Peptide Works
Research-Grade Peptides
Peptide Works
Research-Grade Peptides
What personal information Peptide Works collects, where it is stored, what the website's cookies and analytics do, and the rights you hold over your own data.
At Peptide Works we value your privacy and are committed to using your personal information solely for managing your account and for the purpose you provided it.
This policy explains what personal information the Peptide Works website collects, the mechanisms by which it is collected, where it is held, which third-party services are involved, and how you can exercise your rights over it. It applies to the Peptide Works website and to enquiries and account activity arising from it.
Each section below sets out the position and, where the position benefits from explanation, says in plain terms what it means for you in practice. Nothing in the explanatory text extends or narrows the provision it accompanies.
Information reaches us through three mechanisms: forms you complete, comments you leave, and media you upload. Each is treated separately below.
When you submit a support request or general enquiry, we collect your first name, last name and email address so that we can communicate with you effectively. Your personal data is securely stored exclusively in this website's database, with no additional copies maintained elsewhere.
In practice this means the information you give us in an enquiry is the information we hold: a name and an address to reply to. We do not build a secondary profile from it, and we do not maintain parallel copies of it in other systems.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection.
The IP address and user agent are collected for one reason — distinguishing a genuine comment from automated spam. An anonymised string created from your email address, also called a hash, may be provided to the Gravatar service to check whether you use it. The Gravatar service privacy policy is available at automattic.com/privacy. After your comment is approved, your profile picture is visible to the public in the context of your comment.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
This one is advice rather than a description of what we do. Photographs taken on a phone frequently carry the coordinates of where they were taken, and that data travels with the file. If you are uploading an image, strip its metadata first.
Personal data submitted through the website is stored in the website's own database, hosted by our web hosting provider, which is GDPR certified and compliant.
Cookies are small files a website stores in your browser. The cookies described below are set by this website, and each is listed with its purpose and the period it persists for.
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.
Read the list again and a pattern is visible: with the exception of the comment cookie, every cookie described above relates to being logged in and editing content. For a visitor who browses the catalogue and places an order without ever logging in to an editing account, most of these will never be set at all.
Two categories of third party are involved in the operation of this website: content embedded from other sites, and the analytics service we use to understand traffic.
Articles on this site may include embedded content, for example videos, images or articles. Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website.
The consequence is worth spelling out. When a page on this site embeds something hosted elsewhere, your browser contacts that other service directly in order to load it. Whatever that service would collect from you had you visited it directly, it may collect in the same way here, under its own privacy policy rather than ours.
We use Google Analytics to track visitors on this site. Google Analytics uses cookies to collect this data. In order to be compliant with regulatory requirements under the GDPR, Google has included a data processing amendment. The data we collect will be processed anonymously, and the “Data sharing” element has been disabled. We do not use other Google services in combination with Google Analytics cookies.
Put plainly: analytics tells us how many people visited, which pages they looked at and roughly where in the world they came from. The data-sharing setting that would otherwise pass information onward to Google for its own purposes is switched off, and the analytics data is not joined up with any other Google service we operate.
You hold a number of rights over the personal data this website stores about you. Each right below is described together with the process that applies when you exercise it.
You may ask the site owner to anonymise data stored about you so that it can no longer be linked to your email address. It is the site owner's responsibility to act upon your request. When your data has been anonymised you will receive an email confirmation.
Requests made under the rights described here are recorded in a requests table for review by the administrator. That record is what allows a request to be tracked from receipt to completion, and it is the reason each of the processes below begins with a confirmation email — the confirmation is what moves a request into the table.
You are able to submit a request to be erased from the site. When a request is made you will receive an email confirmation to confirm the deletion request. After email confirmation, the request is added to the requests table for review by the administrator.
If you have content published on the site, whether posts of any type or comments, you will be added to this table. If you do not have any content, you will receive a confirmation of the erasure request and be provided with a six-digit token to keep safe after erasure, in case data recovery is subsequently needed. The requests table allows the administrator to reassign any content to another user or to delete it; in the case of comments, your content would be made anonymous rather than removed. The administrator can also add users to the erasure requests table manually by email search.
The six-digit token matters. Once erasure has been carried out there is, by design, nothing left that links you to the data — the token is the only remaining means of identifying what was erased. If you request erasure, store it somewhere you will still have it later.
You can place a request to download your data. After requesting it you will receive a double opt-in confirmation email, and an XML or JSON file will then be generated and emailed to you for download. The download link expires after forty-eight hours.
Two practical points. The file is emailed rather than made available in a browser session, so it arrives at the address we hold for you. And the forty-eight hour expiry is short — if you request an export, plan to download it promptly rather than leaving the email unread for a few days.
You can place a request to rectify data or to file a complaint. After making the request you will receive a double opt-in confirmation email, and the request will then be added to the table for the administrator to handle.
Requests under any of the rights above should be raised through the enquiry channel described on the Peptide Works contact page, stating clearly which right you are exercising and using the email address associated with your data so that the request can be matched to it.
We use email marketing to keep you up to date, as well as newsletters. Each of our mailshots is fully GDPR compliant and will contain an opt-out notification if you no longer wish to receive them. For email marketing we store the absolute minimum: your name and email address.
The newsletter is described on the site as carrying batch and catalogue notifications only — no dosing advice, no protocols, and no discount spam. Every message carries the means of unsubscribing, and unsubscribing from marketing does not affect correspondence about an order you have placed.
All products on this website are supplied for laboratory research purposes only. They are not intended for human or animal consumption or ingestion of any kind. Nothing on this website constitutes medical advice, and no information published here is intended to diagnose, treat, cure or prevent any disease.
The conditions of sale, including eligibility requirements and the responsibilities that attach to purchasing research materials, are set out in the Peptide Works terms and conditions. Questions about this policy can be raised through the routes described on the contact page. The catalogue itself is on the shop page.
This policy is maintained on the Peptide Works website and may be updated from time to time. Where a change materially affects how personal data is handled, the revised policy is the operative version from the point it is published.