Encrypted Transactions
SSL/TLS encryption for all laboratory procurement
Data Protection
Privacy & Data Policy
Transparent protocols on how we safeguard your information within the UK scientific community.
Updated: January 2026Jurisdiction: United Kingdom
UK Compliance
Fully aligned with UK GDPR & DPA 2018 standards
Data Sovereignty
You maintain complete control over your research data
1. Data Controller & Compliance
Lucid Peptides operates as the primary data controller. We are committed to maintaining the highest standards of data integrity for our research partners, fully adhering to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information Collection Protocols
To facilitate professional laboratory supply, we collect specific data points categorized as follows:
Date of birth. We collect a date of birth at registration and use it solely to determine whether the customer meets our 18+ eligibility requirement. It is not used for marketing or profiling. The outcome of each age check — whether it passed, and if not the reason — is recorded so the restriction is auditable and so repeated attempts to circumvent it can be identified; those records hold the outcome, not the date of birth itself. They are kept only as long as reasonably necessary for security and compliance purposes, in line with the retention practices described in this policy. We do not collect identity documents and do not carry out independent identity or age verification.
Active Disclosure
- Institutional/Personal Account Details
- Date of Birth (18+ eligibility only)
- Verified Shipping & Logistics Addresses
- Technical Support Correspondences
Automated Telemetry
- Anonymized Usage & Traffic Patterns
- Browser Fingerprinting for Security
- Session State & Cart Authentication
3. Secure Data Processing
Your data is utilized strictly to fulfill orders and enhance the research procurement experience. We use PayPal and Fena to handle payment processing. For Pay by Bank, authentication happens with your bank; we do not receive your bank login credentials.
Note: We do not sell research data or customer lists to third-party marketing firms. Information sharing is limited to essential logistics partners (e.g., UK couriers).
Support Conversations & Uploaded Files
- You can only send us a file when our support team has asked for one — there is no always-on upload. A request stays open for 3 days (with one reminder) and then closes itself.
- Uploaded photos and documents are visible only to our support team, are never made public, and are used solely to resolve your enquiry.
- Every uploaded file carries a scheduled removal date. Files are deleted when the conversation permanently closes, and immediately on a verified erasure request — whichever comes first. Files supporting an active payment dispute are retained until the dispute concludes, then deleted.
- The text of support conversations is retained as business correspondence and is covered by your statutory rights below.
4. Your Statutory Rights
As a UK-based researcher, you have the following rights under the GDPR framework:
Right of Access (SAR)
Right to Rectification
Right to Erasure (Right to be Forgotten)
Right to Restrict Processing
Right to Data Portability
Right to Object
Automated Decision-Making Rights
5. Contact Data Protection Officer
For all data-related inquiries or to exercise your rights, please contact our support team. We aim to respond to all Subject Access Requests (SAR) within 30 days.
Email Support TeamInformation Commissioner's Office (ICO): If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK's supervisory authority at ico.org.uk.