Privacy Policy
How Pegasus Peptides collects, uses, and protects your information
Last Updated: May 2026
This Privacy Policy explains how Pegasus Peptides collects, uses, and protects your information when you use this website.
Information We Collect
We may collect the following information:
- Name;
- Billing and shipping address;
- Email address;
- Telephone number;
- Payment and transaction details;
- IP address;
- Browser/device information;
- Website usage and analytics data.
Payment information is processed securely by third-party payment providers and is not stored directly on our servers.
How We Use Your Information
We use personal information to:
- Process and fulfil orders;
- Provide customer support;
- Prevent fraud and abuse;
- Improve website functionality;
- Comply with legal obligations;
- Communicate regarding orders or account activity.
We do not sell your personal information.
Legal Basis for Processing
We process personal data under one or more of the following legal bases:
- Contractual necessity;
- Legitimate business interests;
- Legal compliance obligations;
- Consent where required.
Cookies & Analytics
This website may use cookies and analytics technologies to:
- Improve website performance;
- Analyse visitor behaviour;
- Maintain security;
- Store user preferences.
You may disable cookies through your browser settings.
Data Sharing
We may share data with trusted third parties where necessary, including:
- Payment processors;
- Shipping couriers;
- Fraud prevention providers;
- Website hosting providers;
- Analytics providers.
These providers process data only as required to perform services on our behalf.
Data Security
We implement reasonable technical and organisational measures to protect personal data against:
- Unauthorised access;
- Loss;
- Misuse;
- Alteration;
- Disclosure.
However, no online transmission or storage system can be guaranteed completely secure.
Data Retention
We retain personal information only for as long as necessary to:
- Fulfil contractual obligations;
- Meet legal and tax requirements;
- Resolve disputes;
- Enforce agreements.
Your Rights
Under applicable data protection laws, you may have rights to:
- Access your personal data;
- Correct inaccurate data;
- Request deletion of data;
- Restrict processing;
- Object to processing;
- Request data portability.
Requests may be submitted using our website contact information.
International Transfers
Where necessary, personal information may be processed outside the United Kingdom using appropriate safeguards and security measures.
Third-Party Services
This website may contain links to third-party websites or services.
Pegasus Peptides is not responsible for the privacy practices or content of third-party websites.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time.
Continued use of the website after updates constitutes acceptance of the revised policy.
Affiliate Programme & Payout Data
If you join our affiliate programme, we process additional personal and financial data to calculate and pay your commission. This section applies in addition to the rest of this policy.
What we collect: your name and email, your affiliate/discount code and referral activity, commission amounts per qualifying order, and the payout details you choose to provide — account holder name, preferred payout method, and either bank details (bank name, sort code, account number, optional IBAN/BIC) or a PayPal email.
Lawful basis: performance of our affiliate contract with you and our legitimate interest in operating the programme and meeting financial record-keeping obligations.
How we protect it: banking numbers (sort code, account number, IBAN) are encrypted at rest and are only ever decrypted server-side by authorised finance administrators when processing a payout. We only ever display the last four digits of an account number in our dashboards and communications, and we never include full bank details in any email. Access is restricted by role-based access control, changes require re-authentication, and all changes are recorded in an audit log. We ask only for the minimum information needed to pay you.
Retention: we retain affiliate account and payout records for as long as you remain an affiliate and thereafter for up to 7 years to comply with UK tax and accounting requirements, after which the data is deleted or anonymised. You may update your payout details at any time from your affiliate dashboard, and account numbers are always stored in encrypted form.
Your rights (UK GDPR & UAE PDPL): you may request access to, or correction or deletion of, your affiliate data (subject to the retention obligations above) by contacting info@pegasus-peptides.com. We maintain an internal Record of Processing Activities documenting how this data is collected, used, stored, accessed and retained.