Privacy Policy

Last updated: October 2026

1. Introduction

Avenor Peptides is committed to protecting your personal data. This policy describes how we collect, use and protect your data in accordance with the GDPR.

2. Data We Collect

We collect the following data:

• Identification data (first name, last name)
• Contact information (email, phone, address)
• Organisation / institution information
• Order history
• Browsing data (cookies)
• IP address and approximate location (country level) via IP analysis, solely to display relevant shipping messages and improve user experience
• Technical details of the device and browser at the time an order is submitted (device and browser type, language, time zone, screen size, how long and in what way the form was completed), together with a non-reversible fingerprint of the IP address. The IP address itself is not stored with the order.

3. Processing Purposes

Your data is used for:

• Order fulfilment
• Communication regarding orders
• Sending newsletters (with your consent)
• Improving our services
• Compliance with legal obligations
• Personalisation of shipping messages and freight estimates based on your approximate location
• Telling genuine orders apart from orders submitted by automated software, and preventing abuse. These details are visible only to our staff and never lead to an order being rejected automatically.

4. Legal Basis

Processing is based on contract performance, your consent, our legitimate interests and/or compliance with legal obligations.

5. Data Recipients

We share only the data that is necessary, and only for the purpose described:

• Card payment provider (Kashu / TagadaPay): when you pay by card, your full name, email, billing/shipping address and transaction details, to process the payment and prevent fraud (e.g. address verification). Your card details never pass through our servers.
• Courier companies: full name, address and phone number, to deliver your order.
• Technology providers (website hosting, database, email delivery): as processors acting on our behalf.
• Authorities, where required by law.

Some providers are located outside the European Economic Area (e.g. the USA). In those cases the transfer takes place with the appropriate GDPR safeguards (e.g. Standard Contractual Clauses). We never sell your data.

6. Data Retention

Your data is retained for as long as necessary for the processing purposes or in line with our legal obligations (e.g. tax records).

7. Your Rights

You have the right to:

• Access your data
• Rectify inaccurate data
• Erasure ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing

8. Security

We apply technical and organisational measures to protect your data, including SSL encryption for all transactions.

9. Contact

For questions or to exercise your rights, contact us at orders@avenorpeptides.com