Privacy Notice | POE — Peptides of England

1. Who we are

Hamza Sabati, trading as POE — Peptides of England(peptidesofengland.co.uk), is the controller of personal data collected through this site. Contact: privacy@peptidesofengland.co.uk.

2. Data we collect

Contact details — name, email address, delivery address.
Account credentials — where you sign in.
Order data — items, order reference, delivery status.
Support messages — content of emails or forms you send us.
Usage and device data — IP address, browser, pages viewed.

Payment card details are collected directly by our payment provider Paddle and never reach our servers.

3. Why we use it

To create your account and fulfil your orders (contract).
To provide customer support (contract / legitimate interests).
To detect fraud and keep the site secure (legitimate interests, legal obligation).
To improve the site and our products (legitimate interests).
To send marketing emails where you have opted in (consent).
To comply with tax, accounting and other legal obligations (legal obligation).

4. Who we share it with

Paddle.com — our Merchant of Record. Paddle processes your payment, handles invoicing, tax and refunds, and acts as controller for the payment relationship.
Service providers / subprocessors — hosting, database, email delivery, analytics and customer-support tooling.
Shipping partners — the courier that delivers your order.
Professional advisers — legal, accounting and similar advisers where necessary.
Authorities — where we are legally required to disclose data.

5. International transfers

Some of our providers are outside the UK/EEA. Where they are, we rely on the UK/EU Standard Contractual Clauses or an equivalent adequacy mechanism to protect your data.

6. How long we keep it

We keep personal data only as long as needed for the purposes above — typically for the life of your account and for up to 7 years afterwards to meet UK tax and accounting requirements. When no longer needed it is deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to:

access a copy of your personal data;
ask us to rectify or erase it;
restrict or object to processing;
data portability;
withdraw consent for any consent-based processing;
complain to the UK Information Commissioner's Office (ico.org.uk).

To exercise these rights, email privacy@peptidesofengland.co.uk. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure hosting. No system is 100% secure, but we work hard to keep your data safe.

9. Cookies

We use essential cookies to make the site work (session, cart) and limited analytics cookies to understand how the site is used. You can manage cookies via your browser settings.

10. Changes

We may update this notice from time to time. The date at the top reflects the latest version.