How Peptama collects, uses, and protects your personal data. GDPR-compliant, transparent, no surprises.
This Privacy Policy explains how Peptama ("we", "our", "us") collects, uses, and protects your personal data when you use our website at peptama.com. We follow the General Data Protection Regulation (GDPR) and Dutch privacy law (AVG).
1. Who we are
Peptama
Registered in the Netherlands under KVK number 89311248. Based in Enschede, the Netherlands. Contact: info@peptama.nl
2. What data we collect
We collect personal data in three ways:
Name, email address, shipping address, phone number, and payment details when you place an order or contact us.
IP address, browser type, device information, pages visited, and referring URLs through cookies and analytics tools.
Essential cookies needed to operate the site (cart, session) and optional analytics cookies if you consent. See our Cookie Policy for details.
3. Why we collect it
- To process and ship your orders
- To communicate with you about your order, returns, or support requests
- To comply with legal obligations (tax, accounting, anti-fraud)
- With your consent, to improve our website through analytics
- To send marketing emails only if you have explicitly opted in (you can unsubscribe at any time)
4. Legal basis (GDPR Article 6)
We process your data based on four lawful grounds under the GDPR:
Contract performance
To fulfil orders you place with us.
Legal obligation
Tax records, accounting, and anti-money-laundering rules.
Your consent
Marketing emails and analytics cookies — only with your explicit opt-in.
Legitimate interest
Security, fraud prevention, and protecting our business.
5. How long we keep it
| Data type | Retention period | Reason |
|---|---|---|
| Order data | 7 years | Dutch tax law |
| Account data | Until deletion | Until you delete your account |
| Marketing | Until unsubscribe | Until you unsubscribe |
| Analytics | 14 months | Industry standard |
6. Who we share it with
We never sell your data. We share it only with trusted processors strictly to operate our business and fulfil your orders.
The processors we work with:
Payment processors
Mollie, Stripe, and Shopify Payments handle transactions securely.
Shipping carriers
PostNL, DHL, and DPD deliver your orders across the EU.
Cloud hosting
Shopify hosts our website and stores order data securely.
Tax authorities
Shared only when legally required (e.g. tax filings).
All processors are GDPR-compliant and bound by data processing agreements (DPAs).
7. International transfers
Some processors (e.g. Shopify) may store data outside the EU. They operate under Standard Contractual Clauses approved by the European Commission to ensure equivalent data protection. No data is transferred to countries without an adequate level of protection.
8. Your rights under the GDPR
You have seven legally protected rights over your personal data. We honour all of them within 30 days of a verified request.
Access
Request a copy of all personal data we hold about you.
Rectification
Correct any inaccurate or incomplete data.
Erasure
Request deletion of your data ("right to be forgotten").
Restriction
Limit how we use your data in specific circumstances.
Object
Object to processing based on legitimate interest or marketing.
Portability
Receive your data in a machine-readable format.
Lodge a complaint
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
To exercise any of these rights, email info@peptama.nl with proof of identity. We respond within 30 days as required by the GDPR.
9. Cookies
For full details on the cookies we use, why we use them, and how to manage your preferences, see our dedicated Cookie Policy.
10. Security
- HTTPS encryption on all pages (TLS 1.2+)
- Secure password hashing for any account credentials
- PCI-compliant payment infrastructure via Shopify and our payment partners
- Access controls limiting who can view your data internally
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the latest version. Significant changes will be communicated via email to registered customers or via a banner on the homepage.
Privacy questions or requests?
For data access, deletion, correction requests, or any other privacy concerns, get in touch. We respond to every legitimate request within 30 days as required by the GDPR.
Email: info@peptama.nl
Phone: +31 6 18472855