Privacy policy
Last updated: 9 October 2026
Who is responsible for your data
Nova Peptides
Contact for data protection matters: info.novaresearchpept@proton.me
What we collect
When you place an order: name, delivery address, email address, order contents, and the payment reference from our payment processor, NOWPayments. We do not ask for a phone number.
When you contact us: your name, email address and the content of your message. Messages sent through the contact form are delivered to our email inbox and are not stored on the website.
When you visit the site: technical data needed to serve and secure the website, including IP address and browser information in our server logs.
We never receive or store card details. Payment is settled in cryptocurrency. If you pay by card, you buy the cryptocurrency with your card in an app where you have your own account, such as Revolut, or your own crypto wallet (for example MetaMask) topped up with a card. That happens between you and that app, under its own terms and privacy policy. It is not our processor, and we send it none of your data.
Why we use it, and on what legal basis
- Processing and delivering your order — Performance of a contract
- Sending payment instructions and order confirmations — Performance of a contract
- Answering your questions — Legitimate interest in responding to enquiries
- Keeping accounting records — Legal obligation
- Preventing fraud and securing the website — Legitimate interest in protecting the business
We do not use your data for marketing and we do not sell it to anyone.
Who we share it with
- NOWPayments, our payment processor, which processes the cryptocurrency payment. It receives the order amount and the order number, not your name, email address or delivery address.
- Our shipping carrier, which receives the name and address needed to deliver the parcel.
- Telegram Messenger, which we use for internal order handling: to pass your order to our shipping carrier, we send your name, shipping address and the products you ordered through it.
- Resend, our email provider, which delivers our emails to you, such as payment instructions and order confirmations, and passes messages from the contact form on to our inbox.
- FlokiNET, our hosting provider, which operates the server the website and its database run on.
We share data with authorities only where we are legally required to do so.
Where your data is stored
Our website and database are operated by our hosting provider, FlokiNET. Where any provider processes personal data outside the European Union, we rely on the safeguards required by the GDPR for such transfers.
How long we keep it
We keep as little as we can for as long as we must.
- Delivery address: deleted automatically 90 days after dispatch.
- Order record (order number, date, amount, items): kept for the period required by accounting law.
- Contact form messages: delivered to our email inbox. We are not storing them on the website. They are deleted from the inbox within 12 months.
- Server logs: kept for 7 days for security purposes, then deleted.
Your rights
Under the GDPR you have the right to request access to your personal data, to have it corrected, to have it erased where we have no continuing obligation to keep it, to restrict or object to our processing, and to receive your data in a portable format.
To exercise any of these rights, email info.novaresearchpept@proton.me. We respond within one month.
If you are not satisfied with how we have handled your data you may complain to your national data protection authority.
Cookies and browser storage
We do not use advertising or analytics cookies, and we do not track you across other websites.
Your basket, your age confirmation and the display currency you choose are kept in your own browser's local storage, not in cookies. So are the order numbers of orders you place in this browser, and a note of which of them you chose to pay by card, so that the basket can empty itself once an order is paid and your order page can show the card payment steps. They are stored on your device, are never sent to us as a cookie, and you can clear them at any time through your browser settings.
The only cookie this website sets is a session cookie used to keep an administrator signed in to the admin area. It is not set for ordinary visitors.
We use Umami, a self-hosted and cookieless analytics tool, to count visits and see which pages and referring websites people come from. No cookies are set, IP addresses are not stored, and the data never leaves our own server or reaches any third party.