Last updated: 23 October 2026
This Privacy Policy explains how The Peptide Corex Limited, trading as Corex Vitality™ (“we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit corexvitality.com (the “Website”), create an account, place an order or contact us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The Peptide Corex Limited, trading as Corex Vitality™, is the controller of your personal data. This means we decide how and why your personal data is used.
- Registered company name: The Peptide Corex Limited
- Company number: 17461435 (registered in England and Wales)
- Registered office: 5 Brayford Square, London E1 0SG, United Kingdom
- Phone: 020 3432 0641
- WhatsApp Business: 07520 671660
- Email: info@corexvitality.com
- ICO registration number: ZC282346
We are registered with the Information Commissioner’s Office (ICO) as a data controller. We have not appointed a Data Protection Officer. Please send any privacy questions or requests to the contact details above.
Corex Vitality™ is a UK online shop selling research peptides strictly for laboratory research use only. Our products are not for human or veterinary use. Our Website and products are only for people aged 18 or over.
2. The personal data we collect
We may collect the following:
- Identity and contact details: your name, billing address, delivery address, email address and phone number.
- Order details: the products you buy, order value, order history, delivery details, any notes you add to your order, and the PDF invoice we generate for your order.
- Research-use confirmation: your confirmation at checkout that products are purchased for laboratory research use only. This is stored with your order.
- Age confirmation: your confirmation, through our age-verification pop-up, that you are aged 18 or over. We may remember this in your browser (for example, using a cookie or browser storage) so that we do not ask you again on every page.
- Account details: if you create an account (My Account), your login details, saved addresses and order history. Passwords are stored in encrypted (hashed) form.
- Payment information: limited payment details, such as the payment method used and whether payment was received. We do not collect or store your full card details on our Website. Payments are made through the payment provider’s own page or by bank transfer (see section 5).
- Communications: messages you send us through our contact form, by email, by phone or via WhatsApp, and our replies. We also keep copies of emails sent from our Website (such as order confirmations) in an email log.
- Technical data: your IP address, browser type, device information, operating system, pages visited and the date and time of your visit.
- Cookie data: information collected through cookies and similar technologies, depending on your cookie choices (see section 11).
- Marketing preferences: whether you have ticked a box at checkout or when creating an account to receive member offers and research updates, whether you have joined our research updates list through a sign-up form on our Website, and any unsubscribe requests.
- Members area: if you join our free Members Area, your email address and the account details described above, so that we can apply member prices.
We do not intentionally collect special category data (such as health information). Please do not send us this kind of information.
Where we get your data from
Most of the data we hold comes directly from you. Some technical data is collected automatically when you use the Website. We may also receive limited information from the payment service or bank you use (for example, confirmation that a payment was made) and from our delivery carrier (for example, delivery and tracking status).
3. How and why we use your personal data
Under UK GDPR, we must have a lawful basis for using your personal data. The table below sets out what we do and why.
| What we use your data for |
Lawful basis |
| Processing and delivering your order, taking payment, sending order and delivery updates |
Contract (to fulfil our contract with you) |
| Creating and managing your My Account |
Contract |
| Handling issues with orders, returns, refunds and out-of-stock items |
Contract |
| Sending you a secure payment link by email when you choose “Request Payment Link” |
Contract |
| Recording your research-use confirmation with your order |
Legitimate interests (making sure our products are supplied only for lawful laboratory research use, and protecting our business) and, where relevant, legal obligation |
| Checking that customers are aged 18 or over |
Legitimate interests (making sure we only sell to adults) |
| Keeping accounting and tax records |
Legal obligation |
| Replying to enquiries by contact form, email, phone or WhatsApp |
Legitimate interests (responding to customers), or contract if your enquiry relates to an order |
| Preventing fraud and keeping the Website and payments secure |
Legitimate interests (protecting our business and customers) and legal obligation where applicable |
| Running, maintaining, backing up and improving the Website, including keeping logs of emails sent by the Website |
Legitimate interests (running a secure, reliable online shop) |
| Monitoring Website performance and search visibility, for example through Google Search Console, which reports on how our pages appear in Google search and does not identify individual visitors to us |
Legitimate interests |
| Setting strictly necessary cookies |
Legitimate interests (these are needed for the Website to work and do not need consent) |
| Setting non-essential cookies (preferences, statistics, marketing) |
Consent |
| Sending marketing emails and research updates about our products and offers |
Consent (the tick box at checkout or account registration, or a sign-up form), or for existing customers, legitimate interests under the “soft opt-in” rules, with an easy way to unsubscribe in every message |
| Inviting customers to review us, and handling feedback |
Legitimate interests (collecting feedback and building trust in our business) |
| Bringing, defending or managing legal claims |
Legitimate interests |
Where we rely on legitimate interests, we have considered that our interests are not overridden by your rights. You can ask us for more information about this.
