Privacy Policy

PowerfullyPeptides ("we", "us", "our") operates the website powerfullypeptides.com and the related products and services (the "Services"). This Privacy Policy explains what personal information we collect, how we use it, and your rights. By using the Services you confirm you have read and understood this policy.

1 · Information we collect

You can browse our site anonymously. We only collect personal information when you choose to provide it — for example when you place an order or contact us. This may include:

• Contact & order details: your name, delivery address and Eircode, phone/WhatsApp number, email address, and the items you order. Orders are placed through the website checkout; if you choose to order via WhatsApp or email instead, those details reach us through that conversation.
• Communications: anything you include when you email, call, or message us.
• Technical data: our hosting provider automatically records basic technical information (such as IP address and browser type) in its server logs for security and reliability. We use Plausible Analytics, a cookieless, Europe-based service that processes technical network information to produce aggregate statistics after your acceptance. If you accept cookies, Google Ads conversion measurement also records whether a visit that started from one of our Google adverts ended in an order (see section 5).

We do not collect special-category data, and we do not ask for details that aren't needed to run the shop (we don't collect things like your date of birth, gender or interests).

2 · How we use your information

• To process, fulfil and ship your orders, and to send order confirmations and updates.
• To respond to your questions and provide customer support.
• To improve the website and our product range.
• To keep the site secure and prevent fraud.
• To send you marketing or our newsletter only where you have opted in — you can unsubscribe at any time.
• To comply with our legal obligations.

We will never sell your personal information, and we will not share it for third parties' own marketing.

3 · Ordering & payments

WhatsApp is operated by Meta and processes your messages under its own privacy policy. We only use the details you send us there to fulfil your order and provide support.

4 · How we protect your information

We use SSL/TLS encryption across the website and take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security, but we work to safeguard your information and limit access to it.

5 · Cookies & on-device storage

We never sell or share your data for anyone else's marketing. One advertising-measurement service is used, only with your consent, and it is described below. Here is everything this site puts on your device.

Stored in your own browser (local storage), purely to make the site work:

• Your shopping cart — the items you've added.
• Your saved items (wish list) and recently viewed products.
• Your preferences — light/dark theme and your optional measurement choice. If the browser cannot save a rejection in local storage, we also try a session preference and an essential rejection cookie, lasting up to one year, so the rejection survives navigation and browser restarts. We remove a stale acceptance where possible and repair the saved rejection when storage becomes available.
• Your entry confirmation — your age and research-use declaration is remembered in this browser for up to 90 days using local storage and an essential cookie, with a session fallback. This does not verify your identity or enable optional tracking.
• Loading-screen preference — a timestamp prevents the homepage introduction from repeating within 24 hours.
• Your login session — if you create a customer account, a session token keeps you signed in until you log out.

Some preferences stay on your device. Account, cart and order information is also processed by our services where needed to provide those functions.

Used to measure how the site performs:

• Plausible Analytics (Europe-hosted) — consented page-view and interaction statistics. It sets no cookies. We send approved page paths and limited event information, excluding URL queries, fragments and raw referring addresses. Recognised search-engine origins may be retained without paths or query strings. Technical network information, including IP address and browser information, is processed to produce statistics.
• Microsoft Clarity — shows us which parts of a page people struggle with, so we can fix them. After you accept, it uses cookies (_clck and _clsk) and records clicks, scrolling and mouse movement on eligible public browsing pages. Public website text and product images may be visible in recordings. Form entries, account details, customer reviews and messages are masked. Account, recovery, cart, checkout, order and calculator pages are excluded. Pages with private URL information are not recorded. Public product-page addresses can still show which product page was visited. It is not advertising, and we do not use it to build a profile of you or to target you.
• Google Ads conversion measurement — tells us which adverts lead to orders and paid sales. With your consent, we save the advert's click identifier in your browser for up to 90 days. The Google browser tag runs in a separate restricted measurement frame; its local advertising-cookie values last only for that frame. The identifier and your consent choice travel with an order so we can record a sale when payment is confirmed. For paid-sale uploads, Google receives the click identifier, order number, payment time and goods value; those uploads exclude your name, address, email and itemised products. The browser tag receives a generic measurement-page address and title, the consented click identifier and technical network data. It cannot access the surrounding shopping page, its forms, or its browser storage. An order submission is measured separately from a paid sale. Ad personalisation is switched off: we do not build remarketing lists or show you adverts elsewhere. Like Clarity, it runs only if you choose Accept.

You can clear the cookies and information stored on your device through your browser settings; this empties your cart and resets your preferences. To stop future optional measurement in this browser, use cookie settings and choose Reject optional cookies. This also clears the advert click identifier saved in this browser, but does not remove information already submitted with an order. To withdraw consent for an identifier attached to an existing order, email research@powerfullypeptides.com with your order number so we can remove it before any further paid-sale upload. To opt out of Microsoft Clarity specifically, use the Microsoft opt-out page, or browse in a window with cookies blocked.

5a · Customer accounts

Creating an account is optional — you can always order as a guest. If you do create one, we store your email address, and any details you choose to save (name, phone, delivery address, county, Eircode), plus your synced cart and order history, in a database operated by Supabase, our account-infrastructure provider, hosted in the Europe (Ireland region). Your password is stored only as a secure hash — we never see it. You can update or delete your saved details from your account page at any time, or email us to have the whole account removed.

