Privacy Policy

Last updated: 15/07/2026

1. Introduction

This Privacy Policy explains how Encelade Peptides ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit or make a purchase

We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable French data protection law.

2. What data we collect

We collect the following categories of personal data:

Data you provide directly:

  • Identity and contact details: name, email address, postal address, phone number

  • Order information: products purchased, order history

  • Payment information (processed by our payment provider — we do not store your full card details)

  • Any information you include when contacting us

Data collected automatically:

  • Technical data: IP address, browser type, device type, operating system

  • Usage data: pages visited, time spent, referring website

  • Cookies and similar technologies (see Section 6)

We do not knowingly collect special categories of data (e.g. health data). Please do not send us such information.

3. How and why we use your data

Purpose Legal basis (GDPR Art. 6) Process and deliver your orders Performance of a contract Send order confirmations and service messages Performance of a contract Handle returns, refunds, and customer support Performance of a contract / legal obligation Comply with accounting and tax obligations Legal obligation Send marketing emails (newsletters, offers) Consent Analyse and improve the Site Legitimate interest Prevent fraud and ensure security Legitimate interest Serve and measure advertising (e.g. Meta/Instagram Ads) Consent

You can withdraw consent at any time (see Section 8) without affecting the lawfulness of processing carried out before withdrawal.

4. Who we share your data with

We do not sell your personal data. We share it only with trusted third parties who help us operate the Site, acting as our data processors:

  • Squarespace — website hosting and e-commerce platform

  • [PAYMENT PROVIDER — e.g. Stripe / PayPal] — payment processing

  • [SHIPPING CARRIER — e.g. Colissimo / Mondial Relay] — order delivery

  • [EMAIL MARKETING TOOL — e.g. Squarespace Email Campaigns / Mailchimp] — marketing communications

  • Meta Platforms (Facebook/Instagram) — advertising and audience measurement (if you consent)

  • [ANALYTICS — e.g. Squarespace Analytics / Google Analytics] — traffic analysis

We may also disclose data where required by law or to protect our legal rights.

5. International data transfers

Some of our processors (e.g. Squarespace, Meta) are based outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Cookies

Our Site uses cookies and similar technologies to function, remember your preferences, analyse traffic, and (with your consent) deliver advertising.

When you first visit the Site, a cookie banner lets you accept or refuse non-essential cookies. You can change your choices at any time via [COOKIE SETTINGS LINK] or your browser settings. Essential cookies required for the Site to function do not require consent.

7. How long we keep your data

  • Order and transaction data: retained for the duration of the commercial relationship and up to 10 years to meet French accounting and tax obligations.

  • Account and contact data: retained while your account is active, then deleted or anonymised.

  • Marketing data: retained until you unsubscribe or after 3 years of inactivity.

  • Technical/cookie data: retained for a maximum of 13 months.

8. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten")

  • Restrict or object to processing

  • Data portability — receive your data in a structured, machine-readable format

  • Withdraw consent at any time

  • Define directives on the fate of your data after your death (French law)

To exercise these rights, contact us at bellomatisp@gmail.com . We will respond within one month.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the French supervisory authority:

CNIL — Commission Nationale de l'Informatique et des Libertés 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 www.cnil.fr

9. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Payment transactions are encrypted (SSL/TLS) and handled by PCI-DSS compliant providers.

10. Children

The Site is not intended for children under 15. We do not knowingly collect data from minors without parental consent.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated where required.