Privacy policy

PeptidesFridge is a trading name of [REGISTERED COMPANY NAME], registered in England and Wales under company number [COMPANY NUMBER], with a registered office at [ADDRESS LINE 1], [ADDRESS LINE 2], [CITY], [POSTCODE], United Kingdom.

For anything to do with your personal data — access, correction, deletion, or a complaint — email [email protected]. We answer data-rights requests within one month, as the UK GDPR requires.

We collect only what we need to sell and deliver a cooler:

• Order details — name, delivery and billing address, email address, phone number, the items ordered and the amount paid.
• Payment data — handled by our payment providers. Card numbers are entered on the provider's own page and never reach our servers. We receive only a payment reference, the amount, and whether it succeeded.
• Support correspondence — emails and contact-form messages, including anything you choose to tell us about a warranty claim.
• Marketing preferences — your email address if you ask for a discount code or newsletter, plus whether you have unsubscribed.
• Technical and usage data — IP address, browser and device type, pages viewed, and the site or advert that referred you. See our cookie policy.

We do not ask for, and do not want, health data. Please do not send us medical information — a cooler is a storage device and we have no need to know what you keep in it.

• To perform our contract with you — taking and fulfilling your order, arranging delivery, handling returns and warranty claims, and answering your questions about an order.
• To comply with a legal obligation — keeping accounting and VAT records, and responding to lawful requests from authorities.
• For our legitimate interests — keeping the site secure, preventing fraudulent orders, understanding which pages and adverts work, and improving the products we sell. We balance these against your rights and use the least intrusive option that works.
• With your consent — marketing emails and any non-essential cookies, including advertising and analytics tags. You can withdraw consent at any time without affecting anything done before you withdrew it.

We never sell your personal data. We share it only with the service providers that make an order work, and only with what they need:

• Payment providers — to take payment and to check a payment actually cleared before we dispatch.
• Delivery partners — Royal Mail, DPD and equivalent EU carriers receive the delivery name, address and a contact detail for tracking notifications.
• Email provider — to send order confirmations, dispatch notices and, if you consented, marketing.
• Hosting and infrastructure — our servers and content delivery network, which process technical data such as IP addresses.
• Advertising and analytics platforms — where you have consented, Meta and Google may receive event data (for example that a purchase happened, and its value) so we can measure adverts. Identifiers sent for matching are hashed before they leave the browser or our server.
• Professional advisers and authorities — accountants, insurers and legal advisers, or a regulator where the law requires it.

If the business is ever sold or reorganised, customer records may transfer to the buyer. They would be bound by this notice until they told you otherwise.

Some of our providers process data outside the UK. Where that happens we rely on UK adequacy regulations, or on the International Data Transfer Agreement / the UK Addendum to the EU Standard Contractual Clauses, so your data keeps essentially the same protection it has here.

• Order and transaction records — six years after the end of the tax year the order falls in, because HMRC requires it.
• Warranty records — for the life of the 2-year warranty plus one year, so we can honour a late claim.
• Support emails — two years from the last message.
• Marketing consent — until you unsubscribe, then we keep a minimal suppression record indefinitely so we do not email you again by accident.
• Analytics and advertising data — no longer than 26 months.

Under the UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete data we no longer need — though we must keep order records for the tax period above;
• restrict or object to processing based on our legitimate interests;
• send your data to another provider in a portable format, where processing is based on consent or contract;
• stop using your data for direct marketing — always, no reason needed.

Email [email protected] to exercise any of these. There is no charge, and we do not need you to explain why.

We send marketing email only to people who asked for it, or who bought from us and did not opt out at the time. Every marketing email carries a one-click unsubscribe link and a List-Unsubscribe header. Order confirmations, dispatch notices and warranty correspondence are service messages, not marketing, so they continue regardless.

We advertise on platforms including Meta and Google. Where you consent, their measurement tags tell us which advert led to a visit or a purchase. You can withdraw that consent from the cookie settings on our cookie policy page, and you can control profiling in your account settings on those platforms.

The site is served over HTTPS only. Access to order data is limited to the people who need it to pack, ship and support orders, and is protected by individual accounts. Payment card details never touch our systems. No system is perfectly secure, but if a breach ever put your rights at risk we will tell you and the ICO as the law requires.

This shop is aimed at adults and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.

If we change how we use personal data we will update this page and move the "last updated" date. Where a change materially affects you, we will tell you by email before it takes effect.

Tell us first — most things are quicker to fix directly. If you are still not satisfied you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.