Privacy policy

Novex Peptide uses the information you provide when you create an account, place an order, contact support, submit feedback or subscribe to updates. This may include your name, email address, telephone number, delivery address, order details, payment references and account information. Research-eligibility checks may also use your organisation, authority and intended laboratory purpose.

The website and its infrastructure process limited technical information such as IP addresses, requests and security logs. Optional saved browsing history and searches are described in the Cookie Policy. Do not put medical information, identity documents, bank passwords or card security codes into general enquiries or chat.

Contract: we use the contact, account, order and delivery information needed to take steps you request before purchase, fulfil an order and provide account support. Without required order information, we may be unable to fulfil your request.

Legitimate interests: we use proportionate technical, fraud-prevention and research-eligibility information to protect the service, prevent misuse and assess whether an order fits our laboratory-only offering. We consider the effect on your rights and offer human review of an order decision.

Legal obligations: necessary transaction and accounting information is used to meet applicable legal requirements. Information may also be retained where needed to establish, exercise or defend legal claims.

Consent: optional newsletters and browser-storage features use your affirmative choice. Purchasing does not require marketing consent. You can unsubscribe or withdraw optional storage permission; withdrawal does not make earlier lawful processing unlawful.

Essential storage supports functions you request, including your basket, sign-in and saved choices. Functional browsing history, analytics and marketing categories are optional. The Cookie Policy explains the purposes, controls and retention periods.

Use Cookie settings in the website footer to accept, reject or change optional categories. The site does not enable an analytics or advertising provider merely because a category appears in the consent panel.

Our hosting and infrastructure providers process technical information to deliver and protect the website. Netlify hosts the storefront; Supabase provides database and account infrastructure. Email providers receive the addresses and message contents needed for requested service messages. A bank or enabled payment provider handles the relevant payment information, and the selected carrier receives details needed for delivery. Advisers and authorities receive information where necessary and lawful.

Information should be shared only for the relevant service or lawful purpose. Research-purpose information is not published as a customer review. Chat is for catalogue and order support; automated replies may be incorrect and are not medical advice. When you use Ask Novex AI, your submitted message and relevant conversation context are processed by OpenAI through Netlify AI Gateway to produce a reply. Do not submit banking details, health information, passwords or other sensitive information. Our AI chat notice explains this feature in more detail. Optional address search sends the address text you type to Photon, which searches OpenStreetMap data. You can enter your address manually instead. Fena handles Pay by Bank payment authorisation; we receive the payment reference and status needed to update your order.

Provider hosting or support may involve processing outside the UK. Such transfers require an applicable lawful mechanism, such as UK adequacy regulations or contractual safeguards with the necessary assessment. Contact us for details of the destinations and safeguards applying to your information. We do not claim that a provider’s brand alone means processing stays in the UK.

We retain order and transaction records for the applicable accounting and legal-claim periods. Account records are kept while needed to operate the account; support correspondence is kept while needed to resolve an enquiry and any related dispute. Security records are kept only as needed for investigation and fraud prevention. A legal hold may require longer retention.

Newsletter information is retained while subscribed, with a minimal suppression record where needed to respect an unsubscribe. Optional browsing history expires after 30 days and stored consent choices after 180 days. Contact us for the retention period or criteria applying to a particular record; a request for deletion remains subject to any lawful retention requirement.

Depending on the purpose and legal basis, you may request access, correction, deletion, restriction or portability of your personal information. You may withdraw consent at any time. We may request proportionate identity information through a suitable secure route before acting.

You have the right to object to processing based on legitimate interests. You can object to direct marketing at any time, including by using an unsubscribe facility or contacting us.

We normally respond to rights requests within one month. If a lawful extension or restriction applies, we will explain it. You may complain directly to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/; you do not have to complete our internal complaints procedure first.

We use the website’s access controls, account verification and service safeguards to protect information against unauthorised access and misuse. Access should be limited to what is needed for the relevant purpose. Keep your account credentials private and tell us promptly if you suspect unauthorised activity.

No internet service can guarantee absolute security. Do not send complete payment credentials or sensitive documents through ordinary support messages.

The service is intended for adults aged 18 or over purchasing for legitimate research. It is not directed at children. If you believe a person under 18 has supplied personal information through the service, contact us so we can assess and address it, including deletion where appropriate and subject to legal obligations.

We review this notice when the purposes, providers or processing arrangements change. The revision date identifies the latest wording. Material new processing will be explained before it begins, and consent obtained where required. Continuing to browse does not replace consent where the law requires an affirmative choice.

Email support@novexpeptide.com with Privacy in the subject for a question or rights request. The legal operator identified in the business contact block is responsible for personal information processed by Novex Peptide.

Please describe the information or activity concerned without including unnecessary sensitive details. We can explain the next steps and, where needed, a suitable way to verify identity or provide further information.