Privacy

This notice explains what we do with personal data on hplpeptides.ie, and the rights you have over it. It is written to the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018.

Who is responsible for your data

The data controller is HIM CONSULTING BG EOOD, a company registered in Bulgaria, company number (UIC) 207598214. For anything to do with your data, write to lab@hplpeptides.ie.

What we collect

• When you order: your name, email address, delivery address, phone number if you give one, what you bought, and the confirmation that you are buying for laboratory research use only — including the date and time you gave it and the IP address it came from.
• When you pay: we do not see or store your card details. Payment is handled by our payment provider; we receive only the result of the transaction and a reference.
• If you open an account: your email address, password (stored hashed, never in readable form) and saved addresses.
• If you contact us: whatever you put in the message, and your email address so we can reply.
• If you join the research list: your email address, and the fact that you opted in.
• Automatically: a session identifier so your basket persists between pages. See the Cookies page.

Why we hold it, and on what legal basis

• To take and fulfil your order — performance of our contract with you.
• To keep tax and accounting records — legal obligation under Bulgarian tax law.
• To record your research-use confirmation — legal obligation, and our legitimate interest in being able to show who we sold to and on what basis.
• To answer your messages — our legitimate interest in responding to people who contact us.
• To email you about new lots and certificates — your consent, given by ticking the box. Never a condition of ordering, and you can withdraw it at any time.
• To keep the site secure and working — our legitimate interest in running the site safely.

We do not profile you, we do not make automated decisions about you, and we do not sell your data to anyone.

How long we keep it

• Order and invoice records, including the research-use confirmation: for the period Bulgarian tax and accounting law requires, counted from the end of the accounting period they fall in. We cannot delete these earlier on request.
• Account details: until you close the account.
• Messages you send us: up to two years, then deleted.
• Research list: until you unsubscribe.

Who else sees it

Only those who need it to get your order to you or to keep the business running: our payment provider, our delivery carrier, our web host, our email provider, and our accountants. Each acts on our instructions under a written agreement, except our payment provider and accountants, who are controllers in their own right for their own purposes.

We will also disclose data where the law requires it, or to establish or defend a legal claim.

Where your data is held

Your data is stored within the European Economic Area. If a provider we use transfers data outside the EEA, we rely on an adequacy decision or on the European Commission's standard contractual clauses. Ask us at lab@hplpeptides.ie and we will tell you which applies.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to another provider in a machine-readable form. You can object to processing we carry out on the basis of legitimate interests. Where we rely on your consent, you can withdraw it at any time — which does not affect anything we did before you withdrew it.

Write to lab@hplpeptides.ie. We reply within one month. There is no charge. The one limit is above: records we are required to keep for tax purposes cannot be deleted before their retention period ends.

Complaints

If you are not satisfied with how we have handled your data, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie. We would rather you told us first at lab@hplpeptides.ie so we can put it right.

Changes to this notice

If we change how we handle personal data we update this page. Where the change is significant we will tell people on the research list directly.