5b · Our legal basis for using your information

Under Article 6 of the GDPR we must tell you why we are lawfully allowed to process your information. We rely on:

• Performance of a contract — taking, fulfilling and delivering your order, running your account, and answering support requests.
• Legal obligation — keeping sales and tax records for six years, and meeting consumer-law duties such as confirming your order and your right to cancel.
• Legitimate interests — keeping the site secure, preventing fraud and abuse, and understanding in aggregate how the site is used. We balance these against your rights, and you can object at any time.
• Consent — marketing and newsletter emails, the Plausible analytics, Microsoft Clarity usability recordings and Google Ads conversion measurement described above. Optional measurement starts only if you choose Confirm & accept all in the entry drawer or Accept all cookies in Cookie settings, and you can withdraw that at any time from the cookie settings or by unsubscribing from any email.

6 · Sharing with third parties

We only share personal information with trusted providers who help us operate, and only as needed to deliver your order or run the business:

• Shipping — our courier partners receive your name and delivery address to deliver your parcel.
• Messaging — WhatsApp (Meta) carries order conversations for customers who choose the WhatsApp ordering option or contact us there.
• Customer accounts — Supabase (Europe-hosted, Ireland region) stores account details, synced carts and order history for customers who create an account.
• Transactional email — account emails (e.g. activation codes and password resets) are delivered via Resend, our email provider.
• Website hosting & order capture — Netlify, Inc. (United States) hosts this website, processes technical server logs, and receives the details you submit when you place an order (name, contact details, delivery address and order contents).
• Pay-by-bank payments — Wallid processes the payment through your selected bank and receives the payment amount, your order reference, the items ordered and your email address. You approve the payment through your bank; this website does not collect your bank login credentials.
• Analytics — Plausible Analytics (Europe-hosted) processes cookieless page and interaction statistics after acceptance, including technical network information needed to produce those statistics. We do not send contact details or raw query strings to this analytics service.
• Usability analytics — Microsoft Clarity receives page-interaction data (clicks, scrolling, mouse movement) and your IP address, which Microsoft processes as a joint controller under its own privacy statement. We use it only to find and fix parts of the site that don't work well.
• Advertising measurement — Google Ireland Limited (Google Ads) receives, with your consent, the click identifier from an advert you clicked, your IP address, and on an order the order number and goods value, under Google's privacy policy. We use it only to measure which adverts lead to orders.
• Fonts & flags — fonts and flag images are served directly from this website (self-hosted); no third-party font or image service receives your IP address for these assets.

We may also disclose information where required by law or to protect our legal rights. We do not sell or trade your personal information, and we never share it for third parties' own marketing.

7 · International transfers

We ship worldwide, so your information may be transferred to and processed in countries outside the European Economic Area. This applies to Microsoft Clarity, Netlify and Resend, which are United States companies, to Google, which may process advertising-measurement data in the United States, and to WhatsApp (Meta) where you choose to contact us there. Where we do this, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses, and the EU–US Data Privacy Framework where the provider is certified under it) to protect your data.

8 · How long we keep your information

We keep personal information only for as long as we need it, and no longer. In practice:

• Order and invoice records — six years, because Irish tax law requires a trader to keep records of every sale for that long (Taxes Consolidation Act 1997 s.886).
• Account details — until you delete your account, which you can do yourself at any time.
• Support emails and messages — two years from your last contact.
• Newsletter, back-in-stock and review records — until you unsubscribe or ask us to remove them.
• Analytics — aggregate only, with no personal data retained.

When a period ends the information is deleted, or anonymised so it can no longer be linked to you.

9 · Your rights

Under the General Data Protection Regulation (GDPR) and Irish data-protection law, you have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict our processing, to withdraw consent, and to opt out of marketing at any time. There is no charge to exercise these rights.

If you have an account, two of these are self-serve and instant. No request, no waiting. In your account, under Your data:

• Download my data — a machine-readable file containing everything we hold about you: your account, saved details, order history, and any newsletter, back-in-stock or review records tied to your email.
• Delete my account — erases your login, saved details, synced cart and subscriptions immediately. The account database retains sales dates, references and totals, and removes order contact details, free-text notes and reviews. Order forms, transactional email, payment-provider records and backups are outside this automated cleanup; contact us to request their review and a complete data export.

Ordered as a guest, or want anything else on that list? Contact us using the details below and we will action it within one month, as the GDPR requires. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

10 · Children

The Services are not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with information, contact us and we will delete it.

11 · Third-party links

Our site may link to other websites we don't control. We are not responsible for their privacy practices — please review their policies.

The homepage can display the current Google Maps review rating and total through a request from our server to Google. This request identifies our business; it does not send your browser IP address, cookies or account details to Google. Following the Google reviews link opens Google Maps, where the Google Privacy Policy applies.

12 · Changes to this policy

We may update this policy from time to time. We'll post the revised version here and update the "Last updated" date above.

13 · Contact us

For any questions about this policy or to exercise your rights, contact the data controller:
PowerfullyPeptides — Republic of Ireland
Email: research@powerfullypeptides.com
Phone: +353 83 308 6196

Change your cookie choice — reopens the side drawer so you can accept or reject optional tracking at any time. Rejecting also deletes the two Clarity cookies and the Google Ads cookies from this browser.