Privacy Policy

Privacy Policy

This Policy on the Use and Protection of Personal Data describes the basic terms of use of the Peptology online shop, as well as the way in which users' personal data are collected, used, stored and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable legislation on e-commerce and consumer protection.

The Peptology online shop is operated by the company ONLAYN SHOP EKSPRES EOOD, a single-member limited liability company, registered in the Republic of Bulgaria.

I. Data Controller and Contact Details

• Controller / Website Operator: ONLAYN SHOP EKSPRES EOOD
• Trade name: Peptology
• Legal form: Single-member limited liability company (EOOD)
• UIC/PIC (Company registration number): 208538633
• VAT number: BG208538633
• Registered office and management address: Bulgaria, Sofia 1326, Vrabnitsa district, Obelya 2, block 259, entrance B, floor 3, apartment 5
• Contact email: support@peptology.bg

For questions about orders, the use of the Website, complaints or the exercise of your rights in relation to personal data, you can contact us using the details above.

II. General Terms of Use of the Website

Use of the Website and the submission of an order presuppose full and unreserved acceptance of the General Terms, this Policy and any other policy published on the Website. The user declares that:

• they have reached the age of 18;
• they have full legal capacity;
• they provide true, accurate and complete information when submitting an order;
• they use the Website in accordance with the applicable legislation and the published terms.

ONLAYN SHOP EKSPRES EOOD reserves the right to modify the content, functions, prices, policies and terms of use of the Website at any time. Changes apply from the moment they are published on the Website, unless stated otherwise.

III. Special Information on the Products

The products offered through the Peptology Website are intended exclusively for scientific and research purposes and for in vitro applications in a laboratory environment. The products:

• are not medicinal products;
• are not foods or food supplements;
• are not cosmetic products;
• are not medical devices;
• are not intended for use, intake or administration to humans or animals;
• are not intended for the diagnosis, treatment, prevention or relief of any disease, condition or symptom.

By completing the order, the user confirms that they have reached the age of 18, accepts the General Terms and orders the products exclusively for scientific and research purposes.

IV. Protection of Personal Data

ONLAYN SHOP EKSPRES EOOD, as the controller of the Peptology Website, processes users' personal data only to the extent necessary for the operation of the Website, the processing of orders, the provision of support and compliance with legal obligations.

1. Categories of personal data

When using the Website or submitting an order, the following data may be collected and processed:

• first name and surname;
• delivery address;
• telephone number;
• email address;
• order details;
• invoicing details, where required;
• payment details, depending on the payment method chosen;
• technical data, such as IP address, device type, browser and cookies.

2. Purposes of processing

Personal data are processed for the following purposes:

• creation and management of orders;
• dispatch and delivery of products;
• communication with the user about the order;
• issuing invoices and keeping accounting records;
• handling complaints, returns and support requests;
• improving the operation and security of the Website;
• sending informational or promotional messages, only where there is relevant consent;
• compliance with legal obligations.

3. Legal basis for processing

Personal data are processed on the basis of the following legal bases:

• Article 6(1)(b) GDPR — processing necessary for the performance of a contract or for taking steps prior to entering into a contract;
• Article 6(1)(c) GDPR — compliance with legal obligations, such as accounting and tax obligations;
• Article 6(1)(a) GDPR — the user's consent, in particular for informational data, commercial communication and non-essential cookies;
• Article 6(1)(f) GDPR — legitimate interest, such as protection against fraud, the security of the Website and the management of legitimate rights.

4. Principles of processing

The processing of personal data is carried out in accordance with the basic principles of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy and keeping up to date; storage limitation; integrity and confidentiality; accountability of the controller.

