Privacy Policy
This policy explains what personal data we collect when you use fastpeptides.xyz and place an order, why we collect it, who we share it with and what rights you have. We collect as little as we need to sell and deliver your order.
Who is responsible for your data
Fast Peptides is the controller of the personal data described in this policy. For any privacy question or request, write to [email protected].
What we collect
- Order details: your name, email address, shipping address, optional phone number, the products you ordered, prices and order number.
- Payment confirmation: when a payment completes we receive the order number, the amount and currency or crypto asset received, and a transaction reference. We never see or store card numbers. Card details are entered only on our payment provider's page.
- Messages: the content of emails you send us.
- Technical data: your IP address and basic request information, processed by our servers and our network security provider to deliver the site and protect it from abuse.
We do not ask for or store any information about how you intend to use our products, and we do not create accounts for customers.
Cookies and browser storage
We do not use advertising, analytics or tracking cookies. The shop stores your cart, chosen currency and light or dark theme in your browser's local storage. That information stays on your device and is not sent to us until you place an order. Our network security provider may set a strictly necessary cookie to protect the site against bots. Because we only use strictly necessary storage, no cookie banner is required.
Why we use your data
- To process and deliver your order, send order and shipping emails and handle any problem with it (performance of a contract).
- To keep business and tax records as required by law (legal obligation).
- To keep the site and our payments secure, prevent fraud and duplicate payments (legitimate interests).
We do not send marketing emails, we do not sell your data, and we do not use it for profiling.
Who we share it with
We share only what each provider needs to do its job:
- Payment provider (CardToUSDT): your email address, order number and amount, to process your card or crypto payment.
- Shipping carriers: your name, shipping address and, if given, phone number, to deliver the parcel.
- Email delivery provider: your email address and the content of order emails, to deliver them.
- Hosting provider: our servers, located in Europe, store the order database.
- Network and security provider: handles traffic to the site and forwards emails sent to our address.
Some of these providers are based outside the European Economic Area, including in the United States. Where that is the case, transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
- Orders: for as long as required by tax and accounting law, which can be up to 10 years.
- Unpaid or cancelled orders: deleted after 12 months.
- Emails: for as long as needed to handle your request and any related order.
- Server logs: a few weeks.
How we protect it
The site is served only over encrypted connections (HTTPS). Order data is stored on our own server, accessible only to authorised staff through password-protected accounts, and backed up daily.
Your rights
Under the GDPR you can ask us to access, correct or delete your data, restrict or object to its processing, or receive a copy in a portable format. Write to [email protected]; we will reply within one month. Some data, such as records of paid orders, must be kept for the period required by law even if you ask us to delete it.
You also have the right to lodge a complaint with the data protection authority in your country.
Age
Our site is intended for adults only and is not directed at anyone under 18.
Changes
If we change this policy we will update the date at the top of this page.