Privacy Policy

1. Introduction

PX Reagents Ltd is committed to protecting the privacy of our platform users and customers. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you use our B2B research-reagent wholesale platform, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). EU GDPR applies additionally where we process data of EEA-resident individuals. This platform is operated strictly as a B2B research marketplace; we do not knowingly collect data from consumers or individuals under 18.

2. Information We Collect

2.1 Information You Provide

• Account registration details (email, company name, contact name)
• Business credentials and institutional verification documents
• Order information and transaction records
• Shipping addresses and billing information
• Communications with our support team
• Marketing consent preferences (email, WhatsApp)

2.2 Automatically Collected Information

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages viewed, features used, time spent)
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information & Lawful Bases

We process your personal data on the following lawful bases under UK GDPR Article 6:

We only send marketing and research-update messages where you have given explicit prior consent. You may withdraw consent at any time by using the unsubscribe link in any marketing email, the opt-out keyword on WhatsApp, your account settings, or by contacting privacy@peptx.co.uk.

4. Data Sharing

We do not sell your personal data. We may share information with:

• Suppliers: order details necessary to fulfil your purchase
• Shipping providers: delivery address and contact for shipment
• Payment processors: transaction details for payment processing
• Legal authorities: when required by law or to protect our rights

5. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure server infrastructure, role-based access controls and row-level security on all customer data. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

You may request deletion of your account and associated personal data at any time. Where data must be retained to comply with a legal obligation, we will restrict processing rather than delete until the retention period expires.

7. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018 you have the following rights. EEA-resident individuals additionally benefit from equivalent rights under EU GDPR.

• Right of access (Art. 15): obtain a copy of your personal data and how we process it.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion where no overriding legal basis applies.
• Right to restriction (Art. 18): request that we limit processing in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests or to direct marketing.
• Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting prior lawful processing.
• Right to complain to the ICO: lodge a complaint at ico.org.uk/make-a-complaint or by post to: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

To exercise any of these rights, submit a Data Subject Access Request (DSAR) to privacy@peptx.co.uk. We respond within one calendar month (UK GDPR Art. 12(3)), with a possible extension of two further months for complex or numerous requests of which we will notify you.

8. Cookies

We use cookies in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR.

• Strictly necessary cookies — required for authentication, cart state, currency selection and security. Set on the basis of legitimate interests / contract performance; no consent required.
• Analytics cookies — first-party usage analytics. Only set with your prior consent via the cookie banner.
• Marketing/tracking cookies — none currently set. Any future third-party marketing tags will require separate consent.

You can update preferences at any time via the cookie settings link in the footer.

9. International Transfers

We use the following sub-processors that may process your personal data outside the UK or EEA. Transfers are protected by the safeguards noted:

A current sub-processor list is available at privacy@peptx.co.uk. Copies of UK IDTA / SCCs are available on written request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We notify registered users of material changes by email at least 14 days before changes take effect. The current version is always available at peptx.co.uk/privacy. Where a material change affects processing for which we rely on consent, we will seek fresh consent. Continued use of the platform after non-material updates does not constitute consent to any new processing activities.