Privacy Notice

Who we are

Friendly Peptides is the controller of personal information handled through this website. Questions or data-rights requests can be sent to contact@friendlypeptides.co.uk or made by telephone at +44 7456 021407.

Information we collect

When you make an enquiry or begin an order, we may collect your name, email address, telephone number, organisation, research information, message, selected products, research-use declarations, IP address, browser user-agent, and the date and time of the submission.

When you pay, Stripe collects payment and billing information. We receive transaction identifiers, payment status, delivery details and limited customer information; we do not receive or store your full card number.

Your product selection may be stored locally so it remains available when you return. Your unfinished checkout email and research declaration are kept only for the current browser-tab session, allowing the checkout flow to continue between pages; they are cleared after a confirmed purchase or when that session ends.

Why we use it and our lawful bases

• Contract: to create, take payment for, deliver and support an order, and to answer steps you take before entering a contract.
• Legitimate interests: to prevent misuse, fraud and non-research purchasing; maintain transaction security; keep an auditable research-use declaration; manage stock; and defend legal claims. We balance these purposes against your rights.
• Legal obligation: to keep records or disclose information where UK law requires us to do so.

We do not use order-confirmation or enquiry-receipt emails for unrelated marketing.

Who receives information

We use Vercel for website hosting and server functions, a Vercel-connected Postgres provider for records, Stripe for payment processing, Resend for transactional email, and Royal Mail or another disclosed carrier for delivery. Professional advisers, regulators, law enforcement or insurers may receive information where necessary and lawful.

These providers may process information outside the UK. Where required, transfers are covered by the provider's lawful transfer mechanism and contractual safeguards. Their own notices explain their independent processing.

How long we keep it

Paid-order, payment, delivery and research-declaration records are normally retained for up to six years after the relevant accounting period or transaction, where needed for tax, contractual, safety, compliance or legal-claims purposes. Failed or abandoned checkout records are reviewed and normally deleted within 90 days. Enquiries are normally kept for up to 24 months after they are resolved. Security data is kept only for as long as reasonably required to investigate and prevent misuse.

We review these periods and delete or anonymise information sooner when it is no longer needed, unless a legal hold or continuing dispute requires retention.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability of your personal information. You may object at any time to processing based on legitimate interests; we will stop unless we have compelling legitimate grounds or need the information for legal claims.

Contact us at contact@friendlypeptides.co.uk. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Security and required information

We use access controls, HTTPS, signed payment webhooks and restricted service credentials. No online service can guarantee absolute security.

Contact details, delivery information and a valid research-use declaration are required to accept an online order. If you do not provide them, checkout cannot continue.