, billing & delivery address, email, phone number, and order details.
• Payment data: processed directly by our payment provider (Stripe). We do not store full card details on our servers.
• Contact form data: name, email, and the contents of your message.
• Technical data: IP address, browser type, device type and pages viewed via cookies and analytics tools (only with your consent).

Why we use it & lawful basis

• To fulfil orders — lawful basis: performance of a contract.
• To respond to enquiries — lawful basis: legitimate interests.
• To send marketing emails — lawful basis: consent (you may withdraw at any time via the unsubscribe link).
• To comply with legal obligations — e.g. retaining invoices for HMRC.

Cookies

We use a small number of essential cookies that are required for the site to function (e.g. cart, session). With your consent we also use optional analytics cookies (e.g. PostHog) to understand how the site is used. You can change your choice any time by clearing your browser’s site data and revisiting the cookie banner.

Third parties we share data with

• Stripe — payment processing
• Email service provider — order & transactional emails
• Shipping carriers — to deliver your order
• Analytics — anonymised usage data, only if you consent

We do not sell your data, ever. We only share what’s strictly needed for the service you’ve asked for.

How long we keep data

Order records are retained for 6 years to comply with UK tax law. Contact form messages are retained for up to 24 months unless legally required to be kept longer.

Your rights

You have the right to:

• Request a copy of the personal data we hold about you (subject access request)
• Have inaccurate data corrected
• Request erasure of your data where there is no overriding lawful basis to keep it
• Restrict or object to processing
• Withdraw consent for marketing at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

How to contact us

Email hello@peptidecooler.co.uk with any privacy queries or data requests. We’ll respond within 30 days.