PeakPeptides respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR). PeakPeptides is the data controller for the processing of your data.
1. Data we process
Account data: email address and encrypted password (if you create an account).
Order data: information required to handle your payment and shipping (such as name, address and email), processed via our payment provider.
Contact data: information you provide yourself when emailing us.
2. Purposes and legal bases
We use your data for: fulfilling your order (basis: performance of the contract), answering your questions (legitimate interest), and meeting legal obligations such as tax retention requirements (legal obligation).
3. Processors and third parties
We use a payment provider (for payments) and, where accounts are active, an authentication service. These parties process data as processors on our behalf, under a data processing agreement and with appropriate safeguards.
We never sell your data to third parties.
4. Cookies
We only use essential cookies to make the website work and remember your age confirmation. We do not place tracking or advertising cookies without your consent.
5. Retention
We do not retain data longer than necessary for the stated purposes or than legally required (for example the 7-year tax retention period for invoice data).
6. Your rights
You have the right to access, correct, delete, restrict and port your data, and to object to processing. Send a request to vandenheerik.services@gmail.com.
If you disagree with how we handle your data, you can lodge a complaint with the relevant data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).