Privacy Policy

1. Introduction

PX Reagents Ltd is committed to protecting the privacy of our platform users and customers. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you use our research-reagent wholesale platform, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). EU GDPR applies additionally where we process data of EEA-resident individuals. We sell to adults aged 18 or over and do not knowingly collect data from anyone under 18.

2. Information We Collect

2.1 Information You Provide

• Account registration details (email, company name, contact name)
• Proof of identity, address or research use, if we ask for it before dispatch
• Payment confirmations and references from our payment providers (we never see card numbers or bank logins)
• Order information and transaction records
• Shipping addresses and billing information
• Communications with our support team
• Marketing consent preferences (email, WhatsApp)

2.2 Automatically Collected Information

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages viewed, features used, time spent)
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information & Lawful Bases

We process your personal data on the following lawful bases under UK GDPR Article 6:

We only send marketing and research-update messages where you have given explicit prior consent. You may withdraw consent at any time by using the unsubscribe link in any marketing email, the opt-out keyword on WhatsApp, your account settings, or by contacting Support@peptx.co.uk.

4. Data Sharing

We do not sell your personal data. We may share information with:

• Payment providers: Wallid (powered by Yapily Connect Ltd) and Fena for UK bank payments, Tide for international payments, and our card payment provider for card payments. They receive what is needed to take the payment, such as the amount, reference and your name, email and country.
• Delivery: Sendcloud (labels and tracking) and Royal Mail or the relevant carrier receive your name, delivery address, phone number and email.
• Our manufacturing partner (Factory Direct orders only, outside the UK): your name, delivery address and phone number, so it can ship your order to you.
• Service providers that run the site, email, SMS, WhatsApp and Telegram messaging and our assistant (listed in section 9), under contract and only on our instructions.
• Authorities: customs, the police or regulators when the law requires it, or to prevent fraud and protect our rights.

5. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure server infrastructure, role-based access controls and row-level security on all customer data. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

You may request deletion of your account and associated personal data at any time. Where data must be retained to comply with a legal obligation, we will restrict processing rather than delete until the retention period expires.

7. Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018 you have the following rights. EEA-resident individuals additionally benefit from equivalent rights under EU GDPR.

• Right of access (Art. 15): obtain a copy of your personal data and how we process it.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion where no overriding legal basis applies.
• Right to restriction (Art. 18): request that we limit processing in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests or to direct marketing.
• Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting prior lawful processing.
• Right to complain to the ICO: lodge a complaint at ico.org.uk/make-a-complaint or by post to: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

To exercise any of these rights, submit a Data Subject Access Request (DSAR) to Support@peptx.co.uk. We respond within one calendar month (UK GDPR Art. 12(3)), with a possible extension of two further months for complex or numerous requests of which we will notify you.

8. Cookies

We use cookies in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR.

• Strictly necessary storage: keeps you signed in, keeps your basket and confirms the age check. No consent is needed for these.
• First-party analytics: a random session identifier for the visit lets us count page views and checkout steps in our own database. It is not shared, sold or used for advertising or tracking you across other sites.
• Advertising and tracking cookies: none. We would ask for your consent before setting any.

Every item we store is listed in our Cookie Policy.

9. Who processes your data, and where

These providers process personal data for us. Where data leaves the UK, it is protected by the safeguard shown:

A current sub-processor list is available at Support@peptx.co.uk. Copies of UK IDTA / SCCs are available on written request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We notify registered users of material changes by email at least 14 days before changes take effect. The current version is always available at peptx.co.uk/privacy. Where a material change affects processing for which we rely on consent, we will seek fresh consent. Continued use of the platform after non-material updates does not constitute consent to any new processing activities.