PEPTIDE PLUS

Last Updated: 27/06/2026

‍

1. Introduction

‍

1.1    This privacy notice (here in after referred toas the “Notice”) explains how P PLUS FZ-LLC, a company incorporated inRas Al Khaimah, United Arab Emirates, with registered number 0000004090065 (“we”,“us”, “our”), collects, uses, shares and protects Personal Datawhen you visit, create an account on, or place an order throughhttps://www.peptideplus.io (hereinafter referred to as the “Website”),or otherwise interact with us.

‍

1.2    We respect your privacy, security, andonline safety, and are committed to processing your Personal Data in compliancewith applicable data protection laws, including, the UAE Personal DataProtection Law (Federal Decree-Law No. 45 of 2021) (hereinafter referred to as the“PDPL”) and Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”).

‍

1.3    Please read this Notice together with our Cookie Policy and our Terms and Conditions,which together explain our practices in full.

‍

1.4    By using the Website, you acknowledge thatwe will process your Personal Data in accordance with this Notice. You are notobliged to provide your Personal Data. If you do not wish to provide it on thebasis set out in this Notice, you should not enter it on the Website orotherwise provide it to us. However, if you do not provide the Personal Data weneed, we may be unable to support your use of the Website, including accepting,processing or fulfilling any purchase of Products.

‍

2. Definitions

‍

2.1    The capitalised terms used in thisNotice have the meanings set out hereunder:

‍

• “PersonalData” - any information relating to an identified or identifiable naturalperson, as defined in Article 4(1) of the GDPR and in the correspondingdefinition under the PDPL.

• “DataController” - the person who determines the purposes and means of theprocessing of Personal Data. We are the Data Controller of your Personal Data.

• “DataProcessor” - a person who processes Personal Data on behalf of the DataController.

• “DataSubject” - the natural person to whom Personal Data relates; in thisNotice, “you” and “your”.

• “Products”- the products we offer for sale on the Website from time to time.

3. The personal data we collect

‍

3.1    Depending on how you interact with us, wecollect the following categories of Personal Data:

‍

• Identityand contact data - name,email address, telephone number, delivery and billing address, and country.

• Accountdata - logincredentials, account settings and preferences, and order history.

• Orderand transaction data - productsordered, order value, order and dispatch status, delivery details, andcorrespondence relating to your orders.

• Paymentdata - paymentis processed by our payment providers; we do not store full card details. Wereceive limited payment-confirmation, fraud-prevention and transaction-statusinformation.

• Verificationand compliance data - theconfirmations you give at checkout (for example, that you are at least 18, thatyou are purchasing for lawful research use only and not for human or animalconsumption, and that purchase and use are lawful in your country), and anyage, identity or end-use information we reasonably request.

• Communicationsand support data - messages,enquiries, chat and support conversations, reviews and other content you sendus.

• Marketingdata - yourmarketing preferences and the consents you have given or withdrawn.

• Technical,usage and cookie data - IPaddress, device and browser information, approximate location, pages andproducts viewed, and similar information collected through cookies and similartechnologies (see clause 7 and our Cookie Policy).

‍

3.2    We do not intentionally collect specialcategories of Personal Data (such as health data) about you, and we ask thatyou do not provide such data to us. We do not knowingly collect Personal Datafrom anyone under 18 (see clause 14).

‍

4. How we collect your Personal Data

‍

4.1    We collect Personal Data: (a) directly fromyou, when you create an account, place an order, complete checkoutconfirmations, contact us, or subscribe to marketing; and (b) automatically,through cookies and similar technologies when you use the Website.

‍

5. How and why we use your PersonalData, and our legal bases

‍

5.1    We use your Personal Data for the followingpurposes, relying on the following legal bases under the GDPR (and on thecorresponding lawful bases under the PDPL):

‍

• Tooperate the Website and your account and to process and fulfil your orders - performance of a contract with you (Article6(1)(b) of the GDPR).

