UK GDPR & Data Protection Act 2018 Privacy Policy
How Peptide Verge (United Kingdom) collects, safeguards, and processes customer and institutional order records under United Kingdom data protection law.
1. Data Controller & UK Contact
Peptide Verge (United Kingdom) acts as the Data Controller for personal and institutional data collected via `https://peptideverge.com/`. For all data access, rectification, or erasure requests under the UK GDPR and Data Protection Act 2018, contact support@peptideverge.com.
2. Information Collected & Lawful Basis
We process contact details, UK delivery/billing addresses, order histories, and payment transaction references strictly under Contractual Necessity (fulfilling UK orders), Legal Obligation (HMRC VAT accounting and UK regulatory compliance), and Legitimate Interest (fraud prevention and site security).
3. Data Sharing & Retention
Order fulfilment data is shared solely with essential UK courier partners and encrypted payment processors. We never sell or rent customer data. UK tax and order invoices are retained in accordance with statutory HMRC record-keeping rules.