Privacy & Cookie Policy
Effective Date: 01 September 2026
At New Wave Peptides, a trading name of New Wave Solutions Limited, your privacy is extremely important to us. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
New Wave Peptides is a trading name of New Wave Solutions Limited, a company registered in England and Wales under company number 16478331.
For the purposes of UK data protection law, New Wave Solutions Limited is the data controller responsible for the personal data collected and processed through the New Wave Peptides website and services.
Contact Details:
Email:
Address: Suite A, 84 James Carter Road, Mildenhall, IP28 7DE, UK
2. What Personal Data We Collect
a) When You Place an Order:
- Full name
- Email address (for communications and sending tracking information)
- Billing and shipping address
- Mobile number (if provided) - (for communications and sending tracking information)
- Order contents and purchase history
- We do not store payment details
Note: We do not store or process your payment card information. All payments are processed securely by third-party providers.
b) When You Use Our Contact Form:
- Name
- Email address
- Message content
- IP address
- Captcha verification data (via Google reCAPTCHA)
c) Technical & Usage Data:
- IP address
- Browser type and version
- Operating system and platform
- Website interaction (via cookies)
3. Lawful Basis for Processing
We process your personal data based on the following lawful grounds:
| Activity | Data | Lawful Basis |
|---|---|---|
| Fulfilling orders | Name, address, email, order contents | Contractual necessity |
| Contact form replies | Name, email, message | Legitimate interest |
| Record keeping (accounting/tax) | Order and delivery data | Legal obligation |
| Spam prevention | IP, reCAPTCHA | Legitimate interest |
| Website improvement | Cookie and usage data | Consent (where required) |
4. How We Use Your Data
- To process and dispatch orders and send tracking information
- To respond to customer service enquiries
- To detect fraud and abuse
- To comply with tax and accounting requirements
- To improve user experience and website functionality
We do not sell, rent, or trade your personal data.
5. Data Retention
- Customer order data: kept for 2 years, then securely deleted
- Contact form data: kept for 3 months
- Cookie data: retained as per expiry, which you can control via your browser
6. Security Measures
- SSL encryption across the entire website
- Restricted access to administrative systems
- Encrypted backups (where applicable)
- Joomla CMS security plugins and firewalls
- Google reCAPTCHA for bot protection
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to provide essential website functionality, remember user preferences, understand how visitors use our website, measure the effectiveness of our advertising and support our online marketing activities.
We may use the following categories of cookies and tracking technologies:
Strictly Necessary Cookies
These cookies are required for the website to function correctly and may include Joomla session cookies, security cookies and cookies necessary for shopping, checkout and other essential website functions. These cookies do not require consent where they are strictly necessary to provide a service requested by you.
Preference and Functionality Cookies
These cookies may be used to remember choices and preferences you make when using our website, such as settings that improve your browsing experience.
Google reCAPTCHA
We use Google reCAPTCHA on certain forms to help protect our website against spam, fraud and automated abuse. Google may process information about your device and interaction with our website when reCAPTCHA is used.
Google Analytics
We use Google Analytics to help us understand how visitors interact with our website. This may include information such as pages visited, interactions with the website, approximate location, device and browser information, traffic sources and other usage information.
Analytics technologies that require consent will only be used where the appropriate consent has been provided through our cookie consent mechanism.
Google Ads, Conversion Tracking and Remarketing
We may use Google Ads conversion tracking and remarketing technologies to measure the effectiveness of our advertising campaigns, understand whether advertisements result in visits or purchases, and, where you have consented, support relevant advertising and remarketing.
These technologies may collect information about your interaction with our website and advertisements and may allow Google to recognise your browser or device across websites and services.
Advertising and remarketing technologies that require consent will only be used where the appropriate consent has been provided.
Managing Your Cookie Preferences
When you first visit our website, you will be given the opportunity to accept or reject non-essential cookies and tracking technologies and, where available, manage your preferences by category.
You can change or withdraw your consent at any time using the cookie settings available on our website. You can also control or delete cookies through your browser settings, although disabling certain cookies may affect the functionality of the website.
Further information about the cookies and tracking technologies used on our website, including their purposes and how long they may remain on your device, is available in our Cookie Policy.
8. Third-Party Data Sharing
We may share your data with the following GDPR-compliant third parties:
- Payment processors: e.g. Fena
- Delivery providers: Royal Mail, Shipstation
- Website hosting and maintenance We use third-party services to host and maintain our website. These providers may have access to your personal data only to the extent necessary to provide hosting, backups, security, or platform support services. All providers are GDPR-compliant and under data processing agreements.
- Google reCAPTCHA for spam protection
Data is only shared where necessary and never for marketing purposes.
9. International Data Transfers
Some services may process data outside the UK or EEA. These providers rely on appropriate safeguards such as the UK Extension to the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs).
10. Your Data Protection Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability (where applicable)
- Withdraw consent (where consent applies)
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise these rights, please contact us at
11. Children’s Privacy
Our website and products are not intended for individuals under the age of 18. We do not knowingly collect data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation or business operations. The last update is noted at the top of the page.
13. Contact Us
If you have any questions or concerns about your privacy, please contact us:
Email:
Address: Suite A, 84 James Carter Road, Mildenhall, IP28 7DE, UK