Privacy Policy
This Privacy Policy explains how Cocer Peptides (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit or make a purchase on cocerpeptides.co.uk (the “Site”). We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Cocer Peptides
For the purposes of data protection law, Cocer Peptides is the “data controller” of the personal data described in this policy.
2. What Personal Data We Collect
We may collect and process the following data about you:
- Identity data: name, username, or similar identifier
- Contact data: billing address, delivery address, email address, telephone number
- Order data: details of products purchased, order history, order value
- Payment data: payment confirmation details (we do not store full card details — these are processed securely by our third-party payment provider)
- Technical data: IP address, browser type and version, device information, time zone setting, operating system
- Usage data: information about how you use our Site, pages visited, and time spent on the Site
- Marketing and communications data: your preferences in receiving marketing from us and your communication preferences
3. How We Collect Your Data
We collect data through:
- Direct interactions — when you create an account, place an order, subscribe to a newsletter, or contact us
- Automated technologies — cookies and similar tracking technologies as you interact with our Site (see Section 8)
- Third parties — such as our payment processor, analytics providers, and delivery/courier partners
4. How We Use Your Data
We use your personal data only for the following purposes:
- To process and deliver your order, including managing payments and keeping you informed about your order status
- To manage your relationship with us, including responding to queries and complaints
- To administer and protect our Site, including troubleshooting, data analysis, and system testing
- To send you marketing communications, where you have opted in (you can unsubscribe at any time)
- To comply with a legal or regulatory obligation
5. Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Contract — processing necessary to fulfil an order or provide a service you have requested
- Consent — where you have given clear consent, e.g. for marketing emails
- Legitimate interests — for purposes such as fraud prevention, Site security, and improving our services, provided these do not override your rights
- Legal obligation — where we must process data to comply with the law (e.g. tax and accounting records)
6. Sharing Your Data
We do not sell your personal data. We may share your data with:
- Payment processors (e.g. [payment provider name]) to securely process transactions
- Courier and delivery partners to fulfil your order
- IT and system administration providers, where necessary to operate the Site
- Regulatory authorities, where required by law
All third parties are required to respect the security of your data and to treat it in accordance with the law.
7. International Transfers
Where any of our service providers are located outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in line with UK GDPR requirements.
8. Cookies
Our Site uses cookies to distinguish you from other users, remember your preferences, and improve your browsing experience. You can set your browser to refuse cookies; however, some parts of our Site may not function properly as a result. For more detail, see our [Cookie Policy] (or include a cookie table here listing cookie name, purpose, and duration).
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order and transaction records are typically retained for [X years] in line with UK tax record-keeping requirements.
10. Data Security
We have implemented appropriate technical and organisational measures to protect your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way. Access to your data is limited to those employees, agents, and third parties who have a genuine business need to access it.
11. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, in certain circumstances
- Object to processing of your data, in certain circumstances
- Request restriction of processing your data
- Request transfer of your data to you or a third party
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at [contact email]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
12. Children’s Privacy
Our Site is not directed at individuals under the age of 18, and we do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
Email: Info@cocerpeptides.co.uk
