Privacy policy

Last updated 12 October 2026. This policy explains what DefinePeps collects when you use this site or place an order, why, who processes it and how long it is kept.

What we collect

• Order details: name, shipping and billing address, email address, optional phone number, research purpose, the compounds ordered and the Bitcoin transaction reference.
• Account details, if you create one: email address, display name, order history and saved addresses.
• Messages you send through the contact form, with your name and email address.
• Technical data: IP address, browser and pages viewed, held in anonymised site statistics and in server logs for security.

Why we use it

• To fulfil, ship and track your order and to send order and shipping emails.
• To confirm eligibility under the research use policy.
• To answer your messages.
• To keep the site secure and to understand which pages are used, in aggregate.

Who processes it

• WordPress.com (Automattic Inc.) hosts the site and the order database, serves images through its content delivery network and provides anonymised site statistics.
• Blockonomics generates the Bitcoin payment address for each order and reports the payment; it receives the order number and amount, not your address or email.
• The shipping carrier receives your name, address and phone number to deliver the parcel.
• Akismet (Automattic) screens contact-form submissions for spam.
• Exchange rates for the currency display are fetched by the server from a public rate service; no visitor data is sent.

We do not sell personal data and we do not share it with anyone else unless the law requires it.

Cookies

• dp_currency: the display currency you chose.
• dp_verified: that you confirmed the researcher notice.
• dp_cookies_ok: that you dismissed the cookie notice.
• WooCommerce cart and session cookies while you shop.
• WordPress login cookies if you have an account.
• Jetpack statistics cookies, anonymised.

Retention

Order records are kept for as long as tax and accounting law requires. Account data is kept until you ask us to delete the account. Contact messages are kept for 12 months. Statistics are aggregated and not tied to you.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to us through the contact page. If you are in the United Kingdom or the European Union you also have the right to complain to your data protection authority.

Changes

Changes to this policy are posted on this page with a new date.