If you do not give us the information needed to process an order (for example, your name, address or research-use confirmation), we will not be able to complete your order.
We do not use your personal data for automated decision-making that has legal or similarly significant effects on you. Payment providers and banks may run their own automated fraud checks on payments, under their own privacy notices.
4. Who we share your personal data with
We do not sell your personal data. We share it only where necessary with the following:
- Our hosting provider, Hostinger – hosts the Website and its data, and may keep server backups.
- Our website developer – builds and maintains our Website and may access it, and the data stored on it, to provide that service.
- Payment providers and banks – such as PayPal and Revolut, or your bank if you pay by bank transfer. They receive the details needed to take and confirm your payment, and handle them under their own privacy notices. They may act as independent controllers, for example for fraud prevention and their own legal duties.
- Our email provider, Namecheap (PrivateEmail) – runs our business email (including info@corexvitality.com), which is also used by the Website to send order emails. Namecheap also registers our domain name.
- Email delivery and logging tools on our Website – such as the WP Mail SMTP plugin, which sends order emails through our email provider and may keep a log of emails sent.
- Email marketing provider – if you join our research updates list, we may use an email marketing service to send our emails. If we start using one, it will act on our instructions and we will name it in this policy.
- WhatsApp (Meta) – if you contact us through the chat button on our Website or by WhatsApp, your messages are handled through WhatsApp Business, and WhatsApp’s own terms and privacy policy also apply.
- Cookie consent tool (Complianz) – stores your cookie choices in your browser.
- TrustedSite – if you accept statistics cookies, our Website loads the TrustedSite trust badge from TrustedSite’s servers (cdn.ywxi.net and trustedsite.com). TrustedSite receives your IP address, browser and device details and the page you are viewing, and sets a cookie and a browser-storage item (trustedsite_visit) so that visits can be counted. If you click the badge, TrustedSite shows a verification window that may ask you to rate our Website and may use its own analytics tools. We do not load TrustedSite if you decline statistics cookies. You can change your choice at any time through the cookie settings link. TrustedSite’s own privacy policy applies to the data it collects: https://www.trustedsite.com/privacy
- Delivery carriers, such as Royal Mail – receive your name, delivery address and, where needed, your email address or phone number so they can deliver your order and send tracking updates.
- Professional advisers – such as our accountants, lawyers and insurers, where needed.
- Authorities – HMRC, the police, regulators or other public bodies where we are required by law, or where needed to prevent crime or protect our rights.
- A buyer of our business – if we sell or restructure our business, personal data may transfer to the new owner, who will be bound by this policy.
Our service providers (processors) may only use your data on our instructions and must keep it secure.
5. Payments
We do not take card details on our Website. When you place an order you choose how to pay: Request Payment Link, which is the default, or Direct bank transfer. If you ask for a payment link, we will email you a secure link to pay through a payment provider such as PayPal or Revolut. If you pay by bank transfer, we give you our bank details and your bank processes the payment. Your order stays “on hold” until we receive payment. We never see or store your full card number, expiry date or security code, because you enter them on the payment provider’s own page.
If we switch on card or wallet payments directly at checkout in future, we will update this policy first.
6. International transfers
Some of our service providers, including payment providers, WhatsApp/Meta, TrustedSite, our hosting provider and our email provider, may process your personal data outside the UK, for example in the United States or the European Economic Area.
Where your data is transferred outside the UK, we make sure it is protected by an appropriate safeguard, such as:
- a transfer to a country the UK has recognised as providing adequate protection (for example, the EEA, or US organisations certified under the UK Extension to the EU-US Data Privacy Framework); or
- the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
You can contact us for more information about the safeguards we use.
