Privacy Policy — PowerfullyPeptides

PowerfullyPeptides ("we", "us", "our") operates the website powerfullypeptides.com and the related products and services (the "Services"). This Privacy Policy explains what personal information we collect, how we use it, and your rights. By using the Services you confirm you have read and understood this policy.

Research use only. Our products are supplied strictly for laboratory research purposes — not for human or animal consumption. You must be 18 or over to use this website.

1 · Information we collect

You can browse our site anonymously. We only collect personal information when you choose to provide it — for example when you place an order or contact us. This may include:

Contact & order details: your name, delivery address and Eircode, phone/WhatsApp number, email address, and the items you order. Orders are placed through the website checkout; if you choose to order via WhatsApp or email instead, those details reach us through that conversation.
Communications: anything you include when you email, call, or message us.
Technical data: our hosting provider automatically records basic technical information (such as IP address and browser type) in its server logs for security and reliability. We use Plausible Analytics, a privacy-first, cookieless, Europe-based service that collects only aggregate statistics and no personal data. We do not use advertising trackers.

We do not collect special-category data, and we do not ask for details that aren't needed to run the shop (we don't collect things like your date of birth, gender or interests).

2 · How we use your information

To process, fulfil and ship your orders, and to send order confirmations and updates.
To respond to your questions and provide customer support.
To improve the website and our product range.
To keep the site secure and prevent fraud.
To send you marketing or our newsletter only where you have opted in — you can unsubscribe at any time.
To comply with our legal obligations.

We will never sell your personal information, and we will not share it for third parties' own marketing.

3 · Ordering & payments

We do not take card payments on this website. Checkout uses Pay by Revolut: you place your order on the site and we email you our bank details (IBAN) and your order reference; you then pay by bank transfer (SEPA) from your own banking app. We never collect, store, or have access to your card numbers or online-banking credentials — payment is made directly through your own bank. No card or bank account numbers are ever retained on our systems.

WhatsApp is operated by Meta and processes your messages under its own privacy policy. We only use the details you send us there to fulfil your order and provide support.

4 · How we protect your information

We use SSL/TLS encryption across the website and take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security, but we work to safeguard your information and limit access to it.

5 · Cookies & on-device storage

We do not use advertising cookies, and we never sell or share your data for anyone else's marketing. Here is everything this site puts on your device.

Stored in your own browser (local storage), purely to make the site work:

Your shopping cart — the items you've added.
Your saved items (wish list) and recently viewed products.
Your preferences — light/dark theme and whether you've dismissed the cookie notice.
Your login session — if you create a customer account, a session token keeps you signed in until you log out.

This stays on your device and is never sent to us or anyone else.

Used to measure how the site performs:

Plausible Analytics (Europe-hosted) — page-view statistics. It sets no cookies, stores no personal data, and cannot identify or follow an individual visitor.
Microsoft Clarity — shows us which parts of a page people struggle with, so we can fix them. It sets two cookies (_clck and _clsk) and records how pages are used: clicks, scrolling and mouse movement. It is not advertising, and we do not use it to build a profile of you or to target you.

You can clear all of this at any time through your browser settings; doing so simply empties your cart and resets your preferences. To opt out of Microsoft Clarity specifically, use the Microsoft opt-out page, or browse in a window with cookies blocked.

5a · Customer accounts

Creating an account is optional — you can always order as a guest. If you do create one, we store your email address, and any details you choose to save (name, phone, delivery address, county, Eircode), plus your synced cart and order history, in a database operated by Supabase, our account-infrastructure provider, hosted in the Europe (Ireland region). Your password is stored only as a secure hash — we never see it. You can update or delete your saved details from your account page at any time, or email us to have the whole account removed.

