Privacy Policy

Last updated: 20 October 2026. This policy describes how we handle personal data when you visit this website, place an order, open an account or contact our support team. We are the controller of the information described here.

1. Information we collect

Information you give us. When you place an order we collect your name, email address, shipping and billing address, and optionally a phone number and any notes attached to the order. When you create an account we store your email address, a securely hashed password, the organisation or laboratory you order on behalf of, your stated role, and the date on which you confirmed that purchases are for laboratory research use only. If you contact support, we keep the content of your message.

Information collected automatically. Our servers record standard technical data such as your IP address, browser type and the pages you view, which we use to keep the site secure and working correctly. We also run our own analytics on our own domain; it sets no cookies and sends nothing to a third party.

Payment information. We do not collect or store card numbers. Card payments are processed by our payment provider, which receives the card details directly; we receive only the result of the transaction and an identifier for it. Where an order is settled in cryptocurrency, we store the payment address issued for the order, the amount, and the transaction identifier once it appears on the blockchain.

2. Why we use your data, and our legal basis

We process data to perform our contract with you — taking payment, preparing and shipping the order, and handling returns. We process data on the basis of our legitimate interests to prevent fraud, keep our systems secure, answer support requests, and keep a record of the research-use confirmation given at sign-up. We process data to comply with legal obligations where tax and accounting law requires us to retain records of a sale. Where we send marketing email or use advertising measurement, we do so only with your consent, which you can withdraw at any time.

3. Transactional email

We send you the email necessary to complete your order — order confirmation, payment confirmation and shipping notification. These are not marketing messages and cannot be unsubscribed from while an order is in progress. Newsletter email is separate and requires your explicit consent, which you give by ticking the box on the sign-up form and can withdraw through the unsubscribe link in any newsletter.

4. Who we share data with

We share data only where it is necessary: with the carrier delivering your parcel, with the provider that sends our transactional email, with our payment provider, and with the hosting provider that stores data on our behalf. We also disclose data where the law requires it.

We do not sell personal data. If you accept advertising cookies, Google acts as an additional recipient for measurement purposes: your browser sends Google limited data about your visit, including the pages you viewed and whether an order was completed, together with identifiers stored in your browser. If you decline, no such data is sent. Section 9 explains this in more detail.

5. International transfers

Our infrastructure is located in the European Union. Where a provider processes data outside the EEA — including Google, where you have accepted advertising cookies — we require appropriate safeguards to be in place, such as the European Commission's standard contractual clauses.

6. How long we keep data

We keep order and invoice records for as long as tax and accounting law requires. We keep support correspondence for as long as it takes to resolve the matter and handle any follow-up. Account data, including the research-use confirmation, is kept until you delete your account. Technical logs are kept briefly for security purposes. Newsletter subscriptions are kept until you unsubscribe.

7. Your rights

If you are in the EU or the EEA, the GDPR gives you the right to access your personal data, to have inaccurate data corrected, to have data erased where it is no longer needed, to restrict or object to processing, to withdraw consent you have given, and to receive your data in a portable format. You also have the right to lodge a complaint with your national data protection authority.

You can delete your account and its data in your account settings, or ask us to delete them. Please note that we must retain invoice records for the period required by law even after an account is deleted.

8. Security

Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Passwords are stored only as salted hashes and are never visible to us. No system is perfectly secure, but we take these obligations seriously and review our controls regularly.

9. Cookies and advertising measurement

Most of what we store in your browser is strictly necessary for the site to work — your session, your cart, your language and currency. That storage is always present and needs no consent.

Our own website analytics runs on our own domain, sets no cookies and builds no profile, so it needs no consent either.

In addition, we may use Google advertising and analytics cookies to measure how our advertising performs — for example, how many visitors who arrived from an advertisement went on to place an order. These are not strictly necessary, so they are set only if you accept them in the cookie bar. Until you accept, Google Consent Mode keeps every consent type denied and nothing is stored on your device. You can change your mind at any time by clearing this site's storage in your browser, which makes the cookie bar appear again.

Our Cookie Policy sets out what is stored and why.

10. Contacting us

To exercise any of the rights listed above, or to ask a question about this policy, contact us at info@vialpeptides.com or through our support page.

All products are supplied strictly for in-vitro laboratory and educational research. They are not medicines or supplements, and are not intended for human or animal consumption.