Last updated: 13 October 2026

This policy explains how PhD Products Ltd, trading as PhD Peptides, handles personal information when you visit phdpeptides.com, shop with us, create an account, contact us or submit a review.

Who is responsible for your information

PhD Products Ltd is the controller responsible for our use of your personal information.

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom.
Privacy enquiries: [email protected].

You can contact us about this policy or exercise your rights using that email address or by writing to our registered office.

Information we collect and where it comes from

We receive information that you provide through checkout, account registration, enquiries and reviews. This may include your name, email address, telephone number, billing and delivery addresses, account information, order details, messages and review content.

We also receive payment confirmations and transaction references from payment services, and delivery and tracking updates from delivery providers. When you browse the website, technical information may include your IP address, browser and device information, pages visited, interactions, language preferences and cookie choices. Analytics and advertising events may include products viewed, basket and checkout activity, purchases, value and currency, depending on the services and settings in use.

The contact and delivery details requested at checkout are needed to manage and fulfil your order. If you do not provide the necessary details, we may be unable to complete the purchase or deliver it. Optional fields are identified where applicable. You do not have to agree to optional marketing to make a purchase.

Please do not send medical records or other sensitive personal information that is not needed to answer your enquiry. Products are supplied for laboratory research purposes; we do not need information about personal treatment or medical conditions to process an order.

Why we use information and our lawful bases

We use personal information for the following purposes:

  • Orders and accounts: to take payment, fulfil purchases, manage accounts, provide order updates, and handle cancellations, returns and support relating to an order. Our basis is performance of our contract with you, or taking steps at your request before a contract.
  • Enquiries and documentation: to answer general enquiries and requests for batch documents. Our basis is our legitimate interest in responding to people who contact us and providing accurate customer support. Where an enquiry concerns your purchase, processing may also be necessary for our contract with you.
  • Security and fraud prevention: to protect the website, customers and transactions, investigate suspicious activity and maintain service reliability. Our basis is our legitimate interest in protecting our business and customers. This basis is subject to your interests and rights.
  • Legal and business records: to meet applicable tax, accounting and other legal obligations. Our basis is compliance with legal obligations. Where needed to establish, exercise or defend legal claims, our basis is our legitimate interest in resolving disputes and protecting legal rights.
  • Reviews: to receive, verify where applicable, moderate and display product feedback. Our basis is our legitimate interest in managing genuine customer feedback and helping visitors understand other customers' experiences. Submitting a review is optional.
  • Optional marketing, analytics and advertising: consent where it is required by applicable electronic communications or data protection law. Cookie and tracking choices are explained separately below. A legitimate-interests basis for other permitted processing does not override a requirement to obtain consent for storage or access technologies.

Order security information

To support necessary security checks and detection of fraudulent orders, we preserve information about how a shopping session entered the website. Where your browser supplies it, this includes the external referring website’s hostname and referring URL, including its path and query information. The URL is subject to storage limits, and ordinary query information, such as campaign labels, may be included. Before storage, we remove URL fragments and recognised query parameters for credentials, payment or access tokens, email addresses and phone numbers. Browser privacy settings or the referring website’s rules may supply only a website origin or no referring information.

We use a first-party session cookie, with a creation time to prevent reuse of records older than 24 hours, and save the available information separately with an order placed during that session. This feature does not assign a visitor identifier or keep a browsing history. Our basis for the saved security record is our legitimate interest in protecting customers and transactions. The record operates independently of optional marketing consent and is not used by this feature for advertising measurement or sent to advertising platforms. Referring information may be absent or inaccurate and is used only as supporting information for security review; this feature does not automatically accept, reject or classify an order as fraudulent.

Access is limited to authorised order and security staff, and providers acting on our behalf where needed to operate or secure the shop. We retain the saved security record for as long as necessary to review the transaction and handle related fraud investigations, payment disputes or legal claims. The retention criteria are the duration of the relevant security review, investigation or dispute; an accounting retention obligation does not, by itself, require retention of every security field. You can contact us about this processing or exercise your rights as described below.

Research information and business VAT numbers

At checkout, we ask you to select what best describes your research and save the selected category with your order. When no existing or remembered choice is available, the selection defaults to “Independent Researcher”; you can change it before placing an order. We use this information for our legitimate interest in administering our laboratory research supply business and maintaining an order record. The selection does not, by itself, verify qualifications, institutional status or intended use.

If you enter a company name, you may also provide a UK or EU VAT number. We save any VAT number supplied with the order for business and billing administration. Our checkout checks the number’s format only; it does not confirm registration with HMRC or an EU tax authority. These checkout records are retained under the order-record criteria below.

If you allow Preferences cookies through Cookie Preferences, we remember your selected research category in a first-party cookie for 365 days from the latest selection or affirmative preference choice, so it can be prefilled on a later visit. There is no separate remember checkbox at checkout. The cookie contains only your research category; it does not contain your VAT number, company name or address and is not used for advertising. You can withdraw this choice at any time through Cookie Preferences, which removes this research preference cookie. Your research selection is still saved with your order regardless of your cookie choice. See our Cookie Policy for details.

Payments

Payment methods currently include Fena Open Banking, the card-payment service displayed at checkout, and direct bank transfer where available. Providers and your bank may process the details needed to authorise payments, carry out their own security checks and meet their legal duties. Their own privacy information also applies to processing for which they are independently responsible.

Our website does not receive or store your full credit or debit card details or your banking login credentials. We retain limited payment information needed to manage an order, such as the payment method, status and transaction reference. For a direct bank transfer, payment and bank-reference information available to us is used to match the payment to your order.

