Privacy Policy

Peptides Éire is the data controller for personal data collected through eirepeptide.shop. Contact: support@eirepeptide.shop.

• Account data: email address, name, hashed password (via our authentication provider).
• Order data: billing and shipping address, phone number, items ordered, order total.
• Payment metadata: transaction ID, status, last-4 of card — we never receive full card numbers.
• Communications: emails and support requests you send us.
• Technical data: IP address, browser, device information, and cookies (see our Cookies Policy).

• To process and dispatch your orders (contract).
• To send order confirmation, shipping, cancellation and refund emails (contract).
• To meet our legal, tax and accounting obligations (legal obligation).
• To detect fraud and secure the site (legitimate interest).
• To send marketing only where you have opted in (consent).

We share the minimum necessary data with trusted processors: our hosting and database provider (Supabase / Lovable Cloud), our payment provider (PeptidePay), our transactional email provider (Lovable Emails), and shipping carriers. All processors are bound by contractual GDPR-compliant terms.

Order and invoice data is retained for 6 years to meet Irish tax law. Account data is retained while your account is active and for up to 12 months after deletion. Marketing consent records are retained until you unsubscribe plus 12 months.

Under GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to processing. To exercise these rights, email support@eirepeptide.shop. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

Some processors may host data outside the EEA. Where they do, transfers are protected by the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism.

We use TLS/SSL for all traffic, encrypted databases with row-level security, hashed passwords, and access controls limiting personal data to authorised staff only.

We may update this policy from time to time. Material changes will be highlighted on this page and, where relevant, by email.