Privacy Policy

Effective dateAugust 2026
Governing lawEngland & Wales
RegulationUK GDPR / Data Protection Act 2018

This Privacy Policy explains how Peptide Optimal Ltd collects, uses, stores, and protects your personal data when you visit rise-labs.co.uk or place an order with us. We take your privacy seriously and handle your data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Data Controller

Peptide Optimal Ltd
Company Number: 17303483
Endon Quarry, Windmill Lane, Macclesfield, SK10 5AZ
Email: admin@rise-labs.co.uk

1. What data we collect

When you visit our website or place an order, we may collect the following categories of personal data:

  • Identity data — your name as provided at checkout
  • Contact data — email address and delivery address
  • Transaction data — details of orders placed, payment confirmation references, and order history
  • Technical data — IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools
  • Communications data — any correspondence you send us via email or contact form
  • Research acknowledgement data — your confirmation at checkout that you are purchasing products for legitimate research purposes

We do not collect payment card details. All payments are processed via open banking bank transfer. No card data passes through our systems.

 2. How we use your data

We use your personal data for the following purposes and on the following legal bases:

  • Processing and fulfilling your order — contractual necessity
  • Sending order confirmation and dispatch notifications — contractual necessity
  • Maintaining records of research use acknowledgements — legal obligation and legitimate interest
  • Responding to customer service enquiries — contractual necessity and legitimate interest
  • Sending email marketing communications — consent only. You may opt out at any time.
  • Analysing website traffic and improving our service — legitimate interest
  • Complying with legal and regulatory obligations — legal obligation
3. How we share your data

We do not sell your personal data to third parties. We share your data only with the following categories of service providers who process it on our behalf:

  • Delivery partners — Royal Mail, to enable order fulfilment and tracking
  • Website and hosting providers — to operate and maintain rise-labs.co.uk
  • Email marketing platforms — to send communications where you have consented
  • Analytics providers — to understand how our website is used

All third-party service providers are required to process your data in accordance with UK GDPR and are subject to appropriate data processing agreements.

4. Data retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements.

  • Order and transaction records are retained for 7 years in accordance with HMRC requirements
  • Research use acknowledgement records are retained for 7 years
  • Email marketing data is retained until you withdraw consent
  • Website analytics data is retained for 26 months
5. Your rights

Under UK GDPR you have the following rights regarding your personal data:

  • The right to access your personal data
  • The right to correct inaccurate data
  • The right to erasure in certain circumstances
  • The right to restrict processing in certain circumstances
  • The right to data portability
  • The right to object to processing based on legitimate interest
  • The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at admin@rise-labs.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

6. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL encryption for all data in transit. Access to personal data is restricted to authorised personnel only.

7. International transfers

We do not routinely transfer your personal data outside the United Kingdom. Where any transfer is necessary, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of rise-labs.co.uk following any changes constitutes your acceptance of the updated policy.

9. Contact

For any questions regarding this Privacy Policy or how we handle your data, contact us at admin@rise-labs.co.uk or by post at Peptide Optimal Ltd, Endon Quarry, Windmill Lane, Macclesfield, SK10 5AZ.