7. How long we keep your personal data
We keep personal data only as long as we need it for the purposes described in this policy.
| Type of data |
How long we keep it |
| Orders, invoices and payment records (including your research-use confirmation) |
6 years from the end of the financial year the order was placed in, to meet HMRC and company law requirements |
| My Account details |
While your account is active. We may delete accounts that have been inactive for a long time, and you can ask us to close your account at any time |
| Contact form, email, phone and WhatsApp enquiries not linked to an order |
12 months after our last contact with you |
| Website email log (copies of sent emails) |
Up to 12 months, unless the email relates to an order, in which case it is kept with the order records |
| Server and security logs (IP and device data) |
Up to 90 days, or as set by our hosting provider |
| Website backups |
Kept on a rolling basis, then overwritten or deleted |
| Marketing preferences and unsubscribe records |
Until you unsubscribe, then a suppression record so we do not contact you again |
| Cookie consent records |
As set out in our Cookie Policy |
We may keep data for longer if it is needed for a legal claim or required by law. When data is no longer needed, we delete it securely or anonymise it.
8. How we keep your data secure
We use appropriate technical and organisational measures to protect your personal data, including:
- encrypted (HTTPS/SSL) connections on our Website;
- using reputable payment providers, with no card details stored on our Website;
- restricting access to personal data to people who need it, including our Website developer;
- strong passwords and access controls on our systems;
- keeping our Website software, plugins and themes up to date; and
- regular backups.
No method of sending data over the internet is completely secure. If we become aware of a personal data breach that is likely to put your rights at risk, we will tell you and the ICO where required by law.
9. Your rights
Under UK data protection law, you have the right to:
- Access – ask for a copy of the personal data we hold about you.
- Rectification – ask us to correct data that is wrong or incomplete.
- Erasure – ask us to delete your data, in certain circumstances.
- Restriction – ask us to limit how we use your data, in certain circumstances.
- Data portability – ask for data you gave us in a commonly used, machine-readable format, or ask us to send it to another organisation, where processing is based on contract or consent and carried out by automated means.
- Object – object to our use of your data where we rely on legitimate interests. You can object to direct marketing at any time, and we will stop.
- Withdraw consent – where we rely on consent (for example, for non-essential cookies or marketing), you can withdraw it at any time. This does not affect anything we did before you withdrew it.
Some rights have limits. For example, we must keep order and tax records for 6 years even if you ask us to delete them.
How to use your rights
Email us at info@corexvitality.com or write to us at the address in section 1. We may need to check your identity before we act. We will reply within one month, or tell you if we need longer (up to two further months for complex requests). There is normally no charge.
10. Marketing emails and research updates
We only send marketing emails, such as member offers and research updates, if you have agreed to receive them or if you are an existing customer and the “soft opt-in” rules allow it.
- Consent: when you join our research updates list, we use double opt-in. We send you an email asking you to confirm your address, and you are only added to the list once you confirm. Any tick box for marketing at checkout or on account registration is not pre-ticked.
- Unsubscribe at any time: every marketing email has an unsubscribe link. You can also email info@corexvitality.com. We will stop sending marketing straight away and keep only a suppression record.
- Unsubscribing from marketing does not stop service emails about your orders, such as confirmations, payment links and delivery updates.
- We never sell or rent your email address.
11. Cookies
Our Website uses cookies and similar technologies. Strictly necessary cookies are needed for the Website to work, for example to run your basket, checkout and account login. We use other cookies (functional, preferences, statistics and marketing) only with your consent, which you can give or refuse through our cookie banner.
You can change your choices at any time through the cookie settings link on our Website. For full details of the cookies we use, please see our Cookie Policy.
12. Customers buying for research use
Our products are sold for laboratory research use only and are not for human or veterinary use. If you buy from us, we ask you to confirm at checkout that you are buying for laboratory research use, and we keep that confirmation with your order record (see sections 2, 3 and 7). We may contact you about an order, or decline or cancel an order, if we have reason to think a product will not be used for lawful research purposes. We may share order information with regulators or other authorities where the law requires it.
13. Children
Our Website and products are only for adults aged 18 or over. We use an age-verification pop-up and do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has given us personal data, please contact us and we will delete it.
14. Links to other websites
Our Website may contain links to other websites and services, such as WhatsApp and online business directories. We are not responsible for their privacy practices, so please read their privacy policies.
15. Complaints
If you have a concern about how we use your personal data, please contact us first so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
16. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be on this page, with the “Last updated” date shown at the top. If we make significant changes, we will tell you where appropriate, for example by email or a notice on our Website.
17. Contact us
The Peptide Corex Limited, trading as Corex Vitality™
5 Brayford Square, London E1 0SG, United Kingdom
Phone: 020 3432 0641
WhatsApp Business: 07520 671660
Email: info@corexvitality.com
ICO registration number: ZC282346
