Privacy Policy

Last updated: 16 April 2026

1. Who we are

This Privacy Policy explains how Ouro Peptides Limited (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit www.ouropeptides.com (“the Site”) or place an order with us.

Data Controller:
Ouro Peptides Limited
247-249 Old Brompton Road, London, SW5 9HP, United Kingdom
Company number: 17129783
ICO registration number: C1910960
Email: privacy@ouropeptides.com

We are registered with the UK Information Commissioner’s Office (ICO). You can verify our registration at ico.org.uk.

2. What data we collect

We collect the following categories of personal data:

When you visit the Site:

  • IP address and approximate location (country/region)
  • Browser type, device type, and operating system
  • Pages visited, time spent, and referring URL
  • Cookie identifiers (see our Cookie Policy for details)

When you create an account or place an order:

  • Full name
  • Email address
  • Billing and shipping address
  • Phone number (if provided)
  • Order history and transaction details
  • Age verification acknowledgement (timestamp and confirmation)
  • Checkout research-use acknowledgement (timestamp and confirmation)

When you contact us:

  • Name and email address
  • Contents of your message
  • Any attachments you send

We do not collect any special category (sensitive) personal data as defined under UK GDPR Article 9.

3. How we use your data

We process your personal data for the following purposes and on the following lawful bases:

  • Fulfilling and delivering your order β€” Performance of a contract (Art. 6(1)(b))
  • Processing payment β€” Performance of a contract (Art. 6(1)(b))
  • Sending order confirmations and dispatch notifications β€” Performance of a contract (Art. 6(1)(b))
  • Verifying your age (18+) and research-use acknowledgement β€” Legitimate interest: regulatory compliance (Art. 6(1)(f))
  • Fraud prevention and chargeback management β€” Legitimate interest: protecting the business (Art. 6(1)(f))
  • Responding to your enquiries β€” Legitimate interest: customer service (Art. 6(1)(f))
  • Sending marketing emails (only if you have opted in) β€” Consent (Art. 6(1)(a))
  • Website analytics (anonymised where possible) β€” Legitimate interest: improving the Site (Art. 6(1)(f))
  • Complying with legal obligations (tax records, anti-fraud) β€” Legal obligation (Art. 6(1)(c))

4. Who we share your data with

We share your personal data only with the following categories of recipients, and only to the extent necessary:

  • Payment processors: Our card payment gateway processes your payment securely. We do not store your full card number on our servers.
  • Shipping carriers: Royal Mail and DPD receive your name and delivery address to fulfil your order.
  • Email service provider: We use an email platform to send transactional and (where opted in) marketing emails.
  • Analytics provider: We use anonymised analytics to understand how the Site is used.
  • Professional advisers: Our accountant and solicitor may access data where required for legal, regulatory, or tax purposes.
  • Law enforcement or regulators: Where we are legally required to disclose data.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. International transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs), and adequacy decisions by the UK Secretary of State under UK GDPR Article 45.

You may request a copy of the relevant safeguards by contacting us at privacy@ouropeptides.com.

6. How long we keep your data

We retain your personal data only for as long as necessary:

  • Order records and transaction data: 6 years from the date of the transaction (HMRC requirement)
  • Age verification and research-use acknowledgements: 6 years from the date of the order
  • Account data (if you create an account): Until you request deletion of your account
  • Marketing consent records: Until you withdraw consent
  • Website analytics data: 26 months (anonymised)
  • Customer service correspondence: 2 years from resolution

After the applicable retention period, data is securely deleted or anonymised.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access β€” You can request a copy of the personal data we hold about you.
  • Right to rectification β€” You can ask us to correct any inaccurate or incomplete data.
  • Right to erasure β€” You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
  • Right to restrict processing β€” You can ask us to suspend processing of your data in certain circumstances.
  • Right to data portability β€” You can request that we provide your data in a structured, commonly used, machine-readable format.
  • Right to object β€” You can object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent β€” Where processing is based on your consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@ouropeptides.com. We will respond within one calendar month of receiving your request, as required by UK GDPR.

8. Right to complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first at privacy@ouropeptides.com.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including TLS (HTTPS) encryption across the entire Site, PCI-DSS SAQ-A compliant card processing (no card data stored on our servers), access controls limiting data access to authorised personnel only, and regular review of our security practices.

10. Children

The Site is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the most recent revision. Material changes will be communicated via email or a prominent notice on the Site.

12. Contact

For any questions about this Privacy Policy or your personal data, please contact:

Ouro Peptides Limited
247-249 Old Brompton Road, London, SW5 9HP, United Kingdom
Email: privacy@ouropeptides.com
ICO registration: C1910960