• Totake and confirm payment and prevent payment fraud - performance of a contract (Article6(1)(b) of the GDPR), compliance with a legal obligation (Article 6(1)(c) ofthe GDPR), and our legitimate interests (Article 6(1)(f) of the GDPR).

• Toarrange delivery and handle customs and import requirements - performance of a contract (Article6(1)(b) of the GDPR) and compliance with a legal obligation (Article 6(1)(c) ofthe GDPR).

• Tocarry out age, identity, end-use, sanctions, export-control and othercompliance and verification checks - compliance with a legal obligation (Article6(1)(c) of the GDPR) and our legitimate interests (Article 6(1)(f) of the GDPR).

• Tomanage product safety, quality issues, recalls and corrective action - compliance with a legal obligation (Article6(1)(c) of the GDPR) and our legitimate interests (Article 6(1)(f) of the GDPR).

• Toprovide customer service and respond to your enquiries - performance of a contract (Article6(1)(b) of the GDPR) and our legitimate interests in supporting customers(Article 6(1)(f) of the GDPR).

• Tosend marketing communications - yourconsent in accordance with Article 6(1)(a) of the GDPR.

• Touse cookies and similar technologies - for non-essential cookies, your consentin accordance with Article 6(1)(a) of the GDPR. For strictly-necessary cookies,our legitimate interests in accordance with Article 6(1)(f) of the GDPR.

• Tokeep records and to establish, exercise or defend legal claims - including disputes, investigations, enforcement,etc.: compliance with a legal obligation (Article 6(1)(c) of the GDPR) and ourlegitimate interests in protecting our rights (Article 6(1)(f) of the GDPR).

• Toanalyse and improve the Website, our products and our marketing - where analytics or advertising cookiesare used, your consent (Article 6(1)(a) of the GDPR) and for analysis that doesnot rely on such cookies, our legitimate interests in developing our business(Article 6(1)(f) of the GDPR).

‍

6. Marketing communications

‍

6.1    Where required, we send marketing emailsonly with your consent, which you give by an active opt-in.

‍

6.2    You can withdraw consent or opt out ofmarketing at any time, using the unsubscribe link in any marketing email or bycontacting us at privacy@peptideplus.io. Withdrawing consent does not affectthe lawfulness of processing carried out before withdrawal.

‍

7. Cookies and similartechnologies

‍

7.1    We use cookies and similar technologies.Non-essential cookies (such as analytics, advertising, personalisation,email/CRM, support and reviews cookies) are used only with your consent, whichyou give and can manage through our cookie banner and settings. Essentialcookies (i.e., those necessary for the Website, shopping cart, checkout,payment, security and consent preferences) do not require consent.

‍

7.2    For more details about the cookies we use, theirproviders, purposes and durations, please visit our Cookie Policy.

‍

8. Who we share your Personal Data with

‍

8.1    We share Personal Data, as needed for thepurposes above, with:

• paymentproviders;

• delivery,logistics, pickup-point and order-tracking providers;

• ourwebsite hosting and platform provider and our IT, security and fraud-preventionproviders;

• email,CRM and marketing-automation providers;

• analyticsproviders;

• advertisingproviders;

• customer-support,chat and reviews providers;

• ourprofessional advisers;

• competentauthorities, regulators and law-enforcement bodies, where required or permittedby law; and

• abuyer or successor, in connection with any sale, merger or reorganisation ofour business.

‍

8.2    Our service providers act as our Data Processorsand may only process Personal Data on our instructions.

‍

9. International transfers

‍

9.1    We are based in the United Arab Emirates,and our service providers may process Personal Data in countries outside the EuropeanEconomic Area (hereinafter referred to as the “EEA”).

