Loading
What personal information this website collects, why it is collected, how long it is kept, and what you can do about it.
It is a structural draft prepared so that a qualified legal adviser has something concrete to review, amend or replace. It is not legal advice, it has not been approved, and it must not be relied on as a statement of your rights or of our obligations until a professional review is complete. Sections marked [TO BE CONFIRMED] are decisions that have not yet been made.
This notice explains how personal information is handled when you use this website, enquire about the research catalogue, apply for a trade account, or contact us about a data protection matter.
It is written as a structural draft. Every operational decision it depends on — retention periods, the identity of our processors, whether any information leaves the United Kingdom — is marked below and has not yet been settled.
The controller of the personal information described in this notice is the company trading as Peptides Wales. Company details are held in one place and are published exactly as supplied; where a detail has not yet been supplied it appears below as a placeholder rather than as a guess.
| Trading name | Peptides Wales |
|---|---|
| Registered company name | Dragon Peps Ltd |
| Company number | 17379282 |
| Jurisdiction | Registered in England and Wales |
| Registered office | 20 Wenlock RoadLondonN1 7GUUnited Kingdom |
| VAT registration | [VAT NUMBER] |
Whether we are required to register with the Information Commissioner’s Office and pay the data protection fee, and whether we are required to appoint a data protection officer, are open questions: [TO BE CONFIRMED].
| Data protection contact | [DATA PROTECTION CONTACT EMAIL] |
|---|---|
| Complaints contact | [COMPLAINTS CONTACT EMAIL] |
| General enquiries | support@peptideswales.co.uk |
You can also use the electronic form on the data protection and complaints page, which records a reference for your request.
We may hold the following categories of information about you.
We do not ask for special category data or criminal offence data, and you should not send it to us. We do not knowingly collect information about children; this is a business-to-business website.
No payment information is collected through this website. Purchasing is not currently open, and no payment method is enabled.
Most of the information we hold comes directly from you, through a form on this website or through correspondence. We may also use publicly available sources — such as a public company register or your organisation’s own website — to check that an organisation applying for trade access exists and is what it says it is.
Each purpose below is matched with the lawful basis we intend to rely on. The final selection of lawful bases, and the legitimate interests assessments that support them, form part of the outstanding legal review.
| Responding to enquiries and quotation requests | Legitimate interestsOur interest in answering a business enquiry that you have chosen to send us. |
|---|---|
| Assessing and verifying trade-account applications | Legitimate interests, and steps taken at your request before a contractOur interest in supplying research materials only to organisations we have checked. |
| Supplying materials and administering an account | Performance of a contractApplies only once purchasing is open and a supply arrangement exists. |
| Keeping records of who we supply and why | Legal obligation, and legitimate interestsThe specific record-keeping obligations that apply have not yet been determined. |
| Handling data protection requests and complaints | Legal obligation |
| Protecting the website against abuse and fraud | Legitimate interestsIncludes rate limiting and spam prevention on public forms. |
| Sending optional updates you have asked for | ConsentNever bundled with anything else, never pre-ticked, withdrawable at any time. |
Where we rely on legitimate interests, you have the right to object; see data protection rights and complaints.
We do not sell personal information, and we do not share it with third parties for their own marketing.
We use service providers who process personal information on our instructions — typically website hosting, email delivery and business software. Each provider must be placed under a written processing agreement before it is used. The named list of processors is [TO BE CONFIRMED: named processors].
We may also disclose information to professional advisers, or to a regulator or law-enforcement body where we are legally required to do so.
Some service providers may store or process information outside the United Kingdom. Whether that is the case for this website, which countries are involved, and which transfer mechanism applies to each of them, is [TO BE CONFIRMED: transfer mechanism per processor].
We will not state that adequate safeguards are in place until each transfer has been assessed and documented.
We keep personal information only for as long as there is a reason to hold it, and then delete it or reduce it to a form that does not identify you.
A retention schedule setting a defined period for each category — enquiries, trade-account applications, supply records, rights requests and consent records — has not yet been agreed: [TO BE CONFIRMED: retention periods]. Until it is, no specific period is stated here, because stating one we do not operate would be misleading.
Data protection law gives you rights over your personal information, including the right to be told what we hold, to have inaccurate information corrected, to ask for information to be deleted or its use restricted, to receive certain information in a portable form, and to object to some uses.
Each right, the limits that apply to it, and how to exercise it are set out in full on the data protection rights and complaints page, which also carries the request form.
Any marketing consent is asked for separately from anything else, is never pre-ticked, and is never a condition of making an enquiry, applying for a trade account or receiving a quotation.
You can withdraw marketing consent at any time by using the unsubscribe route in any message we send, or by writing to our data protection contact. Withdrawing consent does not affect anything we sent before you withdrew it, and does not stop us replying to an enquiry you have made.
Nothing that is not strictly necessary runs on this website before you have made a choice. No analytics or marketing technology is currently active. Your choice is stored in your browser’s local storage under the key pw.consent.v1 rather than in a cookie, so no identifier is sent to our server with every request.
The full explanation, including the four categories and how to change or withdraw your choice, is in the cookie notice.
Trade-account applications are reviewed by a person. We do not make decisions about you by automated means alone, and we do not profile you to predict your behaviour.
We take measures intended to protect personal information, including transport encryption for the website, server-side validation of every form submission, rate limiting on public endpoints, and keeping personal information out of application logs beyond what is needed to identify a message.
No measure removes all risk, and we do not claim that our arrangements are certified or independently assessed. A formal security review has not been carried out: [TO BE CONFIRMED: security assessment].
If you are unhappy with how we have handled your personal information, please tell us first — it is usually the quickest route to a fix, and you can use the form on the data protection rights and complaints page.
You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s independent regulator for data protection, at ico.org.uk. You do not have to complain to us first, and complaining to us does not reduce your right to go to the regulator.
When this notice changes, the version number and the last-updated date at the top of the page change with it. The current version is a draft and will be replaced once a qualified adviser has reviewed it.