Privacy Policy

This policy explains what personal data PepBioHack (“we”, “us”, “our”) collects when you use this website or place an order, how we use it, and the choices and rights you have. We are the data controller for the personal data described below.

Information we collect

We collect information you provide directly when you place an order or contact us:

• name, email address, and phone number;
• billing and shipping address;
• order details — products purchased, quantities, and order value; and
• any message content if you contact us directly.

We do not currently offer customer accounts — orders are processed as a guest, matched to your order history by email address only. We also collect limited technical data automatically (see Cookies below), such as IP address, browser type, and pages visited, for security and analytics purposes.

How we use your information

• to process, fulfil, and ship your order;
• to communicate with you about your order (confirmations, shipping updates);
• to respond to enquiries you send us;
• to detect, prevent, and investigate fraud or abuse of this website; and
• to comply with our legal and regulatory obligations (for example, tax records).

We do not sell your personal data, and we do not use it for third-party marketing without your explicit consent.

Who we share it with

We share personal data only with service providers who process it on our behalf, under contract, to run this website and fulfil orders:

• Supabase — database and authentication hosting;
• Vercel — website hosting and basic traffic analytics;
• Resend — transactional email delivery;
• Sentry — error monitoring (technical error data, not order content); and
• our payment processor, once selected, to process your payment securely.

We do not transfer personal data outside the UK/EEA other than through these providers’ own infrastructure, each of which maintains its own compliance with applicable data protection law.

How long we keep it

We retain order and customer data for as long as necessary to fulfil the order, handle any returns or disputes, and meet our legal obligations (including UK tax and accounting record retention requirements), after which it is deleted or anonymised.

Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data, subject to our legal retention obligations;
• object to or restrict certain processing; and
• lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us using the details on our Contact page.

Security

We use industry-standard technical measures — encrypted connections, access controls, and row-level database security — to protect your data. No online service can guarantee absolute security, but we take reasonable steps to protect it against unauthorised access, loss, or misuse.

Cookies

See our Cookie Policy for details on the cookies and similar technologies this website uses.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision.