This Privacy Policy explains how ProLab Peptides (“we”, “us”, “our”) collects, uses, and protects personal data through our website, proxlabs.co.uk.
ProLab Peptides supplies research-use-only compounds. Our products are strictly for laboratory and research purposes and are not for human or animal consumption.
ProLab Peptides is the data controller responsible for your personal data.
When you use our website or place an order, we may collect:
Full name
Billing and shipping address
Email address
Telephone number
Order details
Purchase history
Payment confirmations
IP address
Browser type and version
Device information
Website usage data
We do not store full debit or credit card details.
We use personal data to:
Process and fulfil orders
Manage shipping and delivery
Communicate regarding orders or enquiries
Maintain customer accounts
Prevent fraud and misuse
Comply with legal and tax obligations
Improve website performance and security
We do not sell or rent personal data.
Under UK GDPR, we rely on the following lawful bases:
To process orders and deliver products.
To comply with UK tax, accounting, and regulatory requirements.
To operate our business, ensure website security, and prevent fraud.
For optional cookies, analytics, and marketing communications (if applicable).
Consent may be withdrawn at any time.
Orders are processed through WooCommerce and payments are handled by Fenna (payment provider).
Payment information is processed securely by the payment provider in accordance with their privacy policy. We do not store full payment card details on our servers.
We may share data with trusted service providers necessary for operating our business, including:
Payment providers
Shipping and courier services
Website hosting providers
Technical support services
Analytics providers (if enabled)
All third parties are required to process data securely and in compliance with UK GDPR.
We retain personal data only as long as necessary:
Order and financial records: Up to 6 years (for UK tax compliance)
Customer account data: Until account deletion
Customer service communications: Up to 3 years
Marketing consent records: Until withdrawn
Analytics data: Up to 14 months
Data is securely deleted or anonymised once no longer required.
If any service providers process data outside the United Kingdom, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.
You have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, misuse, loss, or disclosure.
However, no online system can be guaranteed to be completely secure.
We may update this Privacy Policy to reflect legal or operational changes. Updates will be posted on this page with a revised “Last Updated” date.