Skip to content
🇬🇧 Dispatched from the UK
Vials assayed to > 99% HPLC purity
15% off your first order HELLO15
Hello Peptides
Legal

Privacy policy

What we collect, why we collect it, who else touches it, and how to make us stop. We do not track you, and we do not sell anything about you to anyone.

Last updated 29 September 2026 · Hello Peptides, United Kingdom
This page is not finished It still needs the trader's legal name and a geographic business address. Until that is supplied this page is not indexed and should not be relied on. Fill it in at the top of inc/legal.php.
The short versionWe collect what we need to take your order, deliver it and answer you. There is no analytics on this site, no advertising pixel and no profiling. We have never sold personal data and we will not.

Who is responsible for your data

This site is operated by Hello Peptides. We are a sole trader, not a limited company, so we have no company number.

You can reach us at info@hellopeptides.co.uk, or through the contact page. We answer within one working day, Monday to Friday.

We are not registered for VAT, so no VAT is charged on your order and no VAT invoice can be issued.

We are the data controller for the personal information described here, for the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018. We are not required to have a data protection officer, so data questions come to the address above.

What we collect

KindWhat it includesWhere it comes from
Who you areName, email address, phone number, billing and delivery address, and a company or institution name if you give one.You, at checkout or in a form.
Your ordersWhat you bought, when, for how much, the order number, the delivery service, and the batch numbers you were sent.Generated when you order.
Payment referenceThat a bank transfer arrived, for how much, and the reference used. We never receive or store card numbers, because we do not take card payments.Our bank.
Your accountYour email address, a password stored only as a hash, your saved addresses and your order history. Only if you create one.You.
What you write to usThe content of enquiries through the contact, wholesale and affiliate forms, and any email that follows.You.
Affiliate informationFor affiliates: your referral code, the orders credited to it and the commission owed. For visitors: a referral code in a cookie, if you allowed it.Generated in use.
TechnicalIP address, browser and device type, the pages requested and the time, in server and security logs.Automatically, on every visit.

We do not ask for special category data, which means anything about health, ethnicity, beliefs, sex life or biometrics. Please do not send it to us. Our products are for laboratory research, so we have no reason to know anything about anybody's health and we do not want to be told.

Why we use it, and our lawful basis

What we doWhat we useLawful basis
Take, pack and deliver your order, and email you about itWho you are, your order, payment referencePerforming our contract with you
Answer your enquiryWho you are, what you wroteOur legitimate interest in replying to people who contact us
Run your accountYour account, your ordersPerforming our contract with you
Keep tax and accounting recordsYour orders, payment referencesComplying with a legal obligation
Keep the site up and stop fraud and abuseTechnical data, order patternsOur legitimate interest in security
Credit an affiliate for a referralA referral code in a cookieYour consent, given in cookie settings
Pay an affiliate what they have earnedAffiliate informationPerforming our contract with the affiliate

Where we rely on a legitimate interest, we have weighed it against your rights and concluded it does not override them. You can ask us to explain that reasoning, and you can object.

Marketing

We do not send marketing email. There is no newsletter to join and no mailing list. The only email we send is about an order, an enquiry or an account, which is email you need rather than email we want to send. If that ever changes we will ask first, and every message will have a one-click unsubscribe.

Who else handles it

We use a small number of service providers to run the shop. Each acts on our instructions under a contract, and none of them is allowed to use your data for their own purposes.

WhoWhat they doWhere
WPMU DEVHosts this site and its database, so everything above sits on their servers.United Kingdom
CloudflareSits in front of the site for DNS, security and delivery, and routes email sent to our address. Traffic passes through it, and it sets the security cookies listed in our cookie policy.Global network
Mailgun, EU regionSends the email this site sends: order confirmations, account email and the enquiries you submit.European Union
Royal Mail and DPDCarry the parcel. They get the name, delivery address and contact details needed to deliver it.United Kingdom
Our bankReceives your bank transfer. Your own bank decides what it shows them about you, not us.United Kingdom
Google FontsServes the three typefaces this site uses. Your browser fetches them from Google, which means Google sees your IP address. No cookie is set.Global network

We also share information where the law requires it, for example with HM Revenue and Customs, a regulator, or in response to a valid court order. If we ever sold the business, customer records would transfer with it, and you would be told.

Beyond that list, nobody. We do not sell, rent or trade personal data, and there is no advertising network, analytics service or data broker involved in this site.

Sending data outside the UK

Most of your data stays in the UK. Email sending runs in Mailgun's European Union region. Cloudflare and Google Fonts operate global networks, so some technical data can be handled outside the UK. Where that happens we rely on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or on UK adequacy regulations where they apply. You can ask us for a copy of the safeguards.

How long we keep it

WhatHow longWhy
Order and payment records6 yearsTax law requires records to be kept for six years after the end of the accounting period.
Enquiries and correspondence2 yearsLong enough to pick up a conversation again, no longer.
Your accountUntil you close itOrder records covered by tax law are kept separately for the period above.
Affiliate records6 years after the last paymentThey are payment records too.
Server and security logsUp to 12 monthsInvestigating abuse and faults.

How we look after it

  • The whole site is served over HTTPS, so what you send is encrypted in transit.
  • Passwords are stored as hashes. Nobody here can read yours, and we will never ask you for it.
  • We take no card details anywhere on this site, which is the simplest way to keep them safe.
  • Access to order data is limited to the people who need it to pack and support orders.
  • If a breach ever put your rights at risk, we would tell the Information Commissioner within 72 hours and tell you without undue delay.

Your rights

Under UK data protection law you can ask us to do any of the following, free of charge. We will respond within one month.

  • Tell you what we hold about you, and give you a copy.
  • Correct anything that is wrong or incomplete.
  • Delete it, where we have no continuing reason to keep it. Tax records are the usual reason we cannot.
  • Restrict what we do with it while a dispute about it is sorted out.
  • Send it to you, or to another provider, in a portable format, where we hold it on the basis of consent or a contract.
  • Object to our using it where we rely on a legitimate interest.
  • Withdraw a consent you have given, at any time. For cookies that is the cookie settings page.

To use any of these, email info@hellopeptides.co.uk. We may ask you to confirm who you are first, so we do not hand your data to someone else.

If you are unhappy with how we have handled your data, please tell us and give us a chance to fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You do not have to come to us first.

Automated decisions and profiling

We make no decisions about you by automated means, and we do not profile you. Nothing on this site scores, segments or predicts anything about an individual.

Children

This site is not for anyone under 18 and we do not knowingly collect data about children. If you believe a child has given us information, tell us and we will delete it.

Cookies

What this site stores in your browser, and how to change it, is set out in the cookie policy. You can change your choice at any time in cookie settings.

Changes to this policy

If we change how we handle personal data we will update this page and the date at the top of it. Where a change matters to you, we will tell you directly.

Research use onlyProducts are supplied for laboratory research and are not for human or animal consumption, diagnosis or treatment. Anything else, ask the lab directly.
Chat on WhatsApp