Last Updated: January 2025
1. Information We Collect
1.1 Information You Provide
We may collect personal information that you voluntarily provide when you:
- Submit the Vendor Affiliate inquiry form (name, email, phone number, company details)
- Contact us via email
- Subscribe to newsletters or updates (if applicable)
- Participate in surveys or feedback forms
1.2 Information Automatically Collected
When you visit our Website, we may automatically collect:
- Device Information: IP address, browser type, operating system, device type
- Usage Data: Pages visited, time spent on pages, links clicked, referring website
- Cookies and Similar Technologies: See Section 5 for details
1.3 Information from Third Parties
We may receive information from:
- Supplier partners when you click through to their websites
- Analytics providers (e.g., Google Analytics)
- Hosting provider (Netlify)
2. How We Use Your Information
2.1 Lawful Bases for Processing
We process your personal data under the following lawful bases:
- Consent: When you provide explicit consent (e.g., contact forms)
- Legitimate Interests: To operate and improve our service, prevent fraud
- Legal Obligation: To comply with UK laws and regulations
2.2 Specific Uses
We use your information to:
- Respond to vendor inquiries and manage affiliate relationships
- Provide and improve our price comparison service
- Analyze website usage and optimize user experience
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal obligations and enforce our Terms and Conditions
- Send service-related communications (not marketing, unless you opt-in)
2.3 What We DON'T Do
We will NEVER:
- Sell your personal information to third parties
- Send unsolicited marketing emails without your consent
- Share your data with third parties for their marketing purposes
- Use your information for purposes incompatible with this Policy
3. Data Sharing and Disclosure
3.1 Third-Party Service Providers
We may share your information with trusted service providers who assist us in operating our Website:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Netlify | Website hosting | IP address, device data, usage logs |
| Google Analytics (if used) | Website analytics | Anonymized usage data, IP address |
| Email service provider | Processing contact forms | Contact information you provide |
3.2 Affiliate Partners
When you click on a link to a Supplier's website, we may share limited information (click ID, timestamp) to track referrals for commission purposes. The Supplier's own privacy policy governs any data collection on their website.
3.3 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations, court orders, or government requests
- Protect our rights, property, or safety, or that of others
- Enforce our Terms and Conditions
- Prevent or investigate fraud, security issues, or illegal activities
4. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law.
- Vendor Inquiry Forms: Retained for 2 years or until relationship ends
- Contact Emails: Retained for 1 year after last communication
- Website Analytics: Anonymized after 14 months (Google Analytics default)
- Server Logs: Retained for 30 days
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our Website. They help us provide a better user experience.
5.2 Types of Cookies We Use
- Essential Cookies: Required for the Website to function properly
- Analytics Cookies: Help us understand how visitors use the Website
- Preference Cookies: Remember your settings and preferences
5.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling cookies may affect Website functionality. Most browsers allow you to:
- View what cookies are stored and delete them individually
- Block third-party cookies
- Block cookies from specific websites
- Delete all cookies when you close your browser
6. Your Data Protection Rights (UK GDPR)
Under UK GDPR, you have the following rights:
6.1 Right of Access
You can request a copy of the personal data we hold about you.
6.2 Right to Rectification
You can request that we correct inaccurate or incomplete personal data.
6.3 Right to Erasure ("Right to Be Forgotten")
You can request that we delete your personal data in certain circumstances.
6.4 Right to Restrict Processing
You can request that we limit how we use your personal data.
6.5 Right to Data Portability
You can request a copy of your data in a structured, commonly used format.
6.6 Right to Object
You can object to our processing of your personal data based on legitimate interests.
6.7 Right to Withdraw Consent
Where we rely on consent, you can withdraw it at any time.
6.8 How to Exercise Your Rights
To exercise any of these rights, contact us at: contact@peptide-compare.co.uk
We will respond to your request within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- SSL/TLS encryption for data transmission (HTTPS)
- Secure hosting infrastructure
- Access controls and authentication
- Regular security assessments
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. International Data Transfers
Your data may be transferred to and stored on servers outside the UK (e.g., Netlify's global CDN). We ensure that such transfers comply with UK GDPR requirements through:
- Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
- Adequacy decisions for countries deemed to provide adequate protection
- Other appropriate safeguards as required by law
9. Children's Privacy
Our Website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
10. Third-Party Websites
Our Website contains links to third-party websites (Suppliers). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting the updated Policy on this page with a new "Last Updated" date
- Sending an email notification (if we have your email address)
Your continued use of the Website after changes are posted constitutes acceptance of the updated Policy.
12. Complaints and Regulatory Authority
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: contact@peptide-compare.co.uk
Website: peptide-compare.co.uk