Privacybeleid

This privacy policy sets out what personal data Dutch Peptide Labs collects, why, and what you can do about it.

Who we are

Dutch Peptide Labs. For questions about this policy: store@dutchpeptidelabs.nl.

What we process, and why

When you order, we process your name, delivery address, e-mail address, telephone number and the contents of your order. We need these to perform the contract: to process and ship the order and to keep you informed about it. We also retain them to meet our tax record-keeping obligations.

When you hold an account, we keep your e-mail address and an encrypted form of your password so that you can sign in and see your order history. We cannot read your password.

When you pay by Pay-by-Bank, you are taken to Wallid’s payment page, where you choose your own bank. You then approve the payment yourself, in your bank’s app or online banking. Your account details are entered only at your own bank; we never see them and never store them. No card details are involved at any point.

Our shop sends only what is needed to set the payment up: the amount, the currency, your order reference and the web addresses you return to afterwards. Wallid then tells us whether the payment succeeded.

The payment itself is initiated by Yapily Connect Limited, which is authorised and regulated for this by the UK Financial Conduct Authority under the Payment Services Regulations 2017, firm reference 827001. The payment page is provided by WALLID.CO LTD, registered in England and Wales under company number 14342264, First Floor, 85 Great Portland Street, London W1W 7LT, United Kingdom. Your data is therefore also processed outside the EU, in the United Kingdom, which the European Commission has found to provide an adequate level of protection.

When you pay by bank transfer, we see only that a payment arrived, and when.

When you use the contact form, we process your name, e-mail address, any telephone number and order number, and your message. The message is sent to our support team by e-mail and is not stored in the website. To prevent abuse of the form we remember your IP address for at most one hour.

When you leave a review, we process your name, e-mail address and the review. Reviews are stored on our own server; nothing is sent to an external review service.

When you pay by Payment request (bunq), we create a payment request for your order at our bank, bunq. We send bunq only the amount and the currency (euro); the description is the same for every order (“Payment request DPL”). We do not send your name, e-mail address, address or any other details.

You pay through the payment link on bunq's payment page, with one of the payment methods bunq offers there. What you enter there, and what your own bank sends with the payment (such as your name and account number), bunq receives directly from you and your bank, as with any payment into our account. bunq's own privacy statement and cookie policy apply on that page. We then see your payment in our own account statement, with your name and account number, and use them only to match the payment to your order. If you pay by credit card on that page, you enter your card details directly with bunq; we never receive your card details.

bunq B.V., Naritaweg 131-133, 1043 BS Amsterdam, is a bank supervised by De Nederlandsche Bank (the Dutch central bank) and processes this payment data as a bank, under its own responsibility.

When you place an order, we also store with it which version of the terms and conditions you accepted, the time, your IP address and the browser you ordered with. We do this so that we can show what was agreed if there is a complaint or a payment dispute later (legitimate interest). We keep this data for as long as the order itself.

Reminders by e-mail. If you enter your e-mail address at checkout but do not complete the order, we store your e-mail address, the contents of your basket, the language and the time. We then send you at most two reminders (after 1 hour and after 24 hours) with a link to your basket. We delete this data after 30 days.

If an order you placed is still unpaid after 10 minutes, we send you one reminder with the way to pay. After an order has been shipped we send you at most two messages (after 25 and 32 days) that you can order the same products again.

If you do not want these reminders, tick the box at checkout, or use the unsubscribe link in any of them; unsubscribing covers all reminders. An order or an unsubscribe stops the reminders at once. We send them on the basis of our legitimate interest and, for customers, the existing customer relationship. The confirmation of your order, of your payment and of the shipment is always sent.

When you use the chat on the website, we keep your messages, the page on which you started the chat, the website's language and, if you fill them in, your name and e-mail address. We use this only to answer you. We forward your messages to our own private group in Telegram, where we read and answer them. A photo or PDF you send in the chat goes only to that group: on the website we keep just its file name, and from a photo we first remove the data your phone or camera stores in it, such as the location. To prevent abuse of the chat we keep not your IP address itself but a hash of it. The chat sets no cookies; your browser only remembers a key that shows you your own conversation again, and which reply you have already seen. We delete a conversation from the website when nothing has been written in it for 90 days; in our Telegram group, messages are deleted automatically after one year.

Discount code by e-mail. If you request a discount code through the pop-up on our website, we store your e-mail address, the language, the time and the code. We use this data to send you the code and to give each e-mail address one code. Legal basis: your request. We keep this data for as long as the code exists.

If you also tick that you want to receive offers and news, we store that consent with the time. Legal basis: your consent. You can withdraw it at any time via store@dutchpeptidelabs.nl. We keep the consent until you withdraw it.

Who we share data with

We do not sell your data. We share it only with the parties needed to fulfil your order:

bunq B.V. — our bank: to create a payment request for your order (the amount only) and to receive your payment.
PostNL, and DHL for reshipments — name and address, in order to deliver.
WALLID.CO LTD and Yapily Connect Limited — to set up and carry out your Pay-by-Bank payment.
Anthropic (Claude) — the text of a published review, to translate it into the languages of our website. Anthropic does not use the text to train its models and deletes it within 30 days.
Amazon Web Services (SES, eu-central-1) — to send our e-mail.
Kinsta — hosting for this website, on servers in the Netherlands or Frankfurt.
Telegram — only if you use the chat: your messages, photos and PDFs, which we read and answer in our own Telegram group.

Apart from Wallid and Yapily Connect (United Kingdom), Anthropic (United States) and Telegram, all of these process data within the European Union. The transfer to the United States is covered by the safeguards in Anthropic's data processing agreement. Telegram Messenger Inc. is not established in the European Union; according to Telegram's privacy policy, the data of users who signed up in the European Union is stored in data centres in the Netherlands.

Cookies

This website sets functional cookies that the basket, checkout and sign-in need in order to work. Without them the shop does not function. These need no consent and cannot be switched off.

Marketing cookies let us show you ads on other websites and measure whether those ads work. We use Meta (Facebook, Instagram), TikTok and Google Tag Manager for this. The shop does not need these cookies in order to work. They start as soon as you make a choice in the cookie banner, with either button, and you cannot switch them off afterwards. While you have not chosen, they are not loaded.

Once your order is paid, we also report that sale to TikTok from our own server: the value and products of the order, your IP address and browser details, and TikTok’s click ID and cookie. We do not pass on your name, e-mail address or telephone number with it. We only do this if marketing cookies were on when you ordered.

Beyond those, we set cookies only with your consent, for these purposes:

Personalisation — remembering your choices, such as your language and delivery country.
Analytics — understanding how the site is used. We use Google Analytics and Google Merchant Center for this.

We do not set these before you agree. While you have not chosen, or if you decline, they are not loaded at all — they are not merely switched off, they are not in the page.

You can change your choice for personalisation and analytics at any time through Cookie preferences at the foot of every page. Your choice is kept for six months in a cookie on your own device, after which we ask again.

Your age confirmation and your language and country choice are stored in your own browser and are never sent to us.

How long we keep data

Order data is kept for seven years, as Dutch tax law requires. Account data is kept for as long as your account exists. Contact form messages are kept for as long as it takes to deal with your question.

Your rights

You have the right to see your data, to have it corrected or erased, and to object to its processing. Write to store@dutchpeptidelabs.nl and we will respond within 30 days. If you are not satisfied, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).