Beartas Príobháideachais

Last updated: September 2026

This Privacy Policy explains how Peptides Lab Ireland (“we”, “us”, or “our”) collects, uses, stores, shares and protects personal data when you visit, create an account on, place an order through, or otherwise interact with www.peptideslabireland.com.

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018 (Ireland) and other applicable Irish data protection and privacy laws.

1. Who We Are

Peptides Lab Ireland is a supplier of research-only peptides and related materials.

For data protection purposes, we are responsible for determining how and why personal data collected through our website is processed.

If you have any questions about this Privacy Policy or the way we use your personal data, please contact:

Email: research@peptideslabireland.com
Location: Ireland

2. Personal Data We Collect

Depending on how you interact with our website, we may collect:

• Your name
• Email address
• Telephone number
• Billing address
• Shipping/delivery address
• Account information
• Order details and purchase history
• Communications and enquiries you send to us
• IP address
• Browser, operating system and device information
• Website usage and interaction information
• Cookie and analytics information
• Fraud-prevention and security information
• Payment-related information

Payments may be processed by third-party payment providers. We do not normally receive or store your complete debit or credit card details.

We aim to collect only the personal data reasonably necessary to provide our services, operate our website and comply with our legal obligations.

3. How We Use Your Personal Data

We may use your personal data to:

• Process, manage and fulfil orders
• Arrange delivery and shipment of orders
• Process or verify payments
• Create and manage customer accounts
• Provide customer service and support
• Respond to enquiries and requests
• Send order confirmations and delivery updates
• Send important account or service notifications
• Maintain transaction and accounting records
• Detect and prevent fraud, abuse and unauthorised activity
• Protect the security of our website and systems
• Improve the functionality and performance of our website
• Understand how visitors use our website
• Comply with legal, regulatory, tax and accounting obligations
• Establish, exercise or defend legal claims
• Send marketing communications where permitted by law and where any required consent has been obtained

We do not sell your personal data to third parties.

We do not provide your personal data to unrelated third parties for their own direct marketing purposes without an appropriate lawful basis.

4. Legal Bases for Processing

Under the GDPR, we must have a lawful basis for processing your personal data.

Depending on the circumstances, we may rely on:

Performance of a Contract

Where processing is necessary to:

• Process an order
• Take payment
• Arrange delivery
• Manage your account
• Respond to requests relating to an order or service

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

This may include:

• Fraud prevention
• Website and network security
• Business administration
• Customer service
• Improving our website and services
• Understanding website performance

Legal Obligation

Where we are required to process or retain information to comply with Irish or EU law, including accounting, taxation, regulatory and legal requirements.

Consent

Where you have actively given consent, including where required for:

• Marketing communications
• Newsletters
• Non-essential cookies
• Certain analytics or advertising technologies

Where processing is based on consent, you can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Personal Data

We may share personal data where reasonably necessary with service providers involved in operating our business, such as:

• Payment service providers
• Banks and payment processors
• Courier, postal and delivery companies
• Website hosting providers
• Cloud infrastructure providers
• Email and communications providers
• Website analytics providers
• Fraud-prevention and security providers
• IT and technical support providers
• Accountants
• Tax advisers
• Legal advisers
• Government, regulatory or law-enforcement authorities where legally required

Where a third party processes personal data on our behalf, we require appropriate data protection and confidentiality safeguards in accordance with applicable law.

Some third parties may process personal data as independent data controllers and will be responsible for their own compliance with applicable data protection law.

6. International Data Transfers

Some of the service providers we use may process or store personal data outside Ireland or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate measures required under the GDPR to protect that information.

Depending on the destination and provider, these safeguards may include:

• A European Commission adequacy decision
• European Commission Standard Contractual Clauses
• Other legally recognised transfer mechanisms and safeguards

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:

• Complete and manage orders
• Provide customer support
• Maintain customer accounts
• Resolve disputes
• Prevent fraud
• Meet legal, accounting and taxation requirements
• Establish, exercise or defend legal claims

Certain transaction, accounting and tax records may need to be retained for at least six years in accordance with Irish legal and Revenue requirements.

Other personal data may be deleted or anonymised sooner where it is no longer required.

You may request deletion of your personal data. However, we may need to retain certain information where we have a legal obligation or another valid lawful basis to do so.

8. Cookies and Analytics

Our website may use cookies and similar technologies.

Cookies may be used to:

• Enable essential website functionality
• Maintain your shopping basket or account session
• Remember your preferences
• Maintain website security
• Understand website traffic and performance
• Measure website usage
• Provide analytics
• Measure advertising or marketing effectiveness where applicable

Under Irish electronic communications and data protection rules, cookies that are strictly necessary to provide a service you have requested may be used without consent.

Where required by law, non-essential cookies will not be placed or activated until you have provided consent.

You can accept, reject or manage non-essential cookies through our cookie consent controls.

You may also withdraw or change your consent at any time.

Further information about the cookies we use is available in our Cookie Policy.

9. Marketing Communications

Where permitted by law, we may send you information about products, services, promotions or company updates.

Where consent is required, we will obtain your consent before sending electronic marketing communications.

You can unsubscribe at any time by:

• Using the unsubscribe option contained within the communication; or
• Contacting us at research@peptideslabireland.com

Unsubscribing from marketing will not prevent us from sending transactional or service-related communications concerning your orders or account.

10. Data Security

We use appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access
• Unlawful processing
• Accidental loss
• Disclosure
• Destruction
• Alteration

These measures may include:

• SSL/TLS encryption
• Secure hosting infrastructure
• Access controls
• Password protection
• Security monitoring
• Restricted staff access
• Data minimisation
• Software and infrastructure security measures

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

11. Your Rights Under the GDPR

Subject to applicable law and certain limitations, you have rights concerning your personal data, including:

• Right to be informed – to understand how your personal data is used
• Right of access – to request a copy of personal data we hold about you
• Right to rectification – to correct inaccurate or incomplete information
• Right to erasure – to request deletion of your personal data in certain circumstances
• Right to restriction – to request that processing of your personal data is restricted
• Right to object – to object to certain forms of processing
• Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format
• Right to withdraw consent – where processing is based on your consent
• Rights relating to automated decision-making – where applicable

To exercise any of these rights, contact:

research@peptideslabireland.com

We may need to verify your identity before responding to a request.

12. Complaints to the Data Protection Commission

If you believe your personal data has been handled unlawfully or you are dissatisfied with how we have dealt with a privacy concern, you have the right to lodge a complaint with Ireland’s supervisory authority:

Data Protection Commission (DPC)
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Website: www.dataprotection.ie

We encourage you to contact us first so that we have an opportunity to address your concern.

13. Children’s Data

Our website, products and services are intended for adults.

We do not knowingly collect personal data from individuals under the age of 18 for the purpose of purchasing our products or services.

If we become aware that personal data has been collected from a minor contrary to this policy, we may take appropriate steps to delete it.

14. Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business or services
• Changes to the way we process personal data
• Changes to technology
• Changes to applicable laws or regulatory requirements

Any updated version will be published on this page and the “Last updated” date will be changed accordingly.

16. Contact Us

For questions, requests or concerns relating to privacy or data protection, please contact:

Peptides Lab Ireland
Email: research@peptideslabireland.com
Location: Ireland