Who Is Responsible
Greek Peptides, based in Kassiopi, Corfu 49081, Greece, is the data controller for the personal data described here. For any privacy question or request, contact support@greekpeptides.com.
This notice explains what personal data we collect when you use this website or place an order, why we use it, and the rights you have over it.
Greek Peptides, based in Kassiopi, Corfu 49081, Greece, is the data controller for the personal data described here. For any privacy question or request, contact support@greekpeptides.com.
When you place an order we collect your name, email address, phone number, delivery address and any order notes you choose to add, together with the details of your order. If you contact us we keep the content of that correspondence. We do NOT collect or store your card details — those go directly to our payment provider.
We use your data to process and deliver your order, to send order confirmations and shipping updates, to answer your enquiries, and to keep the accounting records the law requires. If you begin a checkout but do not complete it, we may send you one reminder email about that unfinished order; every such email carries a one-click unsubscribe link, and opting out never affects the confirmations or shipping updates for orders you do place. Our legal bases are performance of our contract with you, compliance with legal obligations (tax and accounting records), and our legitimate interests (responding to enquiries, following up on unfinished orders, and preventing fraud).
We use Google Analytics to understand how visitors find and use the site so we can improve it. It places cookies in your browser and collects information such as the pages you view, how long you stay, your approximate location (derived from your IP address), and your device and browser type. This information is processed by Google on our behalf. We do not use it to build advertising profiles and we never sell it. Separately, we set one strictly necessary session cookie so our own staff stay signed in to the admin area, and your basket is stored locally in your browser rather than on our servers. You can block or delete cookies in your browser settings at any time, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout to stop Analytics collecting your data.
We share data only with the service providers needed to run the shop, each acting on our instructions: our hosting and database providers (Vercel and Google Firebase), our email provider (Resend) for order confirmations, our payment provider for processing your payment, the courier who delivers your parcel, Google Analytics for website statistics, and Meta/WhatsApp where you choose to contact or order via WhatsApp. We never sell your data.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the Standard Contractual Clauses of the European Commission or an adequacy decision.
We keep order and transaction records for as long as required by Greek tax and accounting law, and enquiry correspondence for no longer than we need it to support you. After that, data is deleted or anonymised.
You have the right to access your data, correct it, request its deletion, restrict or object to how we use it, and receive a copy in a portable format. To exercise any of these, email support@greekpeptides.com and we will respond within the time the law allows.
If you are unhappy with how we have handled your data, you can complain to the Hellenic Data Protection Authority at www.dpa.gr.
Access to order data is restricted to authorised staff and protected by authentication. Data is transmitted over encrypted connections (HTTPS) and stored with reputable providers. No system is perfectly secure, but we take appropriate measures to protect your information.
We may update this notice from time to time. The version published on this page is the one that currently applies.
Questions about your order? Email support@greekpeptides.com or message us on WhatsApp.