Privacy Policy

1. Who We Are

Helix Peptides ("we", "us", "our") operates the website at helixpeptides.uk. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are the data controller for the personal data described in this policy. For any privacy-related enquiries, contact us at: Support@helixpeptides.uk

2. What Data We Collect

• Name, email address and delivery address when you place an order
• The contents of your order, your order number and your order history
• Payment reference information needed to match your payment to your order (we do not receive or store your full card details or bank login details)
• Your email address and message if you submit a product request
• Your name, email address and review text if you submit a review
• Your name, email address and payout details if you join our affiliate programme
• Any correspondence you send us
• Technical and session information needed to keep the site and your basket working

3. How We Use Your Data

• To process and fulfil your orders
• To send order confirmation and shipping notifications
• To respond to customer support enquiries
• To comply with legal obligations
• To improve our website and user experience

We do not sell or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract: To fulfil your order
• Legal obligation: To comply with UK law
• Legitimate interests: To improve our services and prevent fraud
• Consent: Where you have opted in, for example to a mailing list. You can withdraw consent at any time.

5. Cookies

We use essential cookies to operate the site and session cookies to remember your cart. We do not use analytics, tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect site functionality.

6. Data Retention

Order and transaction records are kept for 6 years after the end of the tax year they relate to, so we can meet UK tax and accounting requirements. Product request submissions are kept for 12 months. Reviews are kept until you ask us to remove them. Correspondence is kept for 2 years.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk or on 0303 123 1113

To exercise any of these rights, email us at Support@helixpeptides.uk.

8. Third-Party Services

We use the following processors to operate our service:

• Base44 — website hosting, application platform and database
• Resend — sending transactional emails such as order confirmations
• Royal Mail or our chosen courier — delivering your order

Each of these only processes your data on our instructions. We do not sell your personal data or share it with third parties for their own marketing.

9. International Transfers

Some of our providers, including Base44 and Resend, process data on servers outside the United Kingdom. Where that happens we rely on UK adequacy regulations or on the UK International Data Transfer Agreement or Addendum, so that your data keeps an equivalent level of protection.

10. Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.