Privacy Policy — PowerfullyPeptides

PowerfullyPeptides ("we", "us", "our") operates the website powerfullypeptides.com and the related products and services (the "Services"). This Privacy Policy explains what personal information we collect, how we use it, and your rights. By using the Services you confirm you have read and understood this policy.

Research use only. Our products are supplied strictly for laboratory research purposes — not for human or animal consumption. You must be 18 or over to use this website.

1 · Information we collect

You can browse our site anonymously. We only collect personal information when you choose to provide it — for example when you place an order or contact us. This may include:

Contact & order details: your name, delivery address and Eircode, phone/WhatsApp number, email address, and the items you order. Orders are placed through the website checkout; if you choose to order via WhatsApp or email instead, those details reach us through that conversation.
Communications: anything you include when you email, call, or message us.
Technical data: our hosting provider automatically records basic technical information (such as IP address and browser type) in its server logs for security and reliability. We use Plausible Analytics, a privacy-first, cookieless, EU-based service that collects only aggregate statistics and no personal data. We do not use advertising trackers.

We do not collect special-category data, and we do not ask for details that aren't needed to run the shop (we don't collect things like your date of birth, gender or interests).

2 · How we use your information

To process, fulfil and ship your orders, and to send order confirmations and updates.
To respond to your questions and provide customer support.
To improve the website and our product range.
To keep the site secure and prevent fraud.
To send you marketing or our newsletter only where you have opted in — you can unsubscribe at any time.
To comply with our legal obligations.

We will never sell your personal information, and we will not share it for third parties' own marketing.

3 · Ordering & payments

We do not take card payments on this website. Checkout uses Pay by Bank: you place your order on the site and we email you our bank details (IBAN) and your order reference; you then pay by bank transfer (SEPA) from your own banking app. We never collect, store, or have access to your card numbers or online-banking credentials — payment is made directly through your own bank. No card or bank account numbers are ever retained on our systems.

WhatsApp is operated by Meta and processes your messages under its own privacy policy. We only use the details you send us there to fulfil your order and provide support.

4 · How we protect your information

We use SSL/TLS encryption across the website and take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security, but we work to safeguard your information and limit access to it.

5 · Cookies & on-device storage

We keep this simple: we do not use advertising, analytics, or tracking cookies. The site stores a small amount of data in your own browser (local storage) purely to make it work:

Your shopping cart — the items you've added.
Your saved items (wish list) and recently viewed products.
Your preferences — light/dark theme and whether you've dismissed the cookie notice.
Your login session — if you create a customer account, a session token keeps you signed in until you log out.

Apart from account data (below), this stays on your device and is never sent to us or anyone else. You can clear it at any time through your browser settings; doing so simply empties your cart and resets your preferences.

5a · Customer accounts

Creating an account is optional — you can always order as a guest. If you do create one, we store your email address, and any details you choose to save (name, phone, delivery address, county, Eircode), plus your synced cart and order history, in a database operated by Supabase, our account-infrastructure provider, hosted in the EU (Ireland region). Your password is stored only as a secure hash — we never see it. You can update or delete your saved details from your account page at any time, or email us to have the whole account removed.

6 · Sharing with third parties

We only share personal information with trusted providers who help us operate, and only as needed to deliver your order or run the business:

Shipping — our courier partners receive your name and delivery address to deliver your parcel.
Messaging — WhatsApp (Meta) carries order conversations for customers who choose the WhatsApp ordering option or contact us there.
Customer accounts — Supabase (EU-hosted, Ireland region) stores account details, synced carts and order history for customers who create an account.
Transactional email — account emails (e.g. activation codes and password resets) are delivered via Resend, our email provider.
Website hosting — our hosting provider processes technical server logs.
Analytics — Plausible Analytics (EU-hosted) processes aggregate, cookieless usage statistics; it receives no personal data and cannot identify individual visitors.
Fonts & flags — fonts and flag images are served directly from this website (self-hosted); no third-party font or image service receives your IP address for these assets.

We may also disclose information where required by law or to protect our legal rights. We do not sell or trade your personal information, and we never share it for third parties' own marketing.

7 · International transfers

We ship worldwide, so your information may be transferred to and processed in countries outside the European Economic Area. Where we do this, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect your data.

8 · How long we keep your information

We keep personal information only for as long as necessary to fulfil your order, provide support, meet our legal and accounting obligations, and resolve any disputes — after which it is deleted or anonymised.

9 · Your rights

Under the General Data Protection Regulation (GDPR) and Irish data-protection law, you have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict our processing, to withdraw consent, and to opt out of marketing at any time. There is no charge to exercise these rights. To make a request, contact us using the details below. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

10 · Children

The Services are not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with information, contact us and we will delete it.

11 · Third-party links

Our site may link to other websites we don't control. We are not responsible for their privacy practices — please review their policies.

12 · Changes to this policy

We may update this policy from time to time. We'll post the revised version here and update the "Last updated" date above.

13 · Contact us

For any questions about this policy or to exercise your rights, contact the data controller:
PowerfullyPeptides — Republic of Ireland
Email: research@powerfullypeptides.com
Phone: +353 83 308 6196