Privacy policy

SwePeptide is responsible for the processing of personal data described in this policy.

The easiest way to reach us is through our contact page. Full details of the selling legal entity will be published here once formally established — we do not publish details that have not been verified.

Order data: name, email address, delivery address, phone number where provided, order number and the products ordered.

Payment-related information: the payment provider you choose at checkout processes the data required to complete the payment. We do not receive or store your card details; we receive information that a payment linked to an order has succeeded or failed.

Technical information: IP address, approximate location derived from your connection (used to suggest language and currency), device and browser information, cookies and local storage, and operational logs.

Customer service data: the messages you send us through the contact form, including name, email address, message text and any order number.

Handling and delivering orders (order and contact data) — legal basis: performance of our contract with you.

Customer service and handling of returns, complaints and withdrawal requests (contact and case data) — legal basis: performance of the contract and our legitimate interest in being able to answer enquiries.

Accounting and other legal obligations (order and transaction data) — legal basis: legal obligation.

Security, operations and prevention of misuse or fraud (technical data and logs) — legal basis: legitimate interest.

Analytics and marketing via cookies (technical and usage data) — legal basis: your consent, which you can give or withdraw in the cookie settings.

When you pay, data may be processed by the payment provider you select at checkout. For that part the provider is responsible for its own processing and applies its own privacy policy.

We receive the information required to link a payment to the correct order.

In order to deliver your order, the necessary delivery and contact details are shared with the carrier performing the delivery, such as name, address and contact details for notifications.

The store is operated with the help of external e-commerce and IT services that store and process order data on our behalf so that orders can be registered, handled and followed up.

These providers only receive the data required to perform the service and process it according to our instructions.

Necessary cookies and local storage are used for functions such as the cart, language and currency selection and age confirmation. These are required for the site to work and cannot be switched off.

Analytics cookies are used to understand how the site is used in aggregate. Marketing cookies are used to measure and optimise advertising.

Analytics and marketing are only activated if you consent. You can change your choice at any time in the cookie settings at the bottom of this page.

Data is not kept longer than necessary for each purpose or than required by law. Records subject to accounting obligations are kept for the period required by legislation.

Customer service cases are kept for as long as needed to handle and follow up the case.

Payment providers processing your payment.

Carriers performing the delivery.

E-commerce, IT and hosting providers supplying the platform, storage and analytics.

Public authorities where we are required by law to disclose information.

Some of the providers we use may process data outside the EU/EEA. Where such a transfer takes place it must rely on a valid transfer mechanism under the GDPR.

If you would like to know which providers are involved in a particular processing activity and which mechanism applies, contact us and we will share the information we have.

We use technical and organisational measures to protect personal data, including encrypted transmission over HTTPS, restricted access to order systems and customer service data, and separation of payment data to the payment provider.

No transmission or storage can be guaranteed entirely risk-free, but we work continuously to maintain an appropriate level of protection.

The right to information about how your data is processed — that information is in this policy.

The right of access: you may request a copy of the personal data we process about you.

The right to rectification of inaccurate or incomplete data.

The right to erasure where the data is no longer needed and we are not required to keep it.

The right to restriction of processing and the right to object to processing based on legitimate interest.

The right to data portability for data you have provided that is processed on the basis of contract or consent.

The right to withdraw consent at any time, for example for cookies. Withdrawal does not affect processing already carried out.

If you believe we process your personal data incorrectly, please contact us first. You also have the right to lodge a complaint with a data protection authority. In Sweden the supervisory authority is the Swedish Authority for Privacy Protection (IMY); if you live in another EU/EEA country you may contact the authority there.

The website is not directed at persons under 18, and we do not knowingly collect personal data from children. The age requirement is confirmed when visiting the site.

This policy may be updated as our processing or services change. The current version is always shown on this page together with the date of the latest update.