Privacy policy

This privacy policy describes how BioPeptides (biopeptides.fr) collects, uses and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the amended French Data Protection Act.

By using this site, the user acknowledges having read this policy.

The data controller is BioPeptides, reachable at contact@biopeptides.fr for any question regarding the protection of personal data.

We collect identity and contact data (name, email, phone, delivery and billing address), order data, and technical data (IP address, browser, pages viewed) strictly necessary for the operation and security of the site.

Payment data (card number, etc.) is never collected or stored on this site: it is processed directly by our secure payment provider.

Your data is processed for order management and delivery (performance of the contract), responding to contact requests and support (legitimate interest), compliance with legal obligations (legal obligation) and site security (legitimate interest).

Your data is intended for BioPeptides' internal departments and, where applicable, for our strictly necessary processors: payment provider, carrier, host. These providers only access the data necessary for their task and are bound by confidentiality.

Order data is kept for the time necessary for processing, then archived in accordance with legal obligations (notably 10 years for accounting records). Contact data is kept for the time needed to process the request, then deleted or anonymised.

The site is hosted by Vercel Inc. (United States). As such, certain technical data may be processed outside the European Union. These transfers are governed by appropriate safeguards (European Commission standard contractual clauses) in accordance with Articles 44 et seq. of the GDPR.

This site uses only storage strictly necessary for its operation (cart memorisation via the browser's local storage). This storage is exempt from prior consent within the meaning of the CNIL's recommendations.

No advertising, analytics or tracking cookies are set. Should such cookies be added in the future, your prior consent would be collected through a mechanism allowing you to freely accept or refuse them.

BioPeptides implements appropriate technical and organisational measures (encrypted HTTPS connection, restricted access to data) to protect your data against any unauthorised access, alteration or disclosure.

In accordance with the GDPR, you have a right of access, rectification and erasure, a right to restriction and objection to processing, a right to data portability, and the right to set directives regarding the fate of your data after your death.

To exercise these rights, contact us at contact@biopeptides.fr. A reply will be provided within one month.

If you believe your rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL), www.cnil.fr.

This policy may be updated at any time. The date of the last update appears at the top of this page.