Legal
Privacy Policy
Last updated: April 2025
Applies to: All users of the Optimus Peptides website
Jurisdiction: England & Wales (UK GDPR)
Optimus Peptides ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. By using our website or placing an order, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are (Data Controller)
Optimus Peptides is the data controller responsible for your personal data. For any privacy-related enquiries or to exercise your rights under UK GDPR, please contact us at hello@optimuspeptides.co.uk.
2. What Personal Data We Collect
We collect and process the following categories of personal data:
Data you provide directly
- Identity data: First name, last name, title, professional role or position;
- Contact data: Email address, telephone number;
- Institutional data: Name of employer, research institution, or organisation;
- Delivery data: Shipping address, including postcode and country;
- Order data: Details of products ordered, order value, order history;
- Communications data: Any correspondence you send to us by email or other means.
Data collected automatically
- Technical data: IP address, browser type and version, time zone, browser plug-in types;
- Usage data: Pages visited, time spent on pages, links clicked, referring URLs;
- Cookie data: As described in our Cookie Policy.
3. How We Use Your Personal Data
We use your personal data for the following purposes and on the following lawful bases:
- To process and fulfil your order - necessary for the performance of a contract with you;
- To communicate with you about your order (dispatch notifications, tracking, order queries) - necessary for the performance of a contract;
- To verify your eligibility to purchase (researcher status) - necessary for compliance with our legal obligations and our legitimate business interests;
- To maintain our records and accounting - necessary for compliance with our legal obligations;
- To send you relevant product updates or promotional communications - only with your explicit consent, which you may withdraw at any time;
- To improve our website and services - based on our legitimate interests in running an effective business.
We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.
4. Who We Share Your Data With
We may share your personal data with the following categories of third parties, only to the extent necessary:
- Courier and logistics providers - to arrange delivery of your order (name and delivery address shared);
- Payment processors - to process payments securely (we do not store full card details);
- IT service providers - hosting, email, and website platform providers who process data on our behalf under appropriate data processing agreements;
- Professional advisers - solicitors, accountants, or auditors where necessary;
- Law enforcement or regulatory authorities - where required by law or to protect our legal rights.
All third parties we engage are required to handle your data in accordance with UK GDPR and to implement appropriate security measures.
5. International Data Transfers
Where we transfer your data outside the UK (for example, to courier partners or IT providers operating internationally), we ensure appropriate safeguards are in place in accordance with UK GDPR, including adequacy decisions or Standard Contractual Clauses.
6. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law:
- Order and transaction records: 7 years (to comply with HMRC accounting requirements);
- Customer communications: 3 years from last contact;
- Marketing preferences: Until you withdraw consent or request erasure;
- Website analytics data: Up to 26 months in aggregated form.
7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of AccessRequest a copy of all personal data we hold about you.
Right to RectificationRequest correction of inaccurate or incomplete data.
Right to ErasureRequest deletion of your data where there is no lawful reason to retain it.
Right to Restrict ProcessingRequest that we limit how we use your data in certain circumstances.
Right to Data PortabilityReceive your data in a structured, machine-readable format.
Right to ObjectObject to processing based on legitimate interests or for direct marketing.
Right to Withdraw ConsentWithdraw consent at any time where processing is consent-based.
Right to ComplainLodge a complaint with the ICO at ico.org.uk.
To exercise any of your rights, please contact us at hello@optimuspeptides.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.
8. Cookies
Our website uses cookies to ensure core functionality, analyse usage, and improve your experience. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:
- Strictly necessary cookies: Required for the website to function (e.g. shopping cart session data). These cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with the website. Collected in aggregate and anonymised form.
- Preference cookies: Remember your settings and preferences on return visits.
You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include secure HTTPS transmission, restricted staff access, and encrypted data storage. However, no method of internet transmission is completely secure and we cannot guarantee absolute security.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on our website with the date of last revision. Material changes will be notified to customers by email where appropriate.
12. Contact & Complaints
For any privacy-related queries, please contact us at hello@optimuspeptides.co.uk. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.