Privacy statement
Last updated: 15 November 2026
NL Peptides respects your privacy. This statement explains which personal data we collect via nlpeptideshop.com, why we do so and what your rights are.
1. Who is responsible?
NL Peptides, based in the Netherlands, is the controller for the personal data processed through this shop. For questions about your data, email info@nlpeptideshop.com.
2. What data do we collect, and why?
Orders. When you place an order we ask for your name, email address, delivery address (street and house number, postcode, city and country) and optionally your phone number and a note. Together with the contents of your order (products, quantities and any discount code) we use this data to process your order, send you a confirmation and payment instructions, ship your parcel and answer questions about your order.
Contact. If you email us or contact us via WhatsApp, we process the data you send us in order to reply to your message.
Visiting the website. Our hosting provider processes technical data needed to show and secure the site, such as your IP address. To protect the order form against abuse we store a hashed (non-readable) version of your IP address for a short time (at most 24 hours). We do not use analytics or tracking.
3. Legal basis
We process your data on the following bases under the General Data Protection Regulation (GDPR):
- performance of a contract: processing your order;
- legal obligation: keeping order and accounting records for tax purposes;
- legitimate interest: securing the website and preventing abuse, and answering messages.
4. How long do we keep data?
Order and accounting data is kept for around 7 years because of the statutory tax retention period. Contact messages are kept as long as needed to handle your question, and no longer than necessary after that.
5. Who do we share data with?
We do not sell your data. To run the shop we use the following parties:
- Netlify (United States): hosting of this website and storage of orders.
- Strato (Germany, EU): our mailbox info@nlpeptideshop.com, including sending order confirmations.
- Our postal carrier and its partner carriers in your country: delivery of your parcel. They receive your name and delivery address.
- bunq (Netherlands, EU): when you pay, you are sent to bunq. bunq processes the data needed for the payment.
- WhatsApp (Meta): only if you contact us via WhatsApp yourself.
- Google Fonts: for the fonts on the site. Google can see your IP address when the fonts are loaded.
Some of these parties (Netlify, Google and, for WhatsApp contact, Meta) are located outside the European Union. Where data is transferred to the United States or another country outside the EU, this happens with the safeguards required by the GDPR, such as the European Commission's standard contractual clauses, to the extent the relevant party uses them.
6. Cookies
We use one functional cookie that keeps your cart, chosen shipping country and discount code, and protects the order form against misuse. It is deleted when you close your browser. We do not use tracking or advertising cookies.
7. Security
The site runs over a secure connection (HTTPS). Your order can only be viewed via a personal link with a unique code. Lab reports (COAs) are sent with each order and are not published on the website.
8. Your rights
You have the right to access, correct or delete your data, to object to processing, and to receive your data in a portable format. Email info@nlpeptideshop.com to exercise these rights. We generally respond within one month.
We may not delete certain data as long as we are legally required to keep it, for example for tax records.
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the data protection authority in your own EU country.
9. Changes
We may update this statement when the shop or the law changes. The date at the top shows when this version was adopted.