Privacy policy

Data controller

Vial Peptides is the website's brand, not a claim that Vial Peptides Ltd is incorporated. The legal controller identity, business address and verified privacy contact have not yet been published. This notice is incomplete; online ordering remains unavailable.

Data we collect

• Cart product identifiers and quantities are saved in this browser.
• The age declaration is remembered in this browser.
• Delivery details entered into checkout are checked locally; this checkout does not submit an order.
• No card details are collected and no payment processor is active.
• Website hosting may process technical request data such as IP address and browser information.

How we use your data

Browser storage remembers your cart and self-reported age declaration. Checkout does not fulfil orders or send emails. Hosting processing purposes and lawful bases have not been confirmed in this notice; no compliance assurance is made for those arrangements.

Sharing

This checkout does not submit delivery details as an order to a payment processor or carrier. The website loads fonts from Google Fonts and logo images from an external asset host; those requests may expose technical information such as your IP address to those providers. Hosting-provider arrangements, recipients and any international-transfer safeguards must be confirmed in the completed privacy notice.

Retention

The cart and age declaration remain in browser storage until cleared. No order retention period is claimed because this checkout does not save orders. Hosting-log retention remains to be confirmed.

Your rights

You have the right to access, rectify, erase, restrict or object to processing of your data, and to data portability, subject to applicable conditions. A verified contact for requests still needs to be published. You may complain to the Information Commissioner's Office (ico.org.uk).

Cookies and browser storage

The cart and age declaration use local browser storage, not cart cookies. No optional analytics or advertising script is configured in the storefront code. Local storage is subject to storage/access rules too; being different from cookies does not remove those obligations. Hosting-level tracking and the applicable consent requirements remain unverified. No consent to optional tracking is assumed. Clear site data in your browser to remove the saved cart and age declaration.