Introduction
This Privacy Policy describes how we collect, use, store, share, and protect the personal data of users (“you” / “your”) in connection with your access to and use of our website https://impactpeptides.co.uk/ (the “Site”) and related services (e.g. ordering, newsletters, customer support).
By using or accessing our Site, or providing personal information to us, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site or provide personal information.
1. Data Controller & Contact Details
For the purposes of UK data protection law (UK GDPR & Data Protection Act 2018), Impact Peptides is the data controller. That means we determine the purposes and means of processing your personal data.
Contact Information:
Email: [contact@impactpeptides.co.uk]
If you have any data protection / privacy related queries, concerns or requests (e.g. access, correction, deletion), you may contact us via the above.
If you remain dissatisfied, you also have a right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
2. What Personal Data We Collect
We collect personal data in various ways, depending on how you interact with the Site, purchase, or contact us. Broadly, we collect:
a) Data you provide to us
Account / registration / profile information: name, email address, postal address, phone number, username, password (hashed), etc.
Order / purchase information: billing address, shipping address, payment information (card or other payments — note: we may use third-party payment processors, see below), purchase history, order details.
Customer support / communications: when you contact us (by email, phone, form), we collect the content of your communications, your contact details, and any additional information you choose to supply.
Marketing / newsletter preferences: if you opt in to receive our newsletter or marketing communications, we collect your email address, name, and any preferences you provide.
Promotional, survey, feedback data: responses you provide in surveys, reviews, questionnaires, etc.
b) Data collected automatically / by analytics / tracking
When you use the Site, we (and our third-party service providers) may collect certain technical and usage data automatically, including:
Your IP address, device type, browser and operating system, device identifiers
Referrer URL, pages you visited, time and date, duration of visit, pages accessed
Cookies, web beacons, tracking pixels or similar technologies
Log file data (e.g. errors, server logs)
Analytics information (e.g. via Google Analytics, etc.)
c) Data from third parties
We may receive data about you from third parties, such as:
Payment processors or financial institutions
Analytics / advertising partners
Public databases or open data sources
Social login providers (if you log in via a third party, e.g. “Log in with Google”)
4. Sharing & Disclosure of Personal Data
We may share your personal data with third parties in the following situations:
Service providers / processors: e.g. payment processors, shipping / courier companies, email / marketing platforms, hosting providers, analytics services, CRM systems. We will have data processing agreements in place to require these providers to handle your data securely and only for the purposes we specify.
Affiliates / group companies: if relevant, to assist with operations internally.
Legal / regulatory / governmental requests: where required by law, court order, or governmental authority.
Business transfers: in connection with a merger, acquisition, sale of assets or business restructuring, your personal data may be transferred to a successor or purchaser (with notice).
As required to protect rights, safety or property: e.g. to investigate fraud or security issues, or as otherwise necessary.
We will not sell or rent your personal data to unrelated third parties for their direct marketing without your explicit consent.
If any transfer is made to countries outside the UK / European Economic Area (EEA), we will ensure appropriate safeguards (e.g. standard contractual clauses, adequacy decisions) are in place to ensure your data is protected.
5. Cookies & Tracking Technologies
We use cookies and similar tracking technologies (e.g. pixels, beacons) to collect information about your use of the Site, remember your preferences, improve user experience, and deliver targeted marketing (where permitted).
You will see a cookie banner / consent tool on first visit, where you may accept or decline non-essential cookies. Essential cookies (needed to run the website or shopping cart) may be used without consent.
For more details, please see our Cookie Policy [link to separate cookie policy or section].
Typical uses include:
Session management, login, shopping cart
Analytics (e.g. Google Analytics)
Advertising / remarketing / behavioural tracking
Performance, A/B testing, site optimization
You can (in many browsers) disable or delete cookies, but doing so may impact your ability to use certain parts of the Site.
6. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it (including any legal, accounting, or reporting requirements). After that:
We may anonymise or aggregate data (so it no longer identifies you) for analytical or archival purposes
We will delete or securely destroy personal data when no longer needed
For account / order data, typically we may retain records for [e.g. 6 years] (or as required by tax / commerce law)
For marketing / newsletter data, we will retain until you withdraw consent or request deletion
If you would like details about our specific retention periods for a particular category of data, feel free to contact us.
7. Your Rights & Choices
Under UK data protection law, you have the following rights (subject to certain conditions and exceptions):
Right to access: obtain a copy of the personal data we hold about you.
Right to rectification: correct inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”): delete your personal data (where applicable).
Right to restrict processing: ask us to limit processing of your data in certain circumstances.
Right to data portability: receive a copy of your data in a structured, machine-readable format, and transmit it to another controller (where applicable).
Right to object: object to processing (including direct marketing, or processing under legitimate interests).
Right to withdraw consent: if the processing is based on consent, you may withdraw consent at any time (without affecting the lawfulness of prior processing).
Right to lodge complaint: with a supervisory authority (the UK ICO) if you believe we are misusing your data.
To exercise any of these rights, please contact us using the contact details in Section 1. We may need to ask you for proof of identity before fulfilling certain requests.
We aim to respond to your request within 1 month (or sooner, as permitted by law). In complex cases, this may be extended by up to 2 further months, with notice.
10. Links to Other Websites & Third-Party Services
Our Site may contain links to third-party sites (e.g. social media, external content). This Privacy Policy does not apply to those sites; their privacy practices are independent of ours. We encourage you to review those third parties’ privacy policies.
Also, when you interact with third-party content (e.g. embedded videos, social share buttons), third parties may collect data about you.