Peptide Works Privacy Policy
Peptide Works privacy information covering enquiries, website features, cookies and published data request procedures.
Scope of this policy
This page sets out the published Peptide Works privacy provisions for enquiries, accounts, comments, uploaded media, cookies, embedded content, analytics and email marketing. It also explains the request procedures described for access, erasure, portability, rectification and complaints. The provisions below distinguish the linked online services from the information pages you are currently reading.
These information pages do not provide account registration, checkout, a contact form, comments, image uploads, a newsletter subscription form or an automated privacy-request table. Their page code does not set analytics cookies or load an analytics service. Links to product listings and ordering take you to the corresponding Peptide Works online service, where the relevant published provisions apply.
The absence of those features here does not describe every aspect of the hosting service or the handling of an enquiry sent by email. This policy should be read in relation to the feature you use. Reading a page, submitting an enquiry, leaving a comment and signing into an account involve different activities and different information.
Forms and enquiries
The published policy states that a support request or general enquiry collects first name, last name and email address so that Peptide Works can communicate with the person making the enquiry.
The contact page states that the supplied details are used to contact you in relation to the specific enquiry or order. This is the stated purpose of the enquiry information. It should be distinguished from subscribing to marketing communications, which is addressed separately below.
The published policy describes enquiry data as stored in the website database. Its hosting and storage assertions concern the live service; this page does not extend them to a different hosting environment or introduce an additional data processor. Questions about the handling of a particular enquiry can be raised through the contact page.
Comments
Where visitors leave comments through the live website's comment feature, the policy says Peptide Works collects the information entered in the comment form. It also collects the visitor's IP address and browser user agent string to assist with spam detection.
An anonymised string created from the email address, described as a hash, may be supplied to the Gravatar service to check whether the visitor uses it. The associated service's privacy information is available in the Automattic privacy policy. After a comment is approved, the commenter's profile picture is visible publicly in the context of that comment.
The stated purpose of the IP address and browser information is therefore different from the public display of an approved comment and profile picture. The comment provisions concern that feature; there is no comment submission facility on these information pages.
Media and location information
The policy advises people uploading images to avoid files containing embedded location information, including EXIF GPS data. It explains that visitors may download website images and extract location data contained in those files.
This provision concerns information held inside an uploaded image file, in addition to the photograph that is visible on the page. A public image can therefore reveal information beyond its visible subject if such metadata remains in the file. These information pages do not accept visitor image uploads.
Cookies
The published policy describes several cookies associated with comments, accounts and article editing. Their stated durations are specific to those functions. They should not be read as a single retention period for all personal information held by Peptide Works.
Comment convenience cookies
A visitor leaving a comment may opt to save their name, email address and website in cookies. The stated purpose is convenience, avoiding the need to enter those details again for a later comment. The policy gives these cookies a duration of one year.
Browser acceptance cookie
For account sign-in, the policy describes a temporary cookie that determines whether the browser accepts cookies. It states that this cookie contains no personal data and is discarded when the browser is closed.
Sign-in and display preferences
The policy describes cookies saving login information and screen display choices. Login cookies last two days; screen option cookies last one year. Selecting “Remember Me” keeps the login persistent for two weeks. Logging out removes the login cookies.
These are separate durations for separate purposes. The period associated with a saved screen preference does not mean that a login remains active for that same period. The “Remember Me” option is described as changing login persistence, not as changing the duration of every cookie listed in the policy.
Article editing cookie
When an article is edited or published, the policy describes an additional browser cookie containing the post identifier. It states that this cookie includes no personal data and expires after one day. It relates to the editing or publishing activity, rather than to an ordinary page visit.
Embedded content from other websites
Articles on the live website may contain embedded content such as videos, images or articles. The published policy states that embedded content behaves as though the visitor had visited the other website directly.
This describes content loaded from another website within a page. It is distinct from an ordinary link that the visitor chooses to follow. Review the privacy information relevant to an embedded service when considering how that service handles a visit. This policy does not introduce a new embedded-content provider or declare that every article contains an embed.
Google Analytics
The published live-site policy states that Google Analytics is used to track visitors and uses cookies for that purpose. It refers to Google's data processing amendment and says the collected data is processed anonymously, with the data-sharing setting disabled.
The same section states that other Google services are not used in combination with the Google Analytics cookies. Those are the settings described in the published policy. They should not be interpreted as a newly installed analytics configuration for these information pages, whose code does not load Google Analytics.
The analytics description and the account-cookie description address different functions. A duration given for a login cookie does not establish a duration for an analytics cookie. No additional analytics retention period or new tracking system is specified here.
Anonymisation requests
The published policy includes a section titled “Freedom of Information request” that describes selecting stored data for anonymisation, so it can no longer be linked to the requester's email address. It places responsibility for acting on that request with the site owner and describes an email confirmation after anonymisation.
The described selection and request-table functions belong to the live service's published process. No table of your personal information is displayed on this page. For help with a privacy request, use the official contact information and identify the type of request you wish to make.
Erasure requests
The policy states that a data subject can submit a request for erasure from the site. It describes an email confirmation step to confirm the deletion request, followed by addition to an administrator's requests table for review.
Where the requester has published content, such as posts or comments, the policy describes that content being included in the review process. It says the administrator can reassign content to another user or delete it, and that comments are made anonymous. It also states that an administrator can add a user to the requests table through an email search.
For a requester without published content, the policy describes confirmation of the erasure request and a six-digit token for safekeeping in case of recovery needs. This records the published process; it does not create a token on this page or promise an additional recovery service.
The confirmation step, administrator review and treatment of published content are distinct parts of the described procedure. Merely viewing this policy does not submit a request or alter an account, comment or other record.
Access and data portability
The published policy states that a data subject can request a download of their data. It describes a double opt-in confirmation email, followed by generation of an XML or JSON file sent by email for download. The stated download expiry is 48 hours.
That 48-hour period describes availability of the generated download in the published procedure. It is not described as a deadline for answering every privacy enquiry, nor as the retention period for the underlying account data. No different response deadline or retention rule is added by this explanation.
Rectification and complaints
The policy describes requests to rectify data or make a complaint. It says the requester receives a double opt-in confirmation email, after which the request is added to an administrator's table for handling.
A rectification enquiry should make clear which information is at issue; a complaint should identify the concern. The published procedure does not specify an additional complaints body, jurisdiction or guaranteed response time here. This page therefore does not add one or present an automated request as already submitted.
Email marketing
The published policy describes email marketing and newsletters, storing the recipient's name and email address for that purpose. It states that marketing messages include an opt-out notification for people who no longer want to receive them.
The opt-out described in this section concerns marketing communications. The contact page's explanation of communication about a specific enquiry or order is a separate provision. If you have a question about which communications you receive, raise it through the published contact channel.
Related information
Read the Terms and Conditions alongside this policy when reviewing website use and purchase requirements. For product discovery, visit the Shop page; ordering continues through the live product listings. For an enquiry about privacy or an existing order, use Contact Us.
Research Use Only
All products on this website are supplied for laboratory research purposes only. They are not intended for human or animal consumption or ingestion of any kind. Information, statements and products featured on this site are for research and educational purposes only and are not designed to diagnose, treat, cure, or prevent any condition.