// Pepti-Genix

Privacy Policy

Pepti-Genix Ltd (“we”, “us”, “our”) is the data controller for personal data collected through this website. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights you have in respect of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We collect the following categories of personal data:

Account and order data — name, billing address, delivery address, telephone number, email address, and password (stored hashed)
Payment data — processed directly by our payment provider; we do not store full card numbers on our servers
Communications — content of emails, support enquiries, and form submissions
Technical data — IP address, browser type and version, time zone, device type, and pages viewed, collected via server logs and analytics cookies

Purposes of Processing

We process your personal data for the following purposes:

To process and dispatch your order (legal basis: contract)
To respond to customer service enquiries (legal basis: contract / legitimate interest)
To meet our legal record-keeping obligations including tax records (legal basis: legal obligation)
To prevent fraud and verify researcher status (legal basis: legitimate interest)
To send marketing communications where you have explicitly opted in (legal basis: consent)
To improve our website and service through aggregate analytics (legal basis: legitimate interest)

Sharing Your Data

We share your personal data with the following categories of recipient only to the extent necessary:

Payment processors to take and reconcile payments
Couriers and postal carriers to deliver your order
Hosting and IT service providers who maintain our website infrastructure
HMRC and other regulators where required by law
Legal and professional advisers where necessary to obtain advice or defend a claim

We do not sell your personal data to any third party. We do not transfer your personal data outside the United Kingdom or European Economic Area without ensuring appropriate safeguards are in place.

How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out above. Account and order records are retained for six years from the date of the last transaction to meet HMRC record-keeping obligations. Marketing data is retained until you withdraw consent. Server logs are retained for 90 days.

Your Rights

Under UK GDPR you have the following rights in respect of your personal data:

The right to access a copy of the personal data we hold about you
The right to have inaccurate personal data corrected
The right to have your personal data erased in certain circumstances
The right to restrict our processing of your personal data in certain circumstances
The right to object to certain types of processing including direct marketing
The right to data portability
The right to withdraw consent at any time where consent is the basis for processing
The right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk)

To exercise any of these rights please email privacy@pepti-genix.com.

Cookies

Our use of cookies is described in our Cookie Policy.

Security

We use appropriate technical and organisational measures to protect your personal data including TLS encryption in transit, hashed passwords, access controls, and regular security review. No method of transmission over the internet is completely secure and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated last-revised date.

Contact

For any data protection enquiry please email privacy@pepti-genix.com.