Privacy Policy
Privacy Policy
What Peptide Works collects, where it is stored, how long it is kept, and how you can access, correct or erase it under the GDPR.
At Peptide Works we value your privacy and are committed to using your personal information solely for the purpose of managing your account and responding to you. This policy explains what we collect, why we collect it, where it is stored, how long it remains, and what you can ask us to do with it.
It is written to be read rather than skimmed past. Where a provision has a practical consequence for you, that consequence is stated in plain terms instead of being left implicit. Where a period or a limit applies, it is given.
This policy sits alongside the Terms and Conditions, which govern your use of the website and any purchase made through it. Together they set out the basis on which the website is provided.
When you submit a support request or a general enquiry, we collect your first name, last name and email address so that we can communicate with you effectively. These details are collected for the purpose of handling the enquiry you have raised. We do not use them to contact you about unrelated matters.
Your personal data is stored securely in this website's database. No additional copies are maintained elsewhere. Our web hosting provider is GDPR certified and compliant, which means the infrastructure holding that database is itself subject to the same data protection standards this policy describes.
The practical effect of keeping a single copy in one place is that a request to access, correct or erase your data can be acted on completely. Data scattered across multiple systems is data that cannot be reliably removed, and we have deliberately avoided that position.
Please do not include payment credentials in any enquiry. Card numbers, account details and similar information are never required in correspondence, and we do not ask for them.
When visitors leave comments on the site, we collect the data shown in the comments form, together with the visitor's IP address and browser user agent string. The IP address and user agent are collected to help with spam detection, which is the only purpose for which they are used.
An anonymised string created from your email address, also called a hash, may be provided to the Gravatar service to check whether you use it. The Gravatar service privacy policy is available at automattic.com/privacy. After your comment is approved, your profile picture is visible to the public in the context of that comment.
It is worth being clear about what that means in practice. A comment, once approved, is public. The email address behind it is not published, but the profile picture associated with it may be, and the comment text itself is visible to anyone who visits the page.
If you upload images to the website, you should avoid uploading images with embedded location data, known as EXIF GPS data, included. Visitors to the website can download images and extract any location data they contain.
This is a point that catches people out, because the location data is not visible in the image itself. A photograph taken on a phone with location services enabled may carry the coordinates at which it was taken, and uploading it publishes those coordinates along with the picture. If in doubt, strip the metadata before uploading.
Cookies are used on this site for a small number of specific purposes, each with its own lifetime. Those lifetimes are set out below rather than described in general terms, so that you can see exactly how long each one persists.
If you leave a comment on our site, you may opt in to save your name, email address and website in cookies. These exist for your convenience, so that you do not have to fill in your details again when you leave another comment. These cookies last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you have just edited. It expires after one day.
Articles on this site may include embedded content such as videos, images or articles from other websites. Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website directly.
That means the site hosting the embedded content may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, under its own policies rather than this one. We do not control what those sites collect, which is why the distinction is drawn here rather than glossed over.
We use Google Analytics to track visitors on this site, and Google Analytics uses cookies to collect that data. In order to comply with the regulatory requirements introduced by the GDPR, Google has included a data processing amendment. The data we collect is processed anonymously and the data sharing element has been disabled. We do not use other Google services in combination with Google Analytics cookies.
The purpose of this measurement is to understand how the website is used in aggregate, such as which pages are reached and how visitors move between them. It is not used to build a profile of an identifiable individual.
Under the GDPR you hold a set of rights over the personal data we store about you. The mechanisms by which each of those rights is exercised on this website are set out below. Each request is confirmed by email before it is actioned, which protects you against someone else submitting a request in your name.
We show you all of the data stored about you on our website. You select the data you wish the site owner to anonymise so that it can no longer be linked to your email address. It is the site owner's responsibility to act upon your request. When your data has been anonymised, you will receive an email confirmation.
You are able to submit a request to be erased from the site. When a request is made, you will receive an email confirmation in order to confirm the deletion request. After that email confirmation, the request is added to the requests table for review by the administrator.
If you have content published on the site, whether as posts of any type or as comments, you will be added to this table. If you do not have any content, you will receive confirmation of the erasure request and be provided with a six-digit token to keep safe after erasure, in case data recovery is needed.
The requests table allows the administrator to reassign any content to another user or to delete it. In the case of comments, your content would be made anonymous rather than removed outright, so that the surrounding discussion remains intelligible. The administrator can also add users to the erasure requests table manually through an email search.
You can place a request to download your data. After requesting it, you will receive a double opt-in confirmation email. An XML or JSON file is then generated and emailed to you for download, with an expiration time of 48 hours.
The expiry is deliberate. A download link that remains live indefinitely is a standing risk to the data it points at, so the window is short by design.
You can place a request to rectify your data or to file a complaint. After making the request you will receive a double opt-in confirmation email, and the request is then added to the table for the administrator to handle.
We use email marketing to keep you up to date, and we send newsletters. Each of our mailshots is fully GDPR compliant and contains an opt-out notification if you no longer wish to receive them.
For email marketing we store the absolute minimum, which is your name and your email address. We do not need more than that in order to send you a newsletter, so we do not collect more than that. Opting out through the notification in any mailshot stops further marketing email.
If you have a question about this policy, about the data held about you, or about a request you have already submitted, email info@peptide-works.com. When raising a data request, use the email address associated with the data so that it can be matched, and describe what you are asking for in specific terms.
Where this policy sets a period, a limit or a confirmation step, those exist as described rather than as guidance. Where something is not described here, it is not something we do.
All products on this website are supplied for laboratory research purposes only. They are not intended for human or animal consumption or ingestion of any kind. Nothing in this Privacy Policy, and nothing elsewhere on this website, constitutes medical advice, dosage guidance, administration instructions, or a recommendation to diagnose, treat, cure, or prevent any condition. Use of this website is also subject to the Terms and Conditions.