The Online Peptide Hut is the data controller for personal information collected through this website. We handle that information in accordance with the UK GDPR and the Data Protection Act 2018, as described below.
Information used to run the service
- Purchases: customer name, billing and delivery details, email, telephone number and order history.
- Support: the email address and message provided when you contact the team.
- Website operation: essential basket and checkout session data. The cookie information explains this storage.
Purposes and legal bases
- Processing an order, arranging a bank payment and delivering material are necessary to perform the purchase contract.
- Confirming that purchasers are at least 18 supports our legal and legitimate interests.
- Responding to enquiries is based on legitimate interests.
- Keeping required tax and company records meets legal obligations.
Service providers and sharing
Information is shared only where needed to fulfil an order: delivery partners receive the contact and address details required for shipment, our hosting provider supports the website, and our bank supports payment reconciliation. We do not sell personal data or use it for third-party advertising.
How long records are kept
Purchase records are retained for six years for UK tax and accounting requirements. Support messages are kept for two years. Once information is no longer needed, it is removed or anonymised.
Requests about your information
Your rights include access, correction, deletion and portability, as well as objection to or restriction of processing. You can also complain to the Information Commissioner’s Office at ico.org.uk. To make a request, email info@theonlinepeptidehut.com.
Wording updated: 30 October 2026.