Privacy notice
What personal information we collect, why we use it, who we share it with and your rights.
Nadoron Biotech Ltd, trading as Novum Peptides, is the controller of the personal information described here. You can contact us about privacy at support@novumpeptides.com.
Your name, email address, delivery address, optional phone number, the products you order, the payment method you choose and your payment reference. We do not receive your bank login details.
Your email address and a password, which is handled securely by our sign-in provider and is never visible to us, plus your order history and any restock alerts you set.
Your email address, your message and, if you give it, your order number.
Your email address and the product you are waiting for. We email you once to confirm, then once when it is back in stock, and every email has a link to cancel. We do not use it for anything else.
Your email address, to send occasional news about new batches and restocks. You can unsubscribe at any time.
Your browser stores your basket, sign-in session, entry confirmation and cookie choice. If you accept optional cookies, Google Analytics records which pages you visit, the products you view and add to your basket, and general information about your device and location. If you then place an order that is paid, we tell Google Analytics the order number, the products, their prices and the total, but never your name, contact details or address.
Processing payment, dispatching your order, sending order and delivery emails, and handling returns. This is necessary to perform our contract with you.
Keeping sales and accounting records as the law requires.
Answering enquiries, keeping the website and your account secure, preventing fraud, improving our service, and asking you once to review your order on Trustpilot.
Sending marketing emails and using Google Analytics. You can withdraw consent at any time: unsubscribe from emails, or choose "Essential only" in Cookie settings.
We use trusted service providers who process information for us under contract: Vercel (website hosting), Supabase (our database and account sign-in), Resend (sending order emails), Google Workspace (our email inbox), Google Analytics (only if you accept optional cookies), Fena (if you choose Pay by Bank), our own BTCPay payment server (if you pay in Bitcoin), Royal Mail (to deliver your parcel) and Trustpilot (which receives a copy of your dispatch email, containing your name, email address, order number and tracking reference, so it can send you one invitation to review your order; you can ignore it or opt out). Your bank and ours process bank transfers. Bitcoin payments are recorded on the public Bitcoin blockchain, which we cannot change or delete.
Some of these providers may process information outside the UK. Where they do, we rely on the protections required by UK data protection law, such as UK adequacy regulations or approved contract terms.
We do not sell your personal information, and we do not use advertising cookies.
Six years after the end of the financial year of the order, to meet accounting and tax requirements. After that your name, contact details and address are removed from the order record automatically.
Until you ask us to close your account, after which order records are kept as above.
Two years after we last corresponded with you, then deleted automatically.
90 days after sending. The order record itself is kept as above.
Deleted after 30 days if you never confirm, or 12 months after the alert is sent or cancelled.
Google Analytics keeps event data for 14 months, and we delete the link between your order and your Analytics visit after 14 months.
You can ask us for a copy of your personal information, ask us to correct or delete it, ask us to restrict or stop using it, object to how we use it, or ask for a copy to send to another organisation. Email us to make a request; we will respond within one month.
If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner's Office (ico.org.uk).
We will update this page if the way we use personal information changes. The date at the side of this page shows when it was last updated.