Privacy Policy

1. Controller

The controller for personal data processed through this website and our trade portal is B&N Peptides, Dubai, United Arab Emirates · info@bn-peptides.com · +971 54 443 8989. This policy follows the principles of the EU General Data Protection Regulation (GDPR) and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. Data we collect

• Contact enquiries: name, company, email address, phone number, country and your message.
• Trade applications: company and contact details, business type, registration and tax details, licence numbers and expiry dates, and uploaded licence and company registration documents.
• Partner applications: company, country, product categories, certifications held, contact details and uploaded documents.
• Adverse event and complaint reports: reporter contact details, product, batch and the description of the event.
• Trade account and order data: login details, company profile, orders, quotations, invoices, delivery addresses, shipping and payment records.
• Technical data: IP address, browser and device information, and cookie data as described in our Cookie Policy.

3. Purposes and legal bases

• To answer enquiries and prepare quotations (steps prior to a contract and legitimate interests).
• To verify that customers are licensed businesses before supply, and to process orders, invoices, payments and deliveries (performance of a contract and legal obligations).
• To meet regulatory duties, including traceability, recalls and pharmacovigilance reporting (legal obligations).
• To operate, secure and improve the website (legitimate interests) and, where you agree, analytics (consent).

4. Storage and security

Data is stored on secure cloud infrastructure with encryption in transit, access controls and restricted administrative access. Uploaded documents are kept in private storage and are only accessible to authorised staff.

5. Retention

We keep personal data only as long as needed for the purposes above. Trade, order and invoice records are retained for the periods required by commercial, tax and pharmaceutical traceability rules. Enquiries that do not lead to a business relationship are deleted when no longer needed. Adverse event records are kept as required by pharmacovigilance obligations.

6. Sharing

We share personal data only where necessary: with logistics, customs and courier providers to deliver orders, with payment providers and banks to process payments, with IT and hosting providers acting on our instructions, and with authorities where required by law. We do not sell personal data.

7. International transfers

As we supply customers worldwide, data may be transferred outside the UAE or the European Economic Area. Where this happens we use appropriate safeguards, such as standard contractual clauses or transfers to countries with adequate protection, as permitted under the GDPR and the PDPL.

8. Your rights

Subject to applicable law, you have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with a competent data protection authority.

9. Contact for requests

Send privacy requests to info@bn-peptides.com. We respond within the time limits set by applicable law. B&N Peptides, Dubai, United Arab Emirates · info@bn-peptides.com · +971 54 443 8989.