Privacy Policy

Drpeps trading as DR PEPS, [Your registered business address, United Kingdom], is the data controller. Contact: doctorpeps27@outlook.com.

• Identity & contact: name, email, phone number, delivery and billing address.
• Order data: products bought, order history, age and research-use confirmations.
• Payment: processed securely by our payment provider — we do not store full card details.
• Technical: IP address, browser type and site usage via cookies (see our Cookie Policy).
• Communications: messages you send us.

• To process and deliver orders (contract).
• To verify age and research purpose, prevent fraud and comply with law (legal obligation / legitimate interests).
• To answer enquiries and provide customer service (legitimate interests).
• To send marketing, only where you have opted in (consent — you can withdraw at any time).

We share data only with service providers who help us run the store — such as hosting, payment processors and couriers — and with authorities where required by law. We never sell your data.

Where providers process data outside the UK, we ensure appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

Order and accounting records are kept for 6 years to meet tax obligations. Other data is kept only as long as needed for the purposes above.

You have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent. Email doctorpeps27@outlook.com to make a request. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

We use appropriate technical and organisational measures to protect your data, including encrypted connections.

We may update this policy. The latest version will always be on this page.