Privacy Policy
Last Updated: May 15, 2026
This Privacy Policy explains how UAE Peptide Lab Sole Establishment (DED Trade Licence 1564375, VAT TRN 104022148100003), referred to as “UAE Peptide Lab”, “we”, or “us”, collects, uses, stores, transfers, and protects personal data processed in connection with this website (uaepeptidelabs.com) and our research-supply, research-education, and consultation engagements.
This policy is issued in accordance with applicable UAE laws, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and applicable Emirate-level data-protection legislation.
1. Who We Are & How to Reach Us
- Operating entity: UAE Peptide Lab Sole Establishment
- DED Trade Licence: 1564375
- VAT TRN: 104022148100003
- Registered address: Um Ramool, Dubai, United Arab Emirates
- Privacy contact: info@uaepeptidelabs.com
2. Personal Data We Collect
Information you provide directly (e.g. when submitting an inquiry, creating an account, completing an order, or engaging in correspondence):
- Full name and professional title
- Email address and telephone number
- Institutional affiliation, role, and credentials (where relevant to research eligibility checks)
- Billing, shipping, and consignee information
- Order history, inquiries, and correspondence content
Information collected automatically when you visit the website:
- IP address, approximate location (city-level), and ISP
- Browser and device fingerprint, operating system, screen size, language
- Pages viewed, referring URL, time spent, navigation events
- Cookies, local-storage tokens, and similar tracking technologies
3. Purposes & Legal Bases of Processing
We process personal data only where one of the following lawful bases applies:
- Performance of a contract / engagement — to acknowledge, fulfil, ship, invoice, and settle a confirmed order or research-supply engagement.
- Legitimate interest — to operate, secure, and improve the website; conduct fraud and sanctions screening; maintain audit logs.
- Legal obligation — to comply with UAE tax, customs, anti-money-laundering, sanctions, and record-retention requirements.
- Consent — for non-essential cookies, marketing communications, and any optional features. You may withdraw consent at any time.
4. Payment Card Information
We do not store, see, or have direct access to full payment-card numbers, CVV codes, or expiry data. Card transactions are tokenised and processed by PCI DSS Level 1-compliant third-party payment gateways. Only a transaction reference, masked card identifier (last four digits), card brand, authorisation result, and merchant settlement metadata are retained on our side for accounting, dispute, and reconciliation purposes.
Statement descriptor: Charges from UAE Peptide Lab Sole Establishment may appear on your card statement under the merchant descriptor configured with our acquiring bank. Where the descriptor differs materially from the operating brand, the descriptor will be disclosed at checkout or in the transaction email.
5. Third-Party Processors & Recipients
In line with UAE PDPL Article 26 (transparency of processors) the following categories of third parties may process personal data on our behalf or jointly with us, under contractual data-processing terms:
| Processor / category | Purpose | Data categories |
|---|---|---|
| Payment gateways (MyFatoorah, TotalPay, Tamara, and any successor acquirer) | Card authorisation, settlement, fraud screening, dispute handling | Name, billing address, card token, transaction reference, IP |
| Domestic couriers (Quiqup, Aramex, and approved partners) | Pick-up, last-mile delivery, proof-of-delivery | Recipient name, address, phone, order reference |
| International couriers (Aramex, FedEx, DHL) | Cross-border shipment, customs clearance support | Recipient identity, address, phone, item description |
| Web infrastructure (SiteGround, Cloudflare, Vercel) | Hosting, content delivery, performance, DDoS and bot mitigation | Server logs, IP, request metadata, user-agent |
| Analytics (PostHog, Sentry, Google Analytics where active) | Site-usage analytics, error monitoring, performance diagnostics | Pseudonymous IDs, page views, error stack traces, IP |
| Email and messaging (Google Workspace, transactional-email providers, WhatsApp Business) | Sending invoices, dispatch notifications, customer correspondence | Name, email, phone, message content |
| AI service providers used for research education or content tooling (e.g. Anthropic, OpenAI, Voyage) | Generation and indexing of educational reference content; only where you initiate an inquiry that engages a research-assistant tool | Inquiry text, IP, conversation ID; never card details |
| Accounting, audit, banking, sanctions-screening, and legal counsel | Statutory bookkeeping, audit, AML compliance, advisory | Transaction records, identification data, correspondence |
| UAE government authorities (FTA, Dubai Customs, DED, EDE) and other competent regulators | Where required by law or in response to a valid legal demand | As requested by the competent authority |
We do not sell, rent, or trade personal data. Each processor operates under contractual confidentiality and minimum-necessary access controls.
6. International Data Transfers
Some of the processors listed above are established outside the UAE (for example in the European Union, United States, United Kingdom, or other GCC jurisdictions). Where personal data is transferred outside the UAE, UAE Peptide Lab implements appropriate safeguards in accordance with UAE PDPL Articles 22 and 23, including contractual data-protection commitments, vendor PDPL/GDPR-equivalent certifications, or, where applicable, recipient adequacy. By using the website you acknowledge that such transfers may occur.
7. Cookies & Similar Technologies
The website uses the following categories of cookies and tokens:
- Strictly necessary — required for the website to operate (session, security, language, consent state).
- Analytics — pseudonymous traffic and usage measurement.
- Marketing — only set with explicit consent.
You can change your cookie preferences through your browser settings or any cookie-banner control we offer. Disabling strictly-necessary cookies may impair functionality.
8. Data Security
UAE Peptide Lab implements organisational and technical measures appropriate to the sensitivity of the data, including:
- TLS 1.2+ encryption in transit across all public surfaces.
- PCI DSS-compliant gateways for any card data, with tokenisation in transit and at rest.
- Role-based access control, least-privilege administration, and audit logging for back-office systems.
- Secrets segregated from application code; access reviewed periodically.
- Backup, integrity-monitoring, and incident-response procedures.
No method of transmission or storage is absolutely secure. While we take reasonable precautions, UAE Peptide Lab cannot guarantee absolute security and is not liable for losses arising from events beyond its reasonable control.
9. Data Retention
We retain personal data only as long as required to fulfil the purposes for which it was collected and to comply with our legal obligations. Indicative retention windows:
- Order, invoicing, VAT, and customs records: at least 5 years (UAE FTA and Dubai Customs requirements).
- Correspondence and inquiry data: 24 months from the last interaction, unless a longer period is required.
- Sanctions-screening and AML logs: retention as required by applicable AML law.
- Marketing data: until consent is withdrawn or three years of inactivity, whichever is first.
10. Your Rights Under UAE PDPL
Subject to applicable conditions and exemptions, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase personal data where the lawful basis no longer applies.
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Receive a copy of your data in a structured, commonly-used format (portability).
- Lodge a complaint with the competent UAE supervisory authority.
To exercise any of these rights, please email info@uaepeptidelabs.com with reasonable identity verification. We respond within statutory timeframes.
11. Children
The website and the items offered are not intended for, or directed to, persons under the age of 21. We do not knowingly collect personal data from anyone under 21. If you believe a minor has provided data to us, please contact us and we will delete the relevant records.
12. Third-Party Links
The website may contain links to external sites. UAE Peptide Lab is not responsible for the privacy practices, content, or security of third-party sites. Please review the privacy notice of any external site you visit.
13. Changes to This Policy
UAE Peptide Lab may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last Updated” date and, where required by law, by additional notice. Continued use of the website following an update constitutes acceptance of the revised policy.
Contact
- Email: info@uaepeptidelabs.com
- Operating entity: UAE Peptide Lab Sole Establishment, Um Ramool, Dubai, United Arab Emirates
- DED Trade Licence: 1564375 · VAT TRN: 104022148100003