Privacy policy

1. Data Controller

The data controller for the personal data collected on this website is PeptidAs, registered under SIRET number To be completed, with its principal place of business located at To be completed, France. If you have any questions regarding your data, please contact us at contact@peptidas.fr.

2. Data Collected

We collect the data you provide to us directly when you create an account, place an order, use the contact form, or apply for the referral program.

• Identity: last name, first name.
• Contact information: email address, phone number, and mailing addresses for shipping and billing.
• Order data: purchase history, payment methods used (banking information itself is processed by our payment service provider and is not stored by us).
• Browsing data: IP address, connection data, pages viewed, collected via cookies and trackers.

3. Purposes and Legal Bases

Your data is processed for the following purposes and on the following legal grounds.

• Order management and customer relationship management, based on the fulfillment of the contract.
• Responding to requests submitted via the contact form, based on our legitimate interest in processing the requests we receive.
• Management of the referral program, based on the fulfillment of the contract entered into with the partner.
• Sending marketing communications, based on your consent, when you have provided it.
• Compliance with accounting, tax, and legal obligations, as required by law.

4. Recipients

Your data is intended for authorized internal departments at PeptidAs. It may also be shared with our technical service providers to the extent strictly necessary for the provision of the service: payment processors, shipping carriers, website hosting providers, and email delivery services. These service providers use your data only for the purposes for which it is provided to them.

When you enter a shipping address in France, the text you enter is sent to the National Address Database API (a free public service operated by the Interministerial Directorate for Digital Affairs, api-adresse.data.gouv.fr) to provide you with valid addresses and automatically fill in the city based on the ZIP code. This request is made as you type, before the order is confirmed; it passes through our servers, and no data is transmitted to any advertising service.

5. Shelf Life

Data related to your customer account is retained for the duration of the business relationship and then archived in accordance with statutory retention periods. Billing data is retained for ten years in accordance with accounting requirements. Data collected via the contact form is retained for as long as necessary to process your request, and then for three years for evidentiary purposes.

6. Transfers Outside the European Union

Your data is hosted and processed within the European Union. If any of our technical service providers were to involve the transfer of data outside the European Union, such transfer would be governed by the appropriate safeguards provided for in the General Data Protection Regulation, in particular the European Commission’s standard contractual clauses.

7. Cookies and Trackers

The site uses cookies that are strictly necessary for its operation, such as those related to the shopping cart or the age verification consent. It may also use cookies to track website traffic and, subject to your consent, cookies for personalization or advertising.

You can configure your browser at any time to block cookies, or withdraw your consent if it has been obtained.

8. Your Rights

In accordance with the General Data Protection Regulation and the French Data Protection Act, you have the following rights regarding your personal data.

• Right to access your personal data.
• Right to correct inaccurate or incomplete data.
• Right to have your data erased, in the cases provided for by law.
• Right to object to the processing of your data, on legitimate grounds or for marketing purposes.
• Right to data portability for the data you have provided to us.
• Right to restriction of processing, in the cases provided for by law.

9. How to Exercise Your Rights

You may exercise these rights by writing to us at contact@peptidas.fr, specifying your last name, first name, and the subject of your request. You may be asked to provide proof of identity if there is reasonable doubt regarding your identity. We are committed to responding within one month of receiving your request.

10. Filing a Complaint with the CNIL

If, after contacting us, you believe that your rights have not been respected, you may file a complaint with the French Data Protection Authority (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or through its website at www.cnil.fr.