All products are for laboratory research purposes only. Not for human consumption.
Legal
Privacy Policy
Last updated: 4 September 2026
NobelPepLab is committed to protecting your personal data. This policy explains what information we collect, why we collect it, and how you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
NobelPepLab is a UK-based wholesale research peptide supplier operating through the website nobelpeplab.com.
For the purposes of UK GDPR, NobelPepLab is the data controller for the personal data described in this policy.
Contact: enquiries@nobelpeplab.com
2. Data we collect and why
We only collect the data we need to respond to your enquiries and fulfil orders. We do not collect data for marketing purposes unless you have explicitly asked to hear from us.
Enquiry forms
When you submit an enquiry through our website, we collect:
- Your name
- Your email address
- The subject and content of your message
Legal basis: Legitimate interest — to respond to your enquiry and discuss a potential business relationship.
WhatsApp communications
If you contact us via WhatsApp to discuss an order, we may collect:
- Your name and WhatsApp phone number
- Your order details and delivery address
- The content of your messages
Legal basis: Contract performance — to process and fulfil your order.
Guide purchases via Gumroad
If you purchase our Peptide Sourcing & Verification Guide, the transaction is processed by Gumroad Inc. NobelPepLab does not directly receive or store your payment information. Gumroad may share your email address with us as the seller. Gumroad's own privacy policy applies to your data during that transaction: gumroad.com/privacy.
Website usage data
We use Cloudflare Web Analytics to understand how the site is used. It is cookieless and does not follow you across other websites. It records page views, the referring site, approximate country and device type. It does not build a profile of you, and we do not sell or share this data for advertising. Cloudflare processes it on our behalf; see cloudflare.com/privacypolicy.
3. How we use your data
We use the personal data we collect solely for the following purposes:
- Responding to your enquiries and questions
- Processing, fulfilling, and communicating about orders
- Delivering digital purchases (the buying guide PDF)
- Complying with legal obligations
We do not sell, rent, or trade your personal data to any third party. We do not use your data for automated decision-making or profiling.
4. Third parties and data processors
We use a small number of trusted third-party services to operate our website. These services may process your personal data on our behalf:
Netlify (Netlify Inc.)
Hosts this website and processes enquiry form submissions. Data is stored on Netlify's servers. See their privacy policy.
Gumroad Inc.
Processes payments and delivers the buying guide PDF. See their privacy policy.
WhatsApp (Meta Platforms Inc.)
Used for order discussion and fulfilment. WhatsApp's own terms and privacy policy apply to messages sent through their platform. See their privacy policy.
Cloudflare, Inc.
Provides Cloudflare Web Analytics, which records aggregate website usage. It is cookieless and does not identify you or follow you across other sites. See their privacy policy.
We do not transfer your personal data to countries outside the UK or EEA except where the platforms above (Netlify, Gumroad, WhatsApp, Cloudflare) operate their infrastructure. Each of these providers has appropriate safeguards in place for international transfers.
5. How long we keep your data
We retain personal data only for as long as necessary for the purpose it was collected:
- — Enquiry form submissions: retained for up to 12 months, then deleted.
- — Order records: retained for 6 years to comply with UK tax and accounting obligations, then deleted.
- — WhatsApp conversations: managed within WhatsApp's own retention system. We delete order-related messages after 12 months.
6. Your rights under UK GDPR
You have the following rights regarding the personal data we hold about you:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Ask us to delete your data, subject to legal retention obligations.
Right to portability
Request your data in a machine-readable format where applicable.
Right to object
Object to processing based on legitimate interest where your interests override ours.
Right to restrict processing
Request that we limit how we use your data in certain circumstances.
To exercise any of these rights, email us at enquiries@nobelpeplab.com. We will respond within one calendar month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies and browser storage
This website does not use tracking, advertising, or analytics cookies. We do not set any cookies in your browser.
We do store two small items in your browser itself, using local and session storage rather than cookies. The first records that you have confirmed you are 18 or over, so the age check is not repeated on every page; it remains until you clear your browser data. The second records the site that referred you and the first page you landed on, and if you send an enquiry these are submitted with it so we can see which channels produce genuine enquiries; they are cleared when you close the tab. Neither identifies you personally, and you can remove both at any time by clearing this site data in your browser.
Our analytics provider, Cloudflare Web Analytics, is cookieless and sets nothing in your browser, which is why no cookie banner is shown. Third-party services embedded on this site (such as Google Fonts for typography) may set their own cookies. If we ever add a cookie-based service, this policy will be updated and a cookie notice will be displayed.
8. Data security
We take reasonable measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS. Form submissions are transmitted securely via Netlify's encrypted infrastructure. While no method of transmission over the internet is completely secure, we are committed to handling your data responsibly.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.
10. Contact us
For any questions about this Privacy Policy or to exercise your data rights, contact us: