Last updated: 8 September 2026.
1. Who the data controller is
The controller of personal data collected by the peptyd.org shop is Tomasz Kozielski, selling as an unregistered business under Polish law. This is not a company entered in a commercial register, so the document gives no tax or register number: there are none.
Contact for anything concerning your data: info@peptyd.org.
2. What we collect and why
- The details you give when ordering: name, delivery address, email address and phone number. We use them to accept the order, send the parcel and contact you about it, including confirming the cost of international shipping. Legal basis: performance of a contract.
- Order history: to account for the sale and to handle a complaint or a return. Legal basis: legal obligation and legitimate interest.
- Messages you send through the contact form or by email: to answer them.
- A review of a product or of the shop, if you write one: to publish it with the signature you give.
We collect nothing beyond what the order form asks for. We do not profile you and we make no automated decisions about you.
3. How long we keep it
Order data is kept for as long as the order needs to be fulfilled and accounted for, and then for the period that follows from Polish rules on the limitation of claims arising from a sale. Correspondence is kept for as long as it may be needed to resolve the matter it concerns. After that the data is deleted.
4. Who else sees it
- The carrier, to the extent needed to deliver: InPost for parcel locker delivery, or the courier company for courier delivery.
- The hosting provider whose servers run the shop: Namecheap.
- The review service (Customer Reviews for WooCommerce), but only if you tick the box at checkout agreeing to a review invitation. Without that tick your data is not passed to it.
Nobody else. We do not sell data and we do not share it for marketing. The shop uses no payment operator, because payment is made by bank transfer or in cash to the courier.
5. Cookies and statistics
The shop uses cookies that are necessary for it to work: the cart, the order session, logging in and the server cache. Without them the purchase does not work, which is why they cannot be switched off inside the shop; you can block them in your browser, but the cart will then stop working properly.
Visit statistics are collected by a tool running on our own server (Independent Analytics). Data about visits is not sent to an outside analytics company. Since 8 September 2026 the shop loads no Google tags and no advertising scripts.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to have it transferred. Send any of those requests to info@peptyd.org and we answer without undue delay.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland, if you believe we process your data unlawfully.
7. Changes to this policy
The date of the last update is at the top of this page. If the way we handle data changes, this document and that date change with it.