Prestige Peptides Privacy Policy

Privacy Policy

Effective Date: 27 October 2026

Prestige Peptides (“we”, “us”, or “our”), operating at https://prestigepeptides.co.za/, takes the privacy, confidentiality, and security of your personal information seriously. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information in accordance with:

  • The Protection of Personal Information Act, 2013 (Act No. 4 of 2013) (“POPIA”);
  • The Promotion of Access to Information Act, 2000 (Act No. 2 of 2000) (“PAIA”); and
  • The Electronic Communications and Transactions Act, 2002 (Act No. 25 of 2002) (“ECT Act”).

By accessing our website, registering an account, or placing an order, you acknowledge and consent to the processing of your personal information as set out in this Policy.

1. Responsible Party & Information Officer

For the purposes of POPIA, Prestige Peptides (Gauteng, Republic of South Africa) is the Responsible Party in respect of personal information collected through prestigepeptides.co.za. All privacy enquiries, PAIA/POPIA access requests, or data-protection notices may be directed to our Information Officer at hello@prestigepeptides.co.za.

2. Personal Information We Collect

Depending on how you interact with our store, we collect only the minimum personal information necessary to process laboratory research orders and operate our website securely:

  • Identity & Contact Information: First and last name, institution/company name (optional), billing address, physical street address or nominated PUDO locker location in South Africa, email address, and telephone/mobile number (required for The Courier Guy delivery updates and PUDO locker collection PIN SMS notifications).
  • Order & Transaction Information: Products ordered, order number, ZAR order value, order history, returns/claims correspondence, and checkout compliance acknowledgements (confirming 18+ age and laboratory research-use-only agreement).
  • Payment Confirmation Data: EFT payment status, bank transaction reference, and proof-of-payment confirmations sent to us. We do not collect or store credit/debit card numbers or online banking login credentials on our servers.
  • Technical & Website Usage Data: IP address, browser type, operating system, device category, pages and products viewed, cart/checkout events, referring URL, and cookie identifiers.

3. Medical & Special Personal Information We Do Not Require

Because Prestige Peptides supplies compounds strictly for in vitro laboratory research use and does not provide medical or clinical services, we do not require and do not solicit medical records, diagnoses, prescriptions, or personal health information (which constitute “Special Personal Information” under Section 26 of POPIA). Please do not submit personal medical or health details in order notes, emails, or support messages.

4. How We Collect Your Information

We collect personal information:

  • Directly from you when you place an order, create a customer account, or email hello@prestigepeptides.co.za;
  • Automatically through essential WooCommerce session cookies and Google Analytics when you browse our store; and
  • From our banking and courier partners in connection with confirming EFT payment clearance and parcel delivery status.

5. Purpose & Lawful Basis for Processing (Section 11 of POPIA)

We process your personal information only where we have a lawful basis under Section 11 of POPIA:

  • Performance of a Contract: To accept and process your order, verify EFT payment, pack and dispatch products, generate waybills for door delivery via The Courier Guy or PUDO locker-to-locker fulfilment, send tracking updates and locker collection PINs, and handle defective/damaged item claims.
  • Compliance with Legal Obligations: To maintain accurate financial, tax, and transaction records as required by the South African Revenue Service (SARS) and South African commercial law, and to enforce our laboratory research-use-only compliance rules.
  • Legitimate Interests: To prevent fraudulent transactions, secure our website against unauthorized access, maintain versioned audit logs of buyer research-use acknowledgements, and analyse aggregate store performance.
  • Consent: Where you voluntarily opt in to receive optional product updates or communications. You may withdraw your consent at any time by emailing hello@prestigepeptides.co.za.

6. Cookies & Analytics Technologies

Our website uses two categories of cookies:

  • Strictly Necessary Store Cookies (WooCommerce): Essential cookies (`woocommerce_items_in_cart`, `woocommerce_cart_hash`, `wp_woocommerce_session_*`, and `wc_order_attribution_*`) that keep items in your shopping cart, maintain your session during checkout, and protect store security.
  • Analytics Cookies (Google Analytics 4 via Site Kit): We use Google Tag (`GT-KF8NG8X9`) to measure aggregate visitor traffic, page views, and e-commerce funnel steps (`view_item`, `add_to_cart`, `view_cart`, `begin_checkout`, and `purchase`). Analytics data is used solely to improve store navigation and is never used to identify individual medical or personal profiles. You may block or delete cookies at any time through your browser settings.

7. Who We Share Your Information With

We never sell, rent, or trade your personal information. We share relevant data only with trusted third-party operators strictly necessary to fulfil your order and run our store:

  • Courier & Locker Logistics Partners (The Courier Guy & PUDO): Receive your recipient name, physical street address or nominated PUDO smart locker location, email address, and mobile phone number solely to generate waybills, deliver your parcel to your door or chosen PUDO locker, and send SMS/email tracking notifications and locker collection PINs.
  • Technical, Hosting & Analytics Providers: Our web hosting infrastructure, WordPress/WooCommerce platform tools, and Google Analytics process technical data under strict security and confidentiality obligations.
  • Legal & Regulatory Authorities: Where disclosure is compelled by South African law, subpoena, court order, or a competent regulatory authority.

8. Cross-Border Data Transfers (Section 72 of POPIA)

Certain cloud infrastructure, email, or analytics providers (such as Google) may process technical data on servers located outside the Republic of South Africa. Where cross-border processing occurs, we ensure that the provider is subject to binding data-protection laws or contractual safeguards that provide an adequate level of protection aligned with Section 72 of POPIA.

9. Data Security & Retention

  • Security Safeguards (Section 19 of POPIA): We protect personal information using full-site HTTPS/TLS encryption, hashed account passwords, restricted administrative access controls, and firewall protection. While we take all reasonable technical and organisational precautions, no method of electronic transmission over the internet can be guaranteed 100% secure.
  • Retention Period (Section 14 of POPIA): We retain personal information only for as long as necessary to fulfil the purposes set out in this Policy. Tax, accounting, invoice, and order-acknowledgement records are retained for five (5) years in accordance with South African tax and commercial legislation, after which they are securely deleted or anonymised.

10. Children’s Privacy (18+ Only)

Our website and research products are strictly restricted to qualified adults aged 18 years and older. We do not knowingly collect personal information from anyone under the age of 18.

11. Your Data Protection Rights Under POPIA

Under POPIA, you have the right to:

  • Request Access (Section 23): Request confirmation of whether we hold personal information about you and request a record of that information;
  • Request Correction or Deletion (Section 24): Ask us to correct, update, or delete personal information that is inaccurate, irrelevant, excessive, out of date, or unlawfully obtained;
  • Object to Processing (Section 11(3)): Object on reasonable grounds to the processing of your personal information, or object at any time to processing for direct marketing; and
  • Withdraw Consent: Withdraw consent at any time where processing is based on your consent.

How to Exercise Your Rights: Submit your request in writing to hello@prestigepeptides.co.za. To protect your privacy, we may require reasonable proof of identity before releasing or amending records. We will respond to all valid requests within 15 business days.

12. Complaints to the Information Regulator

If you have any concern about how we handle your personal information, please contact us first at hello@prestigepeptides.co.za so we can resolve it promptly. You also have the statutory right to lodge a complaint with the South African Information Regulator:

  • Website: https://inforegulator.org.za/
  • POPIA Complaints Email: POPIAComplaints@inforegulator.org.za
  • General Enquiries Email: enquiries@inforegulator.org.za
  • Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001