Who is responsible
Oxford Research Syndicate Ltd (trading as BuyUK Peptides), company number 17207898, 131a Movers Lane, Barking, London IG11 7UQ, is the data controller. Contact: info@buyukpeptides.com.
What we collect and why
When you place an order: your name, email address, delivery address, phone number if you give one, and the details of what you ordered. We use these to fulfil the order, send the dispatch note and tracking number, handle returns and keep the accounting records the law requires. Lawful basis: performance of a contract, and legal obligation for the records.
When you pay: payment is by bank transfer. We see the payer name and reference on the incoming payment, as any payee would. We do not collect or store card details; no card is used.
When you contact us: your name, email address and the content of your message, used to reply. Lawful basis: our legitimate interest in answering enquiries.
When you use the site: a cookie that identifies your basket, and a setting in your browser's local storage recording that you have confirmed you are 18 or over. If you accept cookies in the banner, Google Analytics (with IP anonymisation) helps us understand how the site is used, and Google Ads measurement tells us when an order came from one of our ads; if you choose essential only, neither sets cookies. Details are on the cookies page. Server logs record IP addresses for security for up to 30 days.
We do not profile you, we do not sell data, and we do not send marketing email unless you ask for it.
Who we share it with
Service providers who process data on our behalf under contract: our hosting providers (Vercel and Railway), our DNS provider (Cloudflare), our payment processor (Niftipay), our email delivery provider (Resend), Royal Mail for delivery, and our bank. Where a provider is outside the UK, transfers are made under the UK International Data Transfer Agreement or an adequacy regulation.
We may disclose data where the law requires it, for example to HMRC or to a regulator.
How long we keep it
Order records for 6 years after the end of the financial year in which the order was placed, to meet accounting and tax rules. Enquiries for 12 months. Server logs for 30 days. Basket cookies for 30 days.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct or delete it, object to or restrict processing, and ask for your data in a portable form. Write to info@buyukpeptides.com. You can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any change to this notice here with the date. Last updated 14 October 2026.