Privacy Policy

Last updated: 20 May 2026

Key Peptides ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (keypeptides.co.uk) or place an order with us, and your rights under data protection law.

Key Peptides is the trading name of Warren Jowitt, a sole trader operating from the United Kingdom, who is the data controller responsible for your personal information.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

1. Information We Collect

We may collect and process the following categories of personal information:

Information you provide to us:

• Name
• Delivery and billing address
• Email address
• Telephone number
• Order details and purchase history
• Any information you provide in correspondence with us (email, contact form, reviews)

Information collected automatically:

• IP address
• Browser type and version
• Device information
• Pages visited, time spent, and navigation patterns
• Referring website
• Cookie data (see our Cookie section below)

Payment information:

• We do not collect or store your full payment card details. All payments are processed securely by our third-party payment processor (Stripe). We receive only limited transaction confirmation data (such as the last four digits of your card and transaction status).

---

2. How We Use Your Information

We use your personal information for the following purposes and on the following legal bases:

You may withdraw consent for marketing communications at any time (see Section 7).

---

3. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information with the following categories of third parties only as necessary to operate our business:

• Payment processors (Stripe) — to process your payment securely
• Shipping and courier providers — to deliver your order
• Our e-commerce platform (Shopify) — which hosts our website and processes order data
• Email and marketing service providers (such as Klaviyo) — to send transactional and, where consented, marketing communications
• Professional advisers — such as accountants or legal advisers, where necessary
• Regulatory authorities or law enforcement — where required by law

All third parties we work with are required to keep your information secure and to process it only in accordance with our instructions and applicable data protection law.

---

4. International Transfers

Some of our third-party service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as the use of providers certified under recognised data protection frameworks or the use of standard contractual clauses approved for international data transfers.

---

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Order and transaction records: retained for a minimum of 6 years to comply with UK tax and accounting obligations
• Marketing data: retained until you withdraw consent or request deletion
• Website analytics data: retained in line with our analytics provider's standard retention periods
• Correspondence: retained for as long as necessary to manage our relationship with you

When personal information is no longer required, we securely delete or anonymise it.

---

6. Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, loss, or destruction. These measures include:

• Secure (SSL/TLS) encryption of data transmitted to and from our website
• Restricted access to personal information on a need-to-know basis
• Use of reputable, security-compliant third-party processors (Shopify, Stripe)

While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

---

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal information:

• Right of access — to request a copy of the personal information we hold about you
• Right to rectification — to request correction of inaccurate or incomplete information
• Right to erasure — to request deletion of your information in certain circumstances
• Right to restrict processing — to request that we limit how we use your information in certain circumstances
• Right to data portability — to request transfer of your information to another provider
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — to withdraw consent for processing based on consent (such as marketing) at any time

To exercise any of these rights, contact us at keysystems2@gmail.com. We will respond to your request within one month, as required by law. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.

---

8. Cookies

Our website uses cookies and similar technologies to function correctly, improve your experience, and analyse website usage. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Strictly necessary cookies — required for the website to function (such as maintaining your shopping cart and processing checkout). These cannot be disabled.
• Analytics cookies — help us understand how visitors use our website so we can improve it. These are used only with your consent.
• Marketing cookies — used to deliver relevant communications and measure campaign effectiveness. These are used only with your consent.

You can manage your cookie preferences through the cookie banner displayed when you first visit our website, and you can change your browser settings to refuse some or all cookies at any time. Disabling certain cookies may affect the functionality of the website.

---

9. Marketing Communications

Where you have opted in, we may send you marketing emails about new products, restocks, offers, and updates. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking that link or by contacting us at keysystems2@gmail.com.

We will never share your information with third parties for their own marketing purposes.

---

10. Children's Privacy

Our website and products are intended only for individuals aged 18 years or older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a person under 18, we will delete it.

---

11. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices or content of any third-party websites, and we encourage you to read the privacy policies of any websites you visit.

---

12. Changes To This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available at this URL, and the "Last updated" date at the top will reflect the date of the most recent revision. We encourage you to review this policy periodically.

---

13. Contact

If you have any questions about this Privacy Policy or how we handle your personal information, or if you wish to exercise any of your rights, please contact us:

Key Peptides Key Peptides is the trading name of Warren Jowitt, a sole trader operating from the United Kingdom.

Email: keysystems2@gmail.com Address: 18 The Old Woodyard, Midgley, Wakefield, WF4 4JF, United Kingdom

---

By using this website, you confirm that you have read and understood this Privacy Policy.