Privacy Policy

Fab Peptides ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or place an order with us.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you consent to the practices described in this policy.

We collect information that you provide directly to us, as well as information collected automatically as you browse our website.

We do not knowingly collect any special category data (such as health information) beyond what is voluntarily provided in correspondence with us.

We use the information we collect for the following purposes:

• To process and fulfil your orders, including dispatch and delivery.
• To verify your status as a qualified researcher in accordance with our Research Use Only policy.
• To communicate with you regarding your order, account, or enquiries.
• To comply with our legal and regulatory obligations, including age verification and compliance checks.
• To improve our website, products, and customer experience.
• To detect and prevent fraud, misuse, or breaches of our Terms of Service.

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract: Processing necessary to fulfil an order or provide a service you have requested.
• Legal Obligation: Processing necessary to comply with UK law, including age verification and researcher compliance requirements.
• Legitimate Interests: Processing necessary for fraud prevention, website security, and improving our services, provided this does not override your fundamental rights.
• Consent: Where you have given clear consent, such as for optional marketing communications.

We do not sell your personal data. We may share your information with trusted third parties strictly for the purposes of operating our business, including:

• Courier and delivery partners (e.g. Royal Mail) to fulfil your order.
• Payment processors to securely handle transactions.
• IT and website hosting providers who support our platform.
• Regulatory or law enforcement bodies, where required by law.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Order and transaction records are typically retained for 6 years in line with UK tax and accounting obligations. Researcher verification data is retained for the duration of your customer relationship with us, plus a reasonable period thereafter for compliance purposes.

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted checkout, secure data storage, and restricted internal access to customer information.

While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and remember your preferences (such as researcher verification status during a session).

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of our website, including the ability to complete a purchase.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to our processing of your data on certain grounds.

To exercise any of these rights, please contact us using the details in Section 13. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Your personal data is primarily stored and processed within the United Kingdom. Where any data is transferred outside the UK (for example, via a third-party service provider), we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Our website and products are intended strictly for individuals aged 18 and over who are qualified researchers. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us: