Privacy Policy

Last updated: April 2026

1. Data controller

Peptolux Labs Ltd. (“Peptolux Labs”, “we”) operates the website peptoluxlabs.com and is the data controller for personal data processed through this website, in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679). Contact: info@peptoluxlabs.com.

2. What data we collect

• Order data: name, email, phone, shipping address, country, postal code, order items, payment reference.
• Account data (optional): email, password hash, order history.
• Technical data: IP address, browser and device info, pages visited, referrer URL, UTM parameters.
• Marketing data: newsletter subscription, email open/click events (if subscribed).

3. Why we use your data

• Fulfilling your order (legal basis: contract performance).
• Sending order confirmation, bank transfer details, and shipping updates.
• Complying with tax and accounting obligations (legal basis: legal obligation).
• Improving our service and preventing fraud (legal basis: legitimate interest).
• Marketing emails (only with your explicit consent).

4. Data sharing

We share minimum necessary data with:

• Shipping carriers (for delivery)
• Payment bank (for transfer reconciliation)
• Email provider (Resend, for transactional emails)
• Hosting provider (Vercel)
• Analytics (Google Tag Manager / Meta Pixel, only with consent)

5. Data retention

Order records: 7 years (tax/accounting obligation under EU law). Account data: until you delete your account. Marketing data: until you unsubscribe.

6. Your rights under GDPR

You have the right to access, rectify, erase, restrict, port, or object to processing of your personal data. Contact info@peptoluxlabs.com to exercise any of these rights. You also have the right to lodge a complaint with your local data protection authority.

7. International transfers

Data is stored on servers within the EU. Any transfer outside the EU (e.g. US-based analytics) is subject to appropriate safeguards (Standard Contractual Clauses, adequacy decisions).

8. Cookies

We use essential cookies for cart and session. Analytics and marketing cookies are only set with your consent (shown via cookie banner on first visit).

9. Changes

We may update this policy. Material changes will be communicated via email (if you have an account) or a banner on the site.