Privacy Policy
Last updated: 22 July 2026
This policy explains how SP Peptides (“we”, “us”) collects and uses your personal data when you use sppeptides.com. We are the data controller for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018).
Contact: info@sppeptide.com | 90 York Way, London, England, N1 9AG | +44 7392 726713
1. What we collect
- Order information — name, email address, delivery address, phone number, and details of the products you order.
- Payment information — payments are made by bank transfer through our open banking payment provider. We do not see, collect, or store your bank login details or card numbers. We receive confirmation that payment has been made.
- Account information — if you create an account: your login email and order history.
- Technical information — IP address, browser type, and pages visited, collected via cookies and server logs.
- Correspondence — emails or messages you send us.
2. How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Sending order confirmation and delivery emails | Performance of a contract |
| Responding to enquiries | Legitimate interests |
| Keeping records for tax and accounting | Legal obligation |
| Preventing fraud and misuse of the Site | Legitimate interests |
| Site security and performance | Legitimate interests |
| Marketing emails (only if you opt in) | Consent — withdraw at any time via the unsubscribe link |
We do not sell your personal data, and we do not use it for automated decision-making that has legal effects on you.
3. Who we share it with
- Payment provider — Fena (FCA-authorised open banking provider), to process your payment.
- Delivery couriers — name and address, to deliver your order.
- Hosting provider — our website and its database are hosted on secure servers within the UK/EEA.
- Professional advisers and authorities — where required by law (for example HMRC, or regulators such as the MHRA or Trading Standards on lawful request).
We do not transfer your personal data outside the UK/EEA except where the recipient provides adequate safeguards recognised under UK law.
4. How long we keep it
- Order and invoice records: 6 years after the end of the relevant tax year (legal requirement).
- Account data: until you ask us to delete your account.
- Marketing consents: until you withdraw consent.
- Technical logs: up to 12 months.
5. Cookies
We use essential cookies required for the shopping basket and checkout to function. We do not use advertising or tracking cookies. You can control cookies through your browser settings; blocking essential cookies may stop the checkout from working.
6. Your rights
Under UK data protection law you have the right to:
- access a copy of your personal data;
- correct inaccurate data;
- request deletion of your data (subject to our legal retention obligations);
- restrict or object to certain processing;
- data portability; and
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email info@sppeptide.com. We will respond within one month.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would appreciate the chance to resolve any concern first.
7. Security
Your data is protected by SSL encryption in transit, secure managed hosting with firewall and malware scanning, and access limited to those who need it. Payments are handled entirely by our FCA-authorised payment provider — bank credentials never pass through our systems.
8. Changes to this policy
We may update this policy from time to time. The current version will always be published on this page with the date of the last update.