Privacy Policy
Overview
Atlas BodyLab ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website atlasbodylab.com or place an order with us.
We operate as a supplier of research-grade peptides and compounds intended strictly for laboratory and scientific research purposes. This policy applies to all information collected through our Site, whether you are a visitor, registered account holder, or purchasing customer.
We process personal data only to the extent necessary to fulfil your orders, maintain our Site, and comply with applicable law. We do not use your data for unsolicited marketing without your explicit consent, and we never sell your information to third parties.
Data We Collect
We collect information in the following categories depending on how you interact with us:
Full name, username or similar identifier, and title where provided.
Email address, billing address, shipping address, and phone number.
Details of products ordered, payment method type, order history, and invoices.
IP address, browser type and version, time zone, operating system, and device identifiers.
Information about how you use our Site, including pages visited, referral sources, and session duration.
Messages, enquiries, and correspondence you send to us via email or contact forms.
We do not intentionally collect sensitive personal data (such as health information, racial or ethnic origin, or financial account credentials). Our checkout process uses third-party payment processors and we do not store full payment card numbers on our servers.
How We Collect Data
We collect data through the following means:
- Direct interactions: Data you provide when creating an account, placing an order, subscribing to communications, or contacting us.
- Automated technologies: As you interact with our Site, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar technologies.
- Third parties: We may receive data from analytics providers, payment processors, shipping carriers, and advertising networks operating on our behalf.
How We Use Your Data
We use your personal data only where we have a lawful basis to do so. The purposes for which we process your data include:
- Processing and fulfilling your orders, including payment verification and shipping coordination.
- Managing your account and providing customer support.
- Sending order confirmations, dispatch notifications, and service-related communications.
- Complying with legal and regulatory obligations, including record-keeping and fraud prevention.
- Improving our Site and services through analytics and user feedback.
- Sending marketing communications where you have given explicit consent, which you may withdraw at any time.
- Enforcing our Terms and Conditions and other contractual agreements.
We process your data under one or more of the following lawful bases: performance of a contract (order fulfilment), compliance with a legal obligation, our legitimate business interests, or your explicit consent. Where we rely on consent, you may withdraw it at any time without affecting prior processing.
Sharing Your Data
We do not sell, rent, or trade your personal data. We may share your information only with the following categories of recipients, strictly to fulfil the purposes outlined in this Policy:
- Payment processors: To securely process transactions (e.g. Stripe, PayPal). These providers operate under their own privacy policies and are PCI-DSS compliant.
- Shipping and logistics partners: To dispatch and track your orders, including courier services and customs brokers where applicable.
- IT and platform providers: Hosting, e-commerce, and email service providers who process data on our behalf under contractual data processing agreements.
- Analytics providers: Such as Google Analytics, which collect anonymised usage data to help us improve our Site.
- Law enforcement or regulators: Where required by applicable law, court order, or to protect the rights, property, or safety of Atlas BodyLab or others.
All third-party processors who handle your personal data on our behalf are bound by data processing agreements and are required to implement appropriate security measures consistent with applicable data protection law.
Cookies & Tracking
Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyse Site traffic, and support our marketing efforts. Cookies are small text files stored on your device.
- Strictly necessary cookies: Required for the Site to function, including session management, shopping cart functionality, and security. These cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with our Site (e.g. Google Analytics). These are set only with your consent.
- Preference cookies: Remember your settings and preferences across sessions.
- Marketing cookies: Used to deliver relevant advertising where you have consented. You may opt out at any time via your browser settings or our cookie consent tool.
You can control or delete cookies through your browser settings at any time. Disabling non-essential cookies will not affect the core functionality of the Site.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
- Order and transaction records are retained for a minimum of 7 years to comply with tax and accounting regulations.
- Account data is retained for the duration of your account's active status and for a reasonable period thereafter.
- Marketing consent records are retained for as long as you remain subscribed, plus a period following unsubscription for compliance purposes.
- Technical and usage data collected via cookies is generally retained for no longer than 24 months.
Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data.
Security
We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- Secure, access-controlled hosting infrastructure with regular security audits.
- Third-party payment processing that is fully PCI-DSS compliant; we do not store card data on our servers.
- Regular staff training on data protection and information security best practices.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any relevant supervisory authorities as required by applicable law, without undue delay.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, please contact us using the details in Section 14.
We will respond to all verified requests within 30 days. We may need to verify your identity before processing your request. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.
Children's Privacy
Our Site and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to delete such data.
International Transfers
Atlas BodyLab operates globally and your data may be transferred to, stored, or processed in countries outside your own jurisdiction, including countries that may have different data protection standards.
Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by relevant data protection authorities, or we transfer to countries recognised as providing an adequate level of data protection.
Third-Party Links
Our Site may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.
We encourage you to read the privacy notice of every website you visit when you leave our Site.
Changes to This Policy
We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting to the Site, with the revised date updated at the top of this page.
We will notify registered users of material changes via email or prominent on-site notice. Your continued use of the Site following any changes constitutes your acceptance of the updated Policy.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Privacy team:
Atlas BodyLab — Privacy Team
We aim to respond to all privacy enquiries within 30 days.