1. General ProvisionsThis Privacy Policy sets out the rules for processing users’ personal data on the PEPTYD LABS website, as well as the rules for the use of cookies.
The Administrator makes every effort to ensure that users’ personal data is processed in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR/RODO).
2. What Personal Data We ProcessDepending on how the website is used, we may process the following data:
  • first and last name;
  • email address;
  • telephone number;
  • delivery address;
  • data necessary to process an order;
  • information provided during communication;
  • order and purchase data;
  • IP address;
  • device and browser information;
  • website activity data;
  • data contained in submitted reviews, including the user’s name or nickname if the user chooses to provide it.
Providing data marked as necessary is voluntary; however, it may be required to process an order or respond to an inquiry.
3. Purposes of Data ProcessingPersonal data may be processed, in particular, for:
  • accepting and processing orders;
  • contacting the customer regarding an order;
  • arranging the delivery of products;
  • processing inquiries submitted through contact forms;
  • handling complaints, returns, and other requests;
  • maintaining accounting and tax records;
  • ensuring the proper functioning of the website;
  • protecting the website against abuse and unauthorized access;
  • maintaining statistics and analyzing website usage;
  • carrying out marketing activities if the user has provided the relevant consent;
  • publishing reviews submitted by users with their consent;
  • establishing, pursuing, or defending against potential claims.
4. Legal Bases for Data ProcessingWe process personal data on the basis of the relevant provisions of the GDPR/RODO, in particular:
  • Article 6(1)(b) GDPR/RODO — where processing is necessary for the performance of a contract or for taking steps prior to entering into a contract;
  • Article 6(1)(c) GDPR/RODO — where processing is necessary for compliance with a legal obligation;
  • Article 6(1)(f) GDPR/RODO — where processing is necessary for the purposes of the legitimate interests pursued by the Administrator;
  • Article 6(1)(a) GDPR/RODO — where data is processed on the basis of the user’s consent.
The user may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Orders and Data Required for DeliveryTo process an order, it may be necessary to provide data required for its fulfillment, in particular contact details and delivery-related information.
Such data may be transferred to entities involved in fulfilling the order, including payment operators, courier companies, and IT service providers.
The scope of the data transferred is limited to the information necessary to perform the relevant service.
6. Communication via MessengersIf a user contacts us through messengers such as Telegram or WhatsApp, the data provided during such communication may be processed to handle the inquiry, process an order, or continue communication regarding the order.
The use of third-party messengers may also be subject to the privacy policies of their respective operators.
7. User ReviewsUsers may voluntarily submit reviews regarding products or services.
If the user consents to the publication of a review, it may be published together with the name or nickname provided, as well as information about the method used to submit the review, such as Telegram or WhatsApp.
We do not publish data that the user did not intend to make public.
8. Data RecipientsPersonal data may be transferred to cooperating entities to the extent necessary to achieve specific purposes.
These may include, in particular:
  • courier companies and logistics operators;
  • payment operators;
  • hosting and IT infrastructure providers;
  • IT service providers;
  • entities providing accounting services;
  • entities supporting customer service;
  • entities providing analytics and marketing services, where the use of such services complies with applicable laws.
Personal data is not sold to third parties.
9. Data Retention PeriodWe retain personal data for the period necessary to achieve the purpose for which it was collected.
Data related to orders may be retained for the period required by applicable laws, in particular tax and accounting regulations.
Data processed on the basis of consent is retained until the consent is withdrawn, unless further retention is justified by another legal basis.
Data may also be retained for the period necessary to establish, pursue, or defend against claims.
10. User RightsTo the extent provided for by the GDPR/RODO, the user has the right to:
  • access their personal data;
  • obtain a copy of their data;
  • correct inaccurate data;
  • complete or supplement their data;
  • delete their data;
  • restrict processing;
  • transfer their data;
  • object to processing;
  • withdraw consent to data processing;
  • lodge a complaint with the relevant supervisory authority.
11. CookiesThe website may use cookies — small text files stored on the user’s device.
Cookies may be used, in particular, for:
  • ensuring the proper functioning of the website;
  • saving user preferences;
  • operating the shopping cart;
  • analyzing website traffic;
  • generating statistics;
  • carrying out marketing activities if the user has provided the relevant consent.
Users may change their cookie settings through their internet browser settings or through the consent management mechanism available on the website.
Restricting the use of certain cookies may affect the proper functioning of some website features.
12. Technical DataDuring the use of the website, technical data may be collected automatically, such as:
  • IP address;
  • device type;
  • operating system;
  • browser type and version;
  • date and time of the visit;
  • information about pages visited;
  • website referral source.
This data may be used to ensure security, proper website operation, and to prepare statistics.
13. Data SecurityAppropriate technical and organizational measures are implemented to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction.
Access to personal data is limited to persons or entities that require such data to perform specific tasks.
14. Transfer of Data Outside the European Economic AreaDue to the use of certain services provided by third-party providers, personal data may be transferred outside the European Economic Area.
In such cases, the safeguards provided for by the GDPR/RODO are applied to ensure an adequate level of personal data protection.
15. Data of MinorsThe website is not intended to intentionally collect personal data from persons who do not have legal capacity.
If it is established that a minor’s data has been provided without the required consent, steps may be taken to delete such data.
16. Links to Other Websites and ServicesThe website may contain links to external websites or services, including messengers.
The rules governing data processing by external operators may be regulated by their own privacy policies.
17. Changes to the Privacy PolicyThis Privacy Policy may be updated in the event of changes to applicable laws, the principles of website operation, or the services used.
The current version of the Privacy Policy will be published on the website.
PRIVACY POLICY
Made on
Tilda