Last updated: [date]
This Privacy Policy explains how KyroLabs Peptides ("we", "us") collects and uses your personal data when you visit `kyrolabspeptides.co.uk` or place an order. We comply with the UK GDPR and the Data Protection Act 2018.
Data controller: [Registered company name], company number [Company registration number], registered office [Registered office address].
Contact: info@kyrolabspeptides.co.uk
1. What data we collect
- Order & account data: name, email, billing/shipping address, phone, order history.
- Payment data: handled by our payment provider; we do not store full card details.
- Communications: messages you send us (contact form, email, WhatsApp/Telegram), newsletter sign-up.
- Technical & usage data: IP address, device/browser, and cookie data (see our Cookie Policy) — collected with your consent where required.
2. How and why we use it (legal bases)
- To fulfil your order (process payment, dispatch, support) — *performance of a contract*.
- To comply with legal/accounting obligations — *legal obligation*.
- To run and secure the Site and prevent fraud — *legitimate interests*.
- To send marketing (newsletter, offers) — *consent* (you can unsubscribe at any time).
- Analytics/measurement — *consent* via the cookie banner.
3. Cookies
We use cookies to operate the Site and, with your consent, to measure traffic. See our Cookie Policy and manage your choice via the cookie banner.
4. Who we share data with
- Shopify — our e-commerce platform (hosting, orders, checkout).
- Payment provider — to process payments.
- Couriers / postal carriers — to deliver orders.
- Email/marketing tools — if you subscribe.
- Professional advisers and authorities — where legally required.
We do not sell your personal data.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (e.g. UK adequacy regulations or standard contractual clauses).
6. Retention
We keep personal data only as long as necessary for the purposes above and to meet legal/accounting requirements (typically up to 6 years for transaction records), then delete or anonymise it.
7. Your rights
Under UK GDPR you have the right to: access, rectify, erase, restrict, or object to processing; data portability; and to withdraw consent at any time. To exercise any right, email info@kyrolabspeptides.co.uk.
8. Marketing
You can opt out of marketing at any time via the unsubscribe link or by emailing us. Opting out does not affect service messages about your orders.
9. Security
We use appropriate technical and organisational measures to protect your data. No method of transmission is 100% secure, but we take reasonable steps to safeguard it.
10. Complaints
If you have concerns, contact us first at info@kyrolabspeptides.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) — ico.org.uk.
11. Changes
We may update this policy; the current version is always published on the Site.