Privacy Policy

Peptigen Labs Ltd ("we", "us", "our"), trading as Peptigen Labs at peptigenlabs.co.uk, is the data controller for personal information collected through the Website. You can contact us at info@peptigenlabs.co.uk.

Order data: name, billing address, delivery address, email, phone number, organisation / institution, order history, chosen delivery option and any research-use acknowledgement ticked.

Account data (if you create a Lab Access account): email, hashed password, name, associated orders.

Communications: any message you send via the contact form, email or phone, and our reply.

Newsletter: email and (optionally) name, if you opt in.

Technical data: IP address, device / browser identifiers, referring page, pages visited, and (with consent) analytics cookies to help us improve the Website.

Payment data: we do NOT collect or store your bank login, security credentials or card details. Payment authorisation occurs entirely within your own bank's secure environment.

Contract necessity (UK GDPR Article 6(1)(b)) — to take and fulfil Orders, provide Lab Access, respond to enquiries.

Legal obligation (Article 6(1)(c)) — to retain order / accounting records, respond to lawful requests.

Consent (Article 6(1)(a)) — marketing emails and non-essential analytics cookies. Withdrawable at any time.

Legitimate interests (Article 6(1)(f)) — fraud prevention, security of the Website, defending legal claims, and running our business.

Order and accounting records: 6 years from the end of the financial year in which the Order was placed (UK HMRC / Companies House requirement).

Lab Access accounts: until deletion is requested or 3 years of inactivity.

Contact form messages: up to 24 months after the matter closes.

Newsletter records: until you unsubscribe.

Server / security logs: up to 12 months.

Order data is shared, strictly to fulfil your Order, with: our UK courier partners, our regulated UK payment gateway, our email service provider (for order / dispatch notifications), and our cloud hosting providers (data processors).

We may disclose data where required by law, court order, lawful request from a regulator, or to protect the rights, property or safety of Peptigen Labs, our customers or others.

We do NOT sell your personal data. We do NOT share it with third parties for their own marketing.

We store data primarily within the UK / EEA. Where any processor operates servers outside the UK / EEA, transfers are protected by an appropriate safeguard (UK International Data Transfer Addendum, adequacy regulations or standard contractual clauses).

Under UK GDPR you have rights to: access, rectification, erasure (subject to our retention obligations), restriction, objection, portability, and to withdraw consent at any time.

To exercise any right, email info@peptigenlabs.co.uk. We will respond within one calendar month. You may need to verify your identity.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We implement appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, hashed passwords, access controls, principle of least privilege, regular backups and audit logging. No system can be 100% secure; you are responsible for keeping your Lab Access credentials confidential.

The Website is strictly for qualified researchers and laboratory buyers aged 18+. We do not knowingly collect data from children. If you believe a child has provided personal data, please contact us immediately and we will delete it.

See our Cookie Policy for details.

We may update this Privacy Policy from time to time. The "last updated" date at the top of the policy shows when it was last revised.