Privacy & cookies
Last updated: 25 October 2026. PeptideCheck (peptidecheck.co.uk) is operated by Revial Labs Ltd, company number 17254123, registered in England and Wales (“we”). We are the data controller for the personal data described here. Contact: hello@peptidecheck.co.uk.
The short version
- We do not run advertising trackers, Google Analytics or social media pixels on PeptideCheck.
- When you click through to a vendor we record the click (with the time, the product and a random click ID) so the vendor can be billed fairly. We do not record your name or email at that point.
- If you set a price alert we store your email address, the peptide and your target price, and only after you confirm by clicking the link we send.
- Vendors who register give us business contact details so we can run their account.
- We keep as little as we can, for as short a time as we can, and we never sell data.
What we collect and why
Click-throughs. When you click a Buy or Visit link we store the vendor, the product, the time, a random click ID, the page you came from on PeptideCheck and a hashed, truncated form of your IP address and browser string to detect duplicate or automated clicks. Legal basis: legitimate interests (operating a fair commission scheme and preventing fraud). Retention: 120 days.
Visitor statistics. To count visitors and see which pages and searches are useful, we give each browser a random ID in a first-party cookie (pc_vid) and record the pages viewed, searches typed into the site search, the referring website or campaign tag, and the device type (mobile, tablet or desktop). We do not store names, email addresses or IP addresses with this, it never leaves our server, and no third-party analytics or advertising service is involved. Legal basis: legitimate interests (understanding how the site is used). Retention: 13 months.
Invitation emails to stores. When we email a store about listing on PeptideCheck, the email contains a small image and links that pass through peptidecheck.co.uk, so we can see whether it was opened and which page was visited. We record only the store’s domain, the time and the number of opens and clicks: no IP address, device or browser details. Legal basis: legitimate interests (knowing which stores to follow up with, and not emailing those that have shown no interest). Retention: 12 months. To opt out, reply to the email or turn off images in your mail app.
Price alerts. Your email address, the peptide, the target price and a confirmation token. We email you only to confirm the alert, to tell you when the price is reached (at most once every seven days per alert) and to let you remove the alert. Legal basis: consent, which you can withdraw with the unsubscribe link in any alert email. Retention: until you remove the alert. To limit abuse we also keep a hashed count of alert requests per connection for one hour.
Vendor accounts. If you register a store we collect the business name, website, legal company name and number, a contact name, email and phone number, and the data your store’s PeptideCheck Connect plugin sends us: product names, prices, stock status, delivery terms, discount code terms and, for referred orders, the order number, net value, status and whether the buyer was a new customer. The plugin never sends us customer names, addresses or email addresses. Legal basis: contract (the vendor terms). Retention: for as long as the store is listed, then 12 months for accounting. Price history (product prices over time, no personal data) is kept for about 13 months.
Server logs. Our hosting provider (Hostinger) keeps standard web server logs including IP addresses for security and diagnostics, typically for a short rolling period. Legal basis: legitimate interests.
Email. If you email us we keep the correspondence for as long as needed to deal with it and for up to 24 months afterwards.
Cookies
PeptideCheck sets only cookies it needs to work. None of them are used for advertising or shared with third parties.
- pc_from (30 minutes): set when you arrive at PeptideCheck from a listed vendor’s website. If you click straight back to that same vendor we use it to send you back without a tracking ID, so the vendor is never billed for its own customer. It holds only the vendor’s identifier.
- pc_vid (180 days): a random visitor ID for our own visitor statistics, described above. It holds no personal details and is never shared.
- WordPress login cookies (session, or 14 days if you tick “remember me”): only for vendors who log into the vendor portal.
- LiteSpeed cache cookies (session): used by our hosting to serve pages quickly; they hold no personal data.
When you click through to a vendor, a cookie named pc_click is set on the vendor’s website by their PeptideCheck Connect plugin (30 days). It holds the random click ID so the vendor can tell PeptideCheck that a sale came from us. That cookie is set by the vendor, on the vendor’s domain, and is covered by the vendor’s own privacy and cookie policy.
Who we share data with
Our hosting and email provider (Hostinger International Ltd) processes data on our behalf. When a vendor reports a referred order we store the order number and value they send us; we send vendors aggregate click counts and the click IDs of orders they have themselves reported. We do not sell or rent personal data and we do not share it with advertisers.
Your rights
Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, object to or restrict processing, and withdraw consent at any time. Email hello@peptidecheck.co.uk and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
PeptideCheck is for adults only (18+). We do not knowingly collect data from anyone under 18.
Changes
If we change this policy in a way that matters we will update the date at the top and, for price-alert subscribers and vendors, tell you by email.