To enter the website you tick one box confirming that you are 21 or older, understand the research-use restriction and agree to PEPTALIAS cookie use, including the optional analytics described below. We do not ask for an email address. We record the time of your confirmation on the essential order session so checkout can check it, and your browser remembers it for 24 hours. You can change your cookie choice at any time in Cookie settings. To keep automated traffic out, the confirm button uses Cloudflare Turnstile, a bot check run by Cloudflare. Cloudflare processes technical information from your browser and device, such as your IP address and browser characteristics, to decide whether the request is automated, under Cloudflare's own privacy policy. We receive only a pass or fail result, and we keep only daily totals with no identifier. You can unsubscribe at any time using the link in any marketing email; an address that has unsubscribed or been suppressed is not subscribed again. Your checkout email is also recorded for sale access during the campaign; checkout alone does not give marketing or analytics consent. When you place an order with the same email address as an earlier access sign-up, we note on the order that it followed that sign-up and when, using only our own records. Sale-access records are removed after 90 days without another registration; order and consent records have separate retention requirements.
Privacy
How we handle your information.
We collect only the details needed to process orders, provide support and send marketing when you choose it.
Your cart stays in this browser so it remains available as you move between pages. Clearing browser data removes it.
We store your name, email, delivery address, selected products, totals and payment status so we can process and support your order.
Card details are entered directly on TagadaPay's secure hosted checkout. PEPTALIAS receives the payment status and transaction reference but does not receive or store your card number.
Order updates are separate from marketing. If you opt in, we store your email, signup source, subscription status, consent history and personal offer code. Welcome reminders stop after unsubscribe, code use, expiry or an order.
Our email provider may report whether a message was accepted, delivered, delayed, bounced or marked as spam. We retain the message identifier and outcome, and suppress an address after a bounce or complaint to prevent unwanted repeat sends.
When you use the contact form, we store the name, email, topic, optional order reference and message you submit so the support team can respond and track resolution.
If you allow analytics, we record page visits and shopping events using random visitor and session identifiers. We do not store your IP address or full browsing history in the analytics record. “Do Not Track” and Global Privacy Control are respected. Change your choice at any time using Cookie settings in the footer. Withdrawing consent stops future collection and clears these identifiers from this browser. Event records older than 400 days are removed.
We also keep daily totals of how often key steps happen on the site, such as a page opened or a product added to the cart. These totals hold no identifiers, IP addresses or cookies and cannot be linked to you.
Public forms use one-way network and email hashes to limit repeated automated submissions. Raw network addresses are not stored in these records, which are removed after a short rolling period.
When you follow an approved partner link, a first-party referral cookie records the partner code so an eligible order can be attributed correctly.
We store your name, phone number, email, postcode, promotion plan, reward preference and any optional business, profile or audience details to assess and respond to your affiliate application. We also record your acknowledgement of the review and welcome voucher conditions. Applying does not subscribe you to marketing emails.
Expired verification records are routinely removed. Order, support and financial records are kept only as needed for fulfilment, fraud prevention and legal or accounting obligations.
Use the contact page to ask about access, correction or deletion of your information. Legal retention requirements may still apply.