Information collected
PEPLAB may collect contact and shipping details, order records, electronic signatures, accepted declarations, marketing choices, support messages, device data and payment references. Complete card details are handled by Stripe, not stored by PEPLAB.
Why it is used
Information is used to operate the catalogue, assess order eligibility, process and fulfil orders, issue refunds, provide tracking, prevent misuse, meet legal duties and respond to support requests.
Optional marketing consent
Marketing consent is optional and is not required to place an order. If selected at checkout, PEPLAB may send marketing and may share the customer name, email address and consent record with Luma Project at lumaproject.co.uk. Product details, payment details and delivery addresses are not shared for marketing. Consent can be withdrawn at any time by contacting PEPLAB or using an unsubscribe method in a marketing message.
Service providers
Stripe processes payment information. Hosting, email delivery and delivery companies may process the minimum information needed to provide their services. They are not permitted to use order data for their own marketing unless the customer has given a separate valid consent.
Retention and security
Order, signature and compliance records are retained only as long as necessary for legal, accounting and operational purposes. Access is restricted to authorised administrators.
Your rights
Subject to applicable UK data protection law, you may request access, correction, deletion, restriction or portability of your personal data and may object to certain processing.
Information still required
The legal entity, controller address, final retention periods, cookie details, complete processor list and ICO information must be added before public trading.
