Privacy Policy

Data Controller

Peptiva, registered in the Czech Republic, is the data controller responsible for the personal data collected through this website. For questions about data processing, contact us at info@peptiva.eu.

Data We Collect

We collect personal data that you provide directly when placing an order or contacting us:

• Name and email address
• Shipping and billing address
• Order history and transaction details
• Communications you send us (e.g. contact form submissions)

We also collect anonymised usage data through PostHog analytics (EU-hosted) for website improvement purposes.

How We Use Your Data

• Processing and fulfilling your orders
• Communicating with you about your orders
• Complying with legal and regulatory obligations
• Improving our website and services through anonymised analytics

Legal Basis

We process your data under the following legal bases as defined in GDPR Article 6:

• Contract performance: to fulfil orders you place with us
• Legitimate interest: to improve our services and communicate relevant information
• Legal obligation: to comply with tax, accounting, and regulatory requirements

Data Sharing

We do not sell your personal data. We share data only with service providers necessary to fulfil our obligations:

• Payment processors (for transaction processing)
• Shipping carriers (for order delivery)
• Hosting providers (Vercel, Medusa Cloud — EU infrastructure)

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and for the period required by applicable laws (typically 5 years for tax and accounting records).

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to data processing
• Request data portability

To exercise any of these rights, please contact us at info@peptiva.eu. We will respond within 30 days.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) or the supervisory authority in your EU member state of residence.

Cookies & Analytics

We use essential cookies required for the website to function. Our analytics provider (PostHog) is EU-hosted and collects anonymised usage data. No third-party advertising cookies are used.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect upon publication on this website. We encourage you to review this page periodically.