Privacy Policy

Privacy at a Glance

We collect only what is necessary to process your order.

Your data is encrypted and never sold to third parties.

We do not use advertising or tracking cookies.

You can request deletion of your data at any time.

We are fully GDPR compliant.

Minimal functional cookies only.

1. Who We Are

BMPeptides ("we", "us", "our") operates bmpeptides.com and acts as the data controller for personal data you provide. Contact for privacy matters: contact@bmpeptides.com

2. Data We Collect

Category	Examples	Purpose
Identity	First name, last name, date of birth	Order processing, age verification
Contact	Email address, phone number	Order confirmations, payment instructions
Address	Billing and shipping address	Delivery fulfilment
Transaction	Order contents, value, payment status	Order processing, records
Technical	IP address, browser type, session data	Security, fraud prevention
Communications	Messages sent via contact form or email	Customer support

We do not collect or store payment card details.

3. How We Use Your Data

Order fulfilment — to process, confirm and deliver your order
Age verification — to confirm you are 18 or older
Payment coordination — to send you payment instructions after ordering
Customer support — to respond to enquiries and technical questions
Legal compliance — to meet applicable legal obligations
Security — to prevent fraud and protect our systems
Newsletter — only where you have explicitly opted in

4. Legal Basis (GDPR)

Contract performance (Art. 6(1)(b)): Processing necessary to fulfil your order
Legal obligation (Art. 6(1)(c)): Age verification and regulatory compliance
Legitimate interests (Art. 6(1)(f)): Fraud prevention and security
Consent (Art. 6(1)(a)): Newsletter — withdraw at any time

5. Data Sharing

We do not sell, rent or trade your personal data.

Delivery partners: Name and address shared with shipping carriers only
IT infrastructure: Hosting and database providers under data processing agreements
Legal authorities: Where required by law

6. Data Retention

Order records: 7 years (financial/legal compliance)
Customer accounts: Lifetime of account + 30 days after deletion request
Contact messages: 12 months from receipt
Newsletter: Until you unsubscribe
Session/technical data: Up to 90 days

7. Your Rights (GDPR)

🔍

Right of Access

Request a copy of your personal data.

✏️

Right to Rectification

Ask us to correct inaccurate data.

🗑️

Right to Erasure

Request deletion of your personal data.

⏸️

Right to Restriction

Ask us to restrict processing in certain circumstances.

📦

Right to Data Portability

Receive your data in a machine-readable format.

🚫

Right to Object

Object to processing for direct marketing.

↩️

Right to Withdraw Consent

Withdraw newsletter consent at any time.

To exercise any right, email contact@bmpeptides.com — Subject: "Data Rights Request". We respond within 30 days.

8. Cookies

We use only essential functional cookies:

Session cookies: Keep you logged in during your visit
Cart data: Stored in browser localStorage — not a cookie

We do not use advertising, analytics or third-party tracking cookies.

9. Data Security

SSL/TLS encryption for all data transmitted to and from our website
Passwords stored using bcrypt hashing — never plain text
Restricted access — only authorised personnel access order data
Regular security reviews

10. Children's Privacy

Our service is strictly for adults aged 18+. We do not knowingly collect data from minors. If you believe a minor has submitted data, contact contact@bmpeptides.com immediately.

11. Contact

Email: contact@bmpeptides.com

You may also lodge a complaint with your national data protection authority. In the EU, find your authority at edpb.europa.eu.

Last updated: May 3, 2025 | See also our Terms of Service