5. Retention period

Personal data are retained only for as long as necessary for the purposes for which they were collected. Indicatively:

• order data are retained for as long as required to fulfil the order and serve the customer;
• accounting and tax data are retained for the period required by the applicable legislation;
• marketing data are retained until the user withdraws consent;
• technical data and cookies are retained in accordance with the Cookie Policy and the applicable rules.
• the technical logs of the card payment page (e.g. when the payment form loaded, operating system and browser type) are linked to the order, do not contain card details, IP address or form content, and are deleted automatically after 180 days.

6. Disclosure of data to third parties

Personal data may be disclosed only when this is necessary for the fulfilment of an order, the operation of the Website or compliance with legal obligations. Data may be disclosed to:

• courier companies and transport services;
• payment service providers;
• accountants and tax advisers;
• hosting, technical support and software providers;
• competent public authorities, when required by law.

ONLAYN SHOP EKSPRES EOOD does not sell personal data to third parties.

V. User Rights

Under the GDPR, the user has the following rights:

• right of access to their personal data;
• right to rectification of inaccurate or incomplete data;
• right to erasure (“right to be forgotten”), where applicable;
• right to restriction of processing;
• right to object to processing;
• right to data portability;
• right to withdraw consent at any time, where processing is based on consent;
• right to lodge a complaint with the competent supervisory authority.

To exercise your rights you can contact us at: support@peptology.bg.

VI. Supervisory Authority

For matters concerning the protection of personal data, the user has the right to contact the competent supervisory authority.

For Bulgaria, the competent authority is:

• Commission for Personal Data Protection – КЗЛД
• Address: Sofia 1592, Bulgaria, “Prof. Tsvetan Lazarov” Blvd. 2
• Website: www.cpdp.bg

If the user is in Cyprus, they may also contact the competent Cypriot authority:

• Office of the Commissioner for Personal Data Protection
• Address: 1 Iasonos Street, 1082 Nicosia (P.O. Box 23378, 1682 Nicosia)
• Website: www.dataprotection.gov.cy

VII. Cookie Policy

The Website uses cookies and similar technologies for its proper operation, to improve the user experience, to analyse traffic and, where consent is given, for marketing purposes. Cookies may be strictly necessary, functional, analytical/statistical and advertising/marketing. Non-essential cookies are used only if the user has given their consent through the relevant consent mechanism. For more information, see the Cookie Policy of the Website.

VIII. Intellectual Property

All trademarks, logos, texts, images, graphics, photographs, product descriptions, design elements and other content of the Website are the intellectual or industrial property of ONLAYN SHOP EKSPRES EOOD or are lawfully used by it. Copying, reproduction, distribution, modification, publication or commercial use of any content without prior written permission is prohibited.

IX. Limitation of Liability

ONLAYN SHOP EKSPRES EOOD makes every effort to ensure that the information on the Website is accurate, up to date and available. However, the company does not guarantee that the Website will operate uninterrupted or free of technical errors and is not liable for temporary interruptions, technical problems or errors that are not due to negligence or gross negligence. ONLAYN SHOP EKSPRES EOOD is not liable for damage arising from unauthorised, unlawful use of the Website or the products, or use contrary to the General Terms.

X. Links to Third-Party Websites

The Website may contain links to third-party websites or services. ONLAYN SHOP EKSPRES EOOD does not control and bears no responsibility for the content, privacy policies, security or practices of third-party websites. Access to such links is at the user's own risk.

XI. Changes to this Policy

This Policy may be modified or updated at any time. Changes apply from the moment they are published on the Website, unless stated otherwise. We recommend that users check this page periodically for any updates.

XII. Contact Details for Questions and Complaints

For any question about this Policy, the use of the Website, the processing of personal data or the exercise of your rights, you can contact us:

• ONLAYN SHOP EKSPRES EOOD
• Trade name: Peptology
• UIC/PIC: 208538633
• VAT number: BG208538633
• Registered office: Bulgaria, Sofia 1326, Vrabnitsa district, Obelya 2, block 259, entrance B, floor 3, apartment 5
• Email: support@peptology.bg

Last updated: August 2026