‍

9.2    Where we transfer Personal Data out of theEEA, we put in place appropriate measures to ensure that your Personal Data iskept secure. Such appropriate measures shall include: (a) transferring to ajurisdiction which the European Commission recognises as providing an adequatelevel of protection for the rights and freedoms of data subjects in connectionwith the processing of their personal data; and (b) transfers pursuant to the EuropeanCommission’s Standard Contractual Clauses.

‍

10. How long we keep your Personal Data

‍

10.1   We keep Personal Data only for as long asnecessary for the purposes for which it was collected, or until you withdrawyour consent. Accordingly, where it is no longer necessary for us to processyour Personal Data, we will delete it sooner or anonymise it.

‍

10.2   Furthermore, we may retain your Personal Dataafter the expiration of the relevant processing purposes in the followinglimited cases:

• Incase that there is a legal obligation under a relevant statutory provision; and

•Incase of any claims against us, for as long as necessary to defend our rightsand legitimate interests before any competent court and any other publicauthority.

‍

11. How we protect your Personal Data

‍

11.1   We use appropriate technical andorganisational measures to protect Personal Data against unauthorised or unlawfulprocessing and against accidental loss, destruction or damage, including accesscontrols, encryption in transit, and use of reputable service providers. Nomethod of transmission or storage is completely secure, but we take steps toprotect your Personal Data and to respond to any suspected data breach asrequired by law.

‍

12. Your rights

‍

12.1   Subject to the conditions and exemptionsunder applicable law, you have the right to:

a. accessyour Personal Data as held by us;

b. receive certain Personal Data in machine-readable format;

c. objectto processing where the lawful basis relies on our legitimate interests,however, please note that we may still process your Personal Data where thereare other relevant lawful bases or where we have compelling grounds to continueprocessing your Personal Data in our interests which are not overridden by yourrights, interests or freedoms;

d. haveinaccurate Personal Data rectified;

e. havecertain Personal Data erased where it is no longer necessary for us to processit or where erasing your Personal Data is required in accordance with a legalobligation; 

f. requestan explanation of the logic involved where we make decisions about you solelythrough automated means;

g. complainto a supervisory authority: in the EEA, your local data protection authority;and in the UAE, the UAE Data Office. We would, however, appreciate the chanceto address your concerns first;

h. withdrawconsent where we have specifically requested your consent to process yourPersonal Data and have no other lawful conditions to rely on; and

i. objectto direct marketing, which can be done by opting out of direct marketing viathe unsubscribe link in the direct marketing communication itself or by sendingan email at privacy@peptideplus.io.  You also have a right to object to anyprofiling to the extent that it relates to direct marketing only.

12.2  If you are unsure about your rights orare concerned about how your Personal Data may be processed, you may contact usat privacy@peptideplus.io.

‍

12.3  To exercise any right, contact us usingthe details in clause 12.2. Please note that whilst we will try to accommodateany request you make in respect of your rights, they are not absolute rights. This means that we may have to refuse your request or may only be able tocomply with it in part.

‍

12.4    Where you make a request in respect of yourrights, we will require proof of identification.  We may also ask that youclarify your request. We will aim to respond to any request within one (1) monthof verifying your identity.  If we receive repeated requests or have reason tobelieve requests are being made unreasonably, we reserve the right not torespond. 

‍

13. Automated decision-making

‍

13.1   We may use automated tools for fraudprevention, security screening and marketing analysis. We do not make decisionsproducing legal or similarly significant effects about you based solely onautomated processing without appropriate safeguards.

‍

14. Children

‍

14.1   The Website and the Products are intended forpersons aged 18 or over. We do not knowingly collect Personal Data fromchildren. If you believe a child has provided us with Personal Data, pleasecontact us and we will delete it.

‍

15. Changes to this Notice

‍

15.1   We may update this Notice from time to time.The “Last updated” date shows when it was last revised, and material changeswill be notified by appropriate means. Please check it periodically.

‍

16. Contact and complaints

‍

16.1   If you have any question or concern aboutthis Notice or how we handle your Personal Data, contact us at privacy@peptideplus.io.

‍