Last updated: 14 August 2026

Privacy policy

This page explains what personal data we process, why, for how long and what you can require from us, under Regulation (EU) 2016/679 and Spanish Organic Law 3/2018.

01Data controller

[Razón social], tax ID [NIF], registered at [Domicilio social]. Email: hola@primepeptides.es.

02What we process

Only what is needed to sell and ship an order:

  • Identification and contact: name, surname, email address and phone number.
  • Shipping address: street, postcode, town, province and country.
  • Order data: products, amounts, payment status and shipping status.
  • Minimal technical data from browsing, such as the IP address in server logs.

03Payment details never reach us

Card and crypto payments are processed by an external gateway. Card numbers are entered in their environment, not ours: we only receive the payment reference, the amount and whether it succeeded.

If you pay by bank transfer, what we handle is the incoming payment carrying your order reference.

04Purposes and legal bases

Each use has its reason:

  • Handling the purchase, shipping and after-sales support: performance of the contract.
  • Issuing and keeping invoices: legal obligation.
  • Preventing fraud and protecting the systems: legitimate interest.
  • Sending marketing messages, should there ever be any: your consent, withdrawable at any time.

05How long we keep it

Order data is kept for as long as the relationship lasts and afterwards for the statutory tax and commercial periods (six years for accounting records, four for tax obligations).

After that it is deleted or anonymised.

06Who else sees it

Only those involved in shipping or charging:

  • The payment gateway, to process the charge.
  • The courier, to deliver the parcel.
  • The hosting and email providers, as data processors.
  • Public authorities, where the law requires it.

07International transfers

Providers are chosen within the European Economic Area wherever possible. Where one processes data outside it, this happens under an adequacy decision or the European Commission’s standard contractual clauses.

08Your rights

Write to hola@primepeptides.es saying which right you want to exercise. They are:

  • Access the data we hold about you.
  • Rectify anything that is wrong.
  • Erase it when it is no longer needed.
  • Restrict or object to certain processing.
  • Receive it in a portable format.
  • Complain to the Spanish Data Protection Agency (www.aepd.es) if you think we have not handled your request properly.

09Cookies and local storage

This site uses no analytics or advertising cookies. Only two things are stored, both necessary: your basket, in your browser’s local storage, and a session cookie in the admin panel, which only exists for whoever runs the shop.

If any measurement is added in the future, we will ask for your consent before switching it on.

10Minors

The site is not aimed at anyone under 18 and we do not sell to people below that age.

Privacy policy | Prime Peptides