Last updated: 14 August 2026
Privacy policy
This page explains what personal data we process, why, for how long and what you can require from us, under Regulation (EU) 2016/679 and Spanish Organic Law 3/2018.
01Data controller
[Razón social], tax ID [NIF], registered at [Domicilio social]. Email: hola@primepeptides.es.
02What we process
Only what is needed to sell and ship an order:
- Identification and contact: name, surname, email address and phone number.
- Shipping address: street, postcode, town, province and country.
- Order data: products, amounts, payment status and shipping status.
- Minimal technical data from browsing, such as the IP address in server logs.
03Payment details never reach us
Card and crypto payments are processed by an external gateway. Card numbers are entered in their environment, not ours: we only receive the payment reference, the amount and whether it succeeded.
If you pay by bank transfer, what we handle is the incoming payment carrying your order reference.
04Purposes and legal bases
Each use has its reason:
- Handling the purchase, shipping and after-sales support: performance of the contract.
- Issuing and keeping invoices: legal obligation.
- Preventing fraud and protecting the systems: legitimate interest.
- Sending marketing messages, should there ever be any: your consent, withdrawable at any time.
05How long we keep it
Order data is kept for as long as the relationship lasts and afterwards for the statutory tax and commercial periods (six years for accounting records, four for tax obligations).
After that it is deleted or anonymised.
06Who else sees it
Only those involved in shipping or charging:
- The payment gateway, to process the charge.
- The courier, to deliver the parcel.
- The hosting and email providers, as data processors.
- Public authorities, where the law requires it.
07International transfers
Providers are chosen within the European Economic Area wherever possible. Where one processes data outside it, this happens under an adequacy decision or the European Commission’s standard contractual clauses.
08Your rights
Write to hola@primepeptides.es saying which right you want to exercise. They are:
- Access the data we hold about you.
- Rectify anything that is wrong.
- Erase it when it is no longer needed.
- Restrict or object to certain processing.
- Receive it in a portable format.
- Complain to the Spanish Data Protection Agency (www.aepd.es) if you think we have not handled your request properly.
09Cookies and local storage
This site uses no analytics or advertising cookies. Only two things are stored, both necessary: your basket, in your browser’s local storage, and a session cookie in the admin panel, which only exists for whoever runs the shop.
If any measurement is added in the future, we will ask for your consent before switching it on.
10Minors
The site is not aimed at anyone under 18 and we do not sell to people below that age.