1. Introduction
Natty Peptides (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, and protect your data when you visit our website, make a purchase, or interact with us in any other way.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website, you agree to the terms of this Privacy Policy.
2. Who We Are
Natty Peptides is a UK-based supplier of research-grade peptides.
Our registered business details are:
Company Name: Natty Peptides Ltd
Email: privacy@nattypeptides.co.uk
Address: [Insert registered business address]
For data protection purposes, Natty Peptides Ltd is the Data Controller.
3. Information We Collect
We may collect and process the following types of personal information:
a. Information you provide directly
-
Name, email address, and phone number
-
Billing and delivery address
-
Payment details (processed securely via third-party providers)
-
Order history and preferences
-
Messages or enquiries submitted through our website
b. Information collected automatically
-
IP address and device information
-
Browser type and version
-
Website usage data, including pages visited, time spent on site, and referral sources
-
Cookies and similar tracking technologies (see section 8)
4. How We Use Your Information
We use your personal data to:
-
Process and fulfil orders
-
Provide customer service and support
-
Send important updates about your order or account
-
Improve our website and user experience
-
Comply with our legal and accounting obligations
-
Send marketing communications (only if you have opted in)
We will only use your personal data when permitted by law and for legitimate business purposes.
5. Legal Basis for Processing
Under data protection law, we must have a lawful basis for processing your personal information.
We rely on the following bases:
-
Contractual necessity: To process your purchases and provide services.
-
Legal obligation: To comply with tax, accounting, or other legal requirements.
-
Legitimate interests: To improve services and prevent fraud.
-
Consent: When you explicitly agree to receive marketing emails or newsletters.
You may withdraw consent for marketing at any time by clicking “unsubscribe” or contacting us directly.
6. How We Store and Protect Your Information
Your information is securely stored on encrypted servers located in the UK and the European Economic Area (EEA).
Access is restricted to authorised personnel only.
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.
Payment information is never stored on our servers — it is processed securely by trusted third-party payment providers such as Stripe or PayPal.
7. Data Retention
We only retain personal data for as long as necessary to:
-
Fulfil the purposes outlined in this policy
-
Comply with legal, accounting, or reporting requirements
Typically:
-
Customer order records: retained for 6 years (legal requirement for accounting).
-
Marketing data: retained until you opt out or unsubscribe.
8. Cookies and Tracking Technologies
Our website uses cookies to improve functionality, analyse traffic, and personalise your experience.
Types of cookies we use:
-
Essential cookies – required for site functionality (e.g. shopping cart).
-
Performance cookies – used for analytics and website performance tracking.
-
Marketing cookies – used to deliver relevant content and adverts.
You can control or delete cookies through your browser settings.
For more details, visit www.aboutcookies.org.
9. Sharing Your Information
We do not sell, rent, or trade your personal information.
We may share data only with trusted third-party service providers who assist us in operating our business, such as:
-
Payment processors
-
Delivery and courier companies
-
IT and website hosting providers
-
Email marketing platforms
These partners only process your data according to our instructions and must keep it secure.
10. International Data Transfers
If any data is transferred outside the UK or EEA, we ensure that appropriate safeguards (such as the UK’s International Data Transfer Agreement) are in place to protect your privacy.
11. Your Data Protection Rights
Under UK GDPR, you have the following rights:
-
Right to access – Request copies of your personal data.
-
Right to rectification – Request correction of inaccurate information.
-
Right to erasure – Ask for your data to be deleted in certain circumstances.
-
Right to restrict processing – Limit how your data is used.
-
Right to data portability – Receive your data in a structured, commonly used format.
-
Right to object – Object to processing based on legitimate interests.
-
Right to withdraw consent – Withdraw permission for marketing at any time.
To exercise these rights, contact us at privacy@nattypeptides.co.uk.
We will respond within 30 days.
12. Marketing Communications
If you have subscribed to our newsletter or opted in to marketing, we may send occasional emails about research insights, product updates, or offers.
You can opt out at any time using the unsubscribe link in our emails.
13. Third-Party Links
Our website may include links to other websites.
We are not responsible for the privacy practices or content of those sites.
We encourage you to read their privacy policies before providing any personal data.
14. Children’s Privacy
Our products and services are not intended for individuals under 18 years of age.
We do not knowingly collect personal data from minors.
15. Updates to This Policy
We may update this Privacy Policy from time to time.
Any updates will be published on this page with a revised “Last updated” date.
We encourage you to review this policy periodically.
16. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact:
Natty Peptides Ltd
Email: privacy@nattypeptides.co.uk
Address: [Insert full postal address]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — the UK’s data protection authority.
Website: www.ico.org.uk