5b · Our legal basis for using your information

Under Article 6 of the GDPR we must tell you why we are lawfully allowed to process your information. We rely on:

Performance of a contract — taking, fulfilling and delivering your order, running your account, and answering support requests.
Legal obligation — keeping sales and tax records for six years, and meeting consumer-law duties such as confirming your order and your right to cancel.
Legitimate interests — keeping the site secure, preventing fraud and abuse, and understanding in aggregate how the site is used. We balance these against your rights, and you can object at any time.
Consent — marketing and newsletter emails, and the Microsoft Clarity usability analytics described above. Clarity runs only if you choose Accept on the cookie banner, and you can withdraw that at any time from the cookie settings or by unsubscribing from any email.

6 · Sharing with third parties

We only share personal information with trusted providers who help us operate, and only as needed to deliver your order or run the business:

Shipping — our courier partners receive your name and delivery address to deliver your parcel.
Messaging — WhatsApp (Meta) carries order conversations for customers who choose the WhatsApp ordering option or contact us there.
Customer accounts — Supabase (Europe-hosted, Ireland region) stores account details, synced carts and order history for customers who create an account.
Transactional email — account emails (e.g. activation codes and password resets) are delivered via Resend, our email provider.
Website hosting & order capture — Netlify, Inc. (United States) hosts this website, processes technical server logs, and receives the details you submit when you place an order (name, contact details, delivery address and order contents).
Analytics — Plausible Analytics (Europe-hosted) processes aggregate, cookieless usage statistics; it receives no personal data and cannot identify individual visitors.
Usability analytics — Microsoft Clarity receives page-interaction data (clicks, scrolling, mouse movement) and your IP address, which Microsoft processes as a joint controller under its own privacy statement. We use it only to find and fix parts of the site that don't work well.
Fonts & flags — fonts and flag images are served directly from this website (self-hosted); no third-party font or image service receives your IP address for these assets.

We may also disclose information where required by law or to protect our legal rights. We do not sell or trade your personal information, and we never share it for third parties' own marketing.

7 · International transfers

We ship worldwide, so your information may be transferred to and processed in countries outside the European Economic Area. This applies to Microsoft Clarity, Netlify and Resend, which are United States companies, and to WhatsApp (Meta) where you choose to contact us there. Where we do this, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses, and the EU–US Data Privacy Framework where the provider is certified under it) to protect your data.

8 · How long we keep your information

We keep personal information only for as long as we need it, and no longer. In practice:

Order and invoice records — six years, because Irish tax law requires a trader to keep records of every sale for that long (Taxes Consolidation Act 1997 s.886).
Account details — until you delete your account, which you can do yourself at any time.
Support emails and messages — two years from your last contact.
Newsletter, back-in-stock and review records — until you unsubscribe or ask us to remove them.
Analytics — aggregate only, with no personal data retained.

When a period ends the information is deleted, or anonymised so it can no longer be linked to you.

9 · Your rights

Under the General Data Protection Regulation (GDPR) and Irish data-protection law, you have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict our processing, to withdraw consent, and to opt out of marketing at any time. There is no charge to exercise these rights.

If you have an account, two of these are self-serve and instant. No request, no waiting. In your account, under Your data:

Download my data — a machine-readable file containing everything we hold about you: your account, saved details, order history, and any newsletter, back-in-stock or review records tied to your email.
Delete my account — erases your login, saved details, synced cart and subscriptions immediately. Your past orders are kept as anonymous sales records (date, items and totals, with your name, address and email removed), because Irish tax law requires a trader to keep records of every sale for six years.

Ordered as a guest, or want anything else on that list? Contact us using the details below and we will action it within one month, as the GDPR requires. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

10 · Children

The Services are not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with information, contact us and we will delete it.

11 · Third-party links

Our site may link to other websites we don't control. We are not responsible for their privacy practices — please review their policies.

12 · Changes to this policy

We may update this policy from time to time. We'll post the revised version here and update the "Last updated" date above.

13 · Contact us

For any questions about this policy or to exercise your rights, contact the data controller:
PowerfullyPeptides — Republic of Ireland
Email: research@powerfullypeptides.com
Phone: +353 83 308 6196

Change your cookie choice — reopens the banner so you can accept or reject analytics at any time. Rejecting also deletes the two Clarity cookies from this browser.