1. Who we are
Starfield Processing Limited, 111 New Union Street, Coventry, England, CV1 2NT, is the controller for the personal data described here. You can reach our data protection contact at support@celsiuspeptides.org.
2. What we collect
- Identity and contact data — your name, email address, telephone number, institution or organisation, and your stated research context.
- Order data — the items you order, delivery address, order history and correspondence about orders.
- Technical data — IP address, browser type and pages visited, where you have accepted analytics cookies.
- We do not collect or store payment card or bank details. Payments are handled by our payment provider, and those details never reach our systems.
- We do not collect special category data, and you should not send us health information.
3. Why we use it, and our lawful basis
- To perform the contract — processing and delivering orders, and handling returns. Lawful basis: performance of a contract.
- To meet legal obligations — retaining transaction and tax records, and responding to lawful requests from regulators such as the MHRA. Lawful basis: legal obligation.
- To record Research Use Only declarations against orders, so that we can demonstrate the basis on which we supplied. Lawful basis: legitimate interests, being our interest in regulatory compliance and defending our position.
- To send newsletters, where you have asked us to. Lawful basis: consent, which you can withdraw at any time.
- To understand how the catalogue is used. Lawful basis: consent, given through the cookie banner.
5. How long we keep it
Order and transaction records are kept for six years from the end of the relevant financial year, to meet HMRC requirements. Research Use Only declarations are kept for the same period, since they evidence the basis of supply. Marketing consents are kept until withdrawn and for two years afterwards as proof of withdrawal. Analytics data is kept for 14 months.
6. Your rights
You have the right to be informed, and rights of access, rectification, erasure, restriction, portability and objection, as well as rights relating to automated decision-making. We do not carry out automated decision-making or profiling.
To exercise a right, contact support@celsiuspeptides.org. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security and transfers
Data is encrypted in transit and at rest, and access is restricted so that each account can read only its own records. Where data is processed outside the UK, the transfer is covered by adequacy regulations or the International Data Transfer Agreement.