Privacy Policy
This is a translation for convenience. In case of any discrepancy, the Dutch version prevails. View the Dutch version.
1. Introduction
Peptidewinkel ("we") attaches great importance to your privacy. In this policy we explain which personal data we collect via peptidewinkel.com, why, and how we protect it, in accordance with the General Data Protection Regulation (GDPR).
2. What data we collect
- Name and address details — for shipping
- Email address and optional phone number — for order communication
- Order history
- Payment data — exclusively via secure payment providers; we never see your full card or bank details
- IP address and browser information via essential and (with consent) analytical cookies
3. Purposes
We use your data to process and ship orders, communicate about your order, prevent fraud, improve our services and — only with explicit consent — for marketing purposes.
4. Retention period
Personal data is not retained longer than necessary for the purposes stated above or as legally required (such as the statutory 7-year retention obligation for invoice data).
5. Sharing with third parties
We share your data only with processors necessary for our services: payment providers, carriers within the EU and our IT infrastructure. We have a data processing agreement with all these parties. We never sell your data.
6. Cookies
We use functional cookies (necessary for the webshop to function) and — with consent — analytical and marketing cookies. You can manage your preferences via the cookie banner and your browser settings.
7. Your rights
You have the right to access, correct, erase, port your data and object to its use. Send a request to info@peptidewinkel.com or via our contact page.
8. Security
We take appropriate technical and organisational measures, including SSL encryption, restricted access and secure data storage, to protect your data.
9. Complaints
Do you have a complaint about the processing of your data? Please contact us first. If we do not reach a resolution, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Last updated: June 2026