Legal

Privacy Policy

Last updated: 26 May 2026

Axiom Research Peptides Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.

1. Data Controller

The data controller is Axiom Research Peptides Ltd, company number 17240005, registered at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are registered with the Information Commissioner's Office.

For all data protection enquiries: privacy@axiompeptides.co.uk

2. What We Collect

  • Account & order data: name, email address, delivery address, billing address, phone number (optional), order history.
  • Payment data: payment is processed by our third-party payment provider. We do not store full card details on our servers.
  • Technical data: IP address, browser type, device information, pages visited, referring URL.
  • Marketing preferences: where you have opted in to receive updates from us.

3. How We Use Your Data

  • To process and fulfil your orders (legal basis: performance of contract).
  • To send order confirmations, shipping updates, and customer service responses (performance of contract).
  • To maintain records required by tax and accounting law (legal obligation).
  • To improve our website and detect fraud or abuse (legitimate interests).
  • To send marketing communications where you have consented (consent — you may withdraw at any time).

4. Who We Share Data With

We share your data only with service providers necessary to operate the business, including:

  • Payment processor (for taking payment).
  • Email service provider (Resend) — for transactional and marketing email.
  • Content management system (Sanity) — for storing product and order data.
  • Hosting provider (Vercel) — for serving the website.
  • Couriers (Royal Mail) — for delivery.
  • HMRC, regulators, and law enforcement where legally required.

All providers are bound by appropriate data processing agreements and operate to UK GDPR standards.

5. International Transfers

Some of our providers may process data outside the UK. Where this happens we rely on the UK International Data Transfer Agreement or equivalent safeguards approved by the UK government.

6. Data Retention

We retain order and customer records for 7 years to meet UK tax and accounting obligations. Marketing data is retained until you withdraw consent. Technical/analytics data is retained for up to 26 months.

7. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data in certain circumstances.
  • Object to or restrict our processing.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time for processing based on consent.
  • Complain to the Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, email privacy@axiompeptides.co.uk.

8. Cookies

For details of how we use cookies and similar technologies, see our Cookie Policy.

9. Changes to This Policy

We may update this policy from time to time. The current version will always be posted on this page with the “last updated” date.