Cookies, analytics and advertising

The website uses essential technologies for functions such as baskets, checkout, sign-in, security and remembering choices. It also uses analytics and advertising measurement tools, including Google services configured through MonsterInsights, and Google Ads and TikTok advertising integrations configured through Pixel Manager. These services may process technical information and shopping events described above, depending on the enabled events and service settings. This information should not be assumed to be anonymous simply because your name is not included.

Use the Cookie Preferences control in the website footer to view and change your choices. Our Cookie Policy explains the current categories, regional settings, storage periods and measurement behaviour. You can also remove existing cookies through your browser settings.

Some measurement services may receive limited information without storing cookies, including before a choice is made or after optional cookies are rejected. Rejecting optional cookies therefore does not necessarily stop all technical information from reaching measurement providers. Whether a particular use of such information requires consent or another lawful basis depends on the processing involved; the absence of a cookie does not by itself make the information anonymous or exempt it from data protection law.

Where we rely on your consent, you can withdraw it at any time through Cookie Preferences, an unsubscribe facility where provided, or by contacting us. Withdrawal applies to future processing and does not change the lawfulness of processing before withdrawal.

Who may receive information

Information is shared where needed for the purposes described above, with the following recipients or categories:

  • Payment providers, the card provider displayed at checkout and banks involved in your chosen payment method: payment and transaction information.
  • Postal and courier providers, including Royal Mail and UPS where used for your order: delivery contact details, address and the shipment information needed to deliver, track or investigate the parcel. International deliveries may also require relevant customs information.
  • Website hosting, maintenance, security and communications providers: information needed to host and operate the WordPress and WooCommerce shop, maintain its security and communicate with customers. These software names do not mean every software developer receives your order information.
  • Google analytics, advertising and measurement services: technical and interaction information associated with the relevant service and settings. Google Maps is also displayed on our contact page and may receive technical information when its content loads.
  • WhatsApp: if you choose to contact us using WhatsApp, the messaging service processes your contact and message information under its own privacy arrangements as well as our handling of the enquiry.
  • Professional advisers, courts, regulators and other authorities: information necessary for advice, legal claims or compliance with applicable legal obligations.

We do not sell customer contact lists. Service providers may act on our behalf, or may be independently responsible for their own processing, such as payment authorisation or operating their communications service.

Public reviews

The display name, rating, review text and other content you submit for publication may be visible to other website visitors and to search engines. Do not include confidential details or another person's personal information in a review. Contact us if you want to discuss correcting or removing personal information from a published review. We may keep a limited moderation or dispute record where needed for a legitimate purpose or legal obligation.

International processing

Some providers may process information in countries outside the United Kingdom, including when you use payment, translation, analytics, communications or international delivery services. The relevant arrangements depend on the provider, service and destination.

Where processing involves a restricted international transfer, the applicable data protection rules require an appropriate basis for that transfer. Depending on the circumstances, this may be an applicable adequacy decision, approved contractual safeguards and the required assessment, or a specific legal exception. Contact [email protected] to request information about the arrangements applicable to your information and how to obtain a copy or details of relevant safeguards. This policy does not imply that every recipient uses the same transfer mechanism.

How long information is kept

Retention depends on the type of information and why it is needed. The relevant criteria differ between records:

  • Order, payment and accounting records: the time needed to fulfil the order and deal with returns or queries, followed by any applicable tax, accounting and legal record-keeping requirements.
  • Account information: the time needed to provide the account and maintain relevant purchase records. Closing an account does not automatically remove records that must be retained for legal reasons.
  • Support, complaints and disputes: the time needed to resolve the matter and any relevant period for establishing or defending legal claims.
  • Reviews and moderation records: whether the feedback remains relevant, whether removal is requested, and whether a limited record is needed to resolve a complaint or protect legal rights.
  • Technical, cookie and measurement information: the function of the technology, applicable service settings and whether the information remains necessary. Cookie lifetimes are explained in our Cookie Policy and are not the same as the retention of all data generated by a service.
  • Marketing preferences: while needed to apply your choices. A limited suppression record may be retained to respect an opt-out rather than send marketing again.

Where information is no longer needed, it should be deleted or made anonymous. You can ask us about the retention criteria relevant to particular information we hold about you.

Your choices and rights

Depending on the circumstances and applicable law, you may ask to access your information, correct inaccuracies, erase information, restrict its use, or receive certain information in a portable form. These rights are subject to their legal conditions; for example, erasure may not apply to records we must keep by law.

Your right to object: you can object to processing based on legitimate interests on grounds relating to your situation. You can object to direct marketing at any time, including any profiling connected with that marketing. Contact [email protected] to do so.

You can withdraw consent at any time where processing relies on consent. For marketing, use the unsubscribe facility where provided or contact us. For cookie choices, use Cookie Preferences. You can also ask about the use of automated processing and any rights that apply to a decision affecting you.

To make a privacy request, email [email protected]. We may request information reasonably needed to verify your identity and clarify the request. We will respond within the period required by applicable data protection law.

Complaints

If you have a concern about how we handle your personal information, you can make a data protection complaint by emailing [email protected] or writing to our registered office shown above. Please explain your concern and provide the details we need to understand it.

We will acknowledge receipt of your complaint within 30 days. We will take appropriate steps to investigate, keep you informed of progress and communicate the outcome without undue delay. The 30-day acknowledgement period is not a deadline for completing the investigation.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at any time. You do not have to wait for our response before contacting the ICO. See ICO complaints information. Where applicable, you may also complain to the relevant supervisory authority in your country.

Security and policy changes

We take reasonable technical and organisational steps to protect the information we handle. No website or internet transmission can be guaranteed completely secure. External websites and services have their own privacy information.

We may update this policy as our services, processing or legal requirements change. The current version and update date are shown on this page.