For Research Purposes Only — Not for Human Consumption — UK Research Supply

Legal

Privacy Policy

Last updated: 25 February 2026

This Privacy Policy explains how Aceso Peptides UK Ltd ("we", "us", "our") collects, uses, and protects personal data when you use acesopeptides.co.uk ("Website") or purchase our products. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller

Aceso Peptides UK Ltd is the data controller for personal data collected via this Website. Contact: orders@acesopeptides.co.uk

2. What Data We Collect

When you place an order:

  • Name and email address
  • Shipping address
  • Payment information (processed by Stripe — we do not store card details)
  • Order history

When you create an account:

  • Email address and encrypted password
  • Account preferences and order history

When you use the Website:

  • IP address and browser information (if analytics cookies accepted)
  • Pages visited and time on site (if analytics cookies accepted)
  • Cookie preferences (stored in localStorage)

When you contact us:

  • Name, email, and message content

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders (legal basis: contract performance)
  • Send order confirmations and dispatch notifications (legal basis: contract performance)
  • Manage your account (legal basis: contract performance)
  • Respond to enquiries (legal basis: legitimate interest)
  • Comply with legal obligations such as accounting and VAT records (legal basis: legal obligation)
  • Improve our Website and services with your consent (analytics cookies)

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.

4. Data Sharing

We share your data only where necessary:

  • Stripe — payment processing (UK/EU data processor)
  • Supabase — secure database hosting (EU-based)
  • Resend — transactional email delivery
  • Royal Mail / DPD — shipping and delivery (name and address only)
  • HMRC — VAT and tax compliance as required by law

All third-party processors are required to process data in accordance with UK GDPR and under appropriate data processing agreements.

5. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: Required for the Website to function (cart, session, age verification). Cannot be disabled.
  • Analytics cookies: Used to understand how visitors use our Website. Only set with your consent.

You can manage cookie preferences via the banner shown on first visit. To withdraw consent, clear your browser cookies and revisit the site.

6. Data Retention

We retain personal data for the following periods:

  • Order data: 7 years (UK tax/accounting requirements)
  • Account data: Until account deletion or 3 years of inactivity
  • Contact enquiries: 2 years
  • Analytics data: 26 months (if consented)

7. Your Rights Under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data (subject to legal obligations)
  • Restriction — limit how we process your data
  • Portability — receive your data in a portable format
  • Object — object to processing based on legitimate interest
  • Withdraw consent — for any processing based on consent

To exercise any of these rights, contact orders@acesopeptides.co.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption for all data in transit, encrypted storage, and access controls. We do not store payment card data — all payments are handled directly by Stripe.

9. ICO Registration and Complaints

We are registered with the Information Commissioner's Office (ICO) as required under UK GDPR. If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the ICO at ico.org.uk or by telephone on 0303 123 1113.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page. Continued use of the Website constitutes acceptance of the updated policy.

11. Contact

Data protection queries: orders@acesopeptides.co.uk