Privacy Policy

Who we are

ElevateLabsUK is a United Kingdom supplier of research-grade peptides for laboratory use. For any data protection query, contact ukelevatelabs@gmail.com.

We are the data controller for the personal data described in this notice.

What we collect

Order data: your name, email address, telephone number, organisation (if supplied), delivery address, order contents, order reference and delivery status.

Account data: if you choose to create an account, your email address, hashed password credentials held by our authentication provider, and any saved delivery details.

Support data: the name, email address and message content you submit through our contact form.

Technical data: essential cookies and session identifiers required to keep your basket and login session working, plus analytics data where you have consented.

Why we process it

To perform our contract with you: taking payment, fulfilling and dispatching your order, providing order updates and handling returns or queries.

To meet legal obligations: retaining transaction and tax records for the period required by UK law.

For our legitimate interests: preventing fraud, securing the website and improving our service.

With your consent: optional analytics cookies and any marketing email you have specifically opted in to. You can withdraw consent at any time.

Payments

Card payments are processed by Stripe. We never receive or store your full card number, expiry date or security code — those details are entered directly with Stripe and handled under their own privacy policy and PCI-DSS obligations. We receive only a payment reference and the payment outcome.

For bank transfer orders we retain only your order reference and the payment confirmation you provide.

Who we share data with

Our payment processor (Stripe), our hosting and database provider, our email delivery provider and our courier — each only to the extent needed to complete your order.

We do not sell your personal data, and we do not share it for third-party advertising.

We may disclose data where we are legally required to do so.

How long we keep it

Order and transaction records are kept for six years to meet UK tax and accounting requirements. Contact form messages are kept for 24 months. Account data is kept until you ask us to delete your account.

Your rights

You have the right to access, correct, erase, restrict or object to our processing of your personal data, and the right to data portability. To exercise any of these, email ukelevatelabs@gmail.com — we respond within one calendar month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is transmitted over HTTPS and stored in an access-controlled database with row-level security so that customers can only read their own records. Administrative access is restricted to named accounts and every administrative action is logged.