Privacy notice

[Company legal name], [Registered address], Hong Kong, is the controller of the personal data you give us. We are based in Hong Kong and comply with the Personal Data (Privacy) Ordinance (PDPO). For customers in the EU, the EEA and the UK we also apply the GDPR / UK GDPR to your data.

What we collect and why

• Name, delivery address, e-mail and optional phone: to fulfil and deliver your order (contract).
• Payment status and transaction identifiers: to confirm payment and prevent fraud (legal obligation, legitimate interest). We never see or store card numbers.
• Order history: kept for 10 years for accounting obligations.
• Affiliate partners: name or brand, e-mail, payout details and the commissions earned, to run the programme and pay out (contract). Partners never see buyer identities.

Who we share it with

Our fulfilment partner and carrier (name, address, phone), our payment providers (e-mail, amount), our hosting provider (Frankfurt, Germany), and our e-mail provider. We don't sell personal data.

International transfers

Because we operate from Hong Kong, data from the EU, EEA and UK is processed in Hong Kong as well as at our hosting provider. These transfers are necessary to perform your order (GDPR Art. 49(1)(b)) and are limited to what is needed to take payment, ship and support you.

Cookies and storage

• Strictly necessary: your cart, your research-use confirmation, your cookie choice and, for staff, an admin session.
• Optional: one referral cookie (aps_ref, 30 days) that credits an affiliate partner when you order after following their link. It holds only the partner's code. You can accept or decline it in the cookie notice; if you decline, it is removed and not set again.
• Optional, separate choice: ads and analytics cookies (Google Ads, Meta Pixel) used to measure the performance of our ad campaigns. These are only set if you opt in; declining or withdrawing consent stops them being set and stops any related server-side event for your orders.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing by writing to support@asiapeptide-supply.com. In the EU you can also complain to your data protection authority (in France, the CNIL); in Hong Kong, to the Privacy Commissioner for Personal Data.

California residents (CCPA/CPRA)

If you are a California resident, you additionally have the right to know what personal information we hold about you, to request its deletion or correction, to limit the use of sensitive personal information, and to not be discriminated against for exercising these rights. We do not sell personal information for money. If you opt into the ads/analytics cookie category described above, we do share limited data (a hashed e-mail address and ad-click identifiers) with Google and Meta for cross-context behavioural advertising as defined under the CCPA/CPRA — this only ever happens after that separate opt-in, and declining it, or withdrawing it afterwards, stops the sharing. To opt out of this sharing at any time, decline or change your choice in the cookie notice, or write to support@asiapeptide-supply.com. Other requests under this section can also be sent to support@asiapeptide-supply.com; we verify requests using the order details you provide.