Privacy Policy
This policy explains how SemaxBuy processes personal data in connection with semaxbuy.com and with orders placed by Telegram, in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR").
1. Data controller
The controller for the personal data described in this policy is SemaxBuy. Our registered company details are provided on request and on every order confirmation. For any question about this policy or about your personal data, write to orders@semaxbuy.com or contact us by Telegram.
2. What we process
We process three categories of personal data, depending on how you use the site: order data (name, delivery address, email address and Telegram handle, and order contents) collected when an order is placed; enquiry data (the content of messages sent to us requesting information, a certificate of analysis, or after-sales support); and technical data (IP address, browser type, device identifiers and pages visited) collected automatically through server logs and, where you consent, analytics cookies. We do not process any special category of personal data under Article 9 GDPR, and we ask buyers not to send health-related or other sensitive personal data through our contact channels.
3. Legal basis for each purpose (Article 6 GDPR)
| Purpose | Data used | Legal basis |
|---|---|---|
| Processing and delivering an order | Order data | Performance of a contract — Article 6(1)(b) |
| Answering enquiries and issuing a certificate of analysis | Enquiry data | Performance of a contract / legitimate interest — Article 6(1)(b) and (f) |
| Fraud prevention and order verification | Order and technical data | Legitimate interest — Article 6(1)(f) |
| Site analytics and performance monitoring | Technical data, cookies | Consent — Article 6(1)(a), where required under national ePrivacy rules |
| Tax and accounting record-keeping | Order data | Legal obligation — Article 6(1)(c) |
4. Recipients and processors
Personal data is shared only with parties needed to fulfil an order: the courier engaged for delivery, the independent laboratory issuing a batch certificate of analysis where a request requires verification, the Telegram platform as the channel a buyer chooses to use, and hosting and analytics providers acting as processors under a data processing agreement. We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
5. International transfers
Where a recipient above is established outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, an applicable adequacy decision, or another safeguard recognised under Chapter V GDPR before the transfer takes place. Telegram may process message content on infrastructure located outside the EEA in accordance with its own privacy policy, which governs data submitted through that channel directly.
6. Retention
Order and invoicing data is kept for the period required by applicable tax and commercial-accounting rules, typically several years from the end of the financial year in which the order was placed. Enquiry data unrelated to a completed order is kept only for as long as needed to handle the enquiry, then deleted or anonymised. Technical and analytics data is retained for a limited period, generally not exceeding twenty-six months, after which it is deleted or aggregated so that it no longer identifies you.
7. Your rights (Articles 15-22 GDPR)
You have the right to: request access to the personal data we hold about you; request rectification of inaccurate data; request erasure where the data is no longer needed or you withdraw consent; request restriction of processing in specific circumstances; receive the data you provided in a portable format; and object to processing carried out on the basis of legitimate interest, including for any direct marketing. You may exercise any of these rights by writing to orders@semaxbuy.com. We respond within one month, extendable by a further two months for complex requests, as permitted under Article 12(3) GDPR.
8. Right to lodge a complaint
If you consider that your data protection rights have not been respected, you have the right to lodge a complaint with the data protection supervisory authority of your habitual residence, place of work, or the place of the alleged infringement, in addition to any remedy you may pursue directly against us.
9. Cookies
This site uses only the cookies strictly necessary for it to function and, where you consent, analytics cookies used to understand aggregate traffic to our research content. No cookie is used to build advertising profiles. You can withdraw consent to non-essential cookies at any time through your browser settings.
This policy applies to visitors of a website that sells laboratory peptide reagents for research use only; nothing in it constitutes legal advice.