Privacy policy

Data controller

This policy describes how Casa de Péptidos (referred to as “we”) processes personal data on its website. For privacy questions, email info@casadepeptidos.com.

Data we process

• User account: if you register or sign in, we process your email address and the information needed to manage your account. The system used by our shop stores passwords securely (WordPress and WooCommerce through its GraphQL API).
• Session and security: to keep you signed in, we use HTTP-only cookies named authToken and refreshToken. These technical cookies cannot be accessed by browser JavaScript and are used for authentication.
• Catalog and orders: when you browse the shop or place orders, our backend (WordPress GraphQL and WooCommerce) processes the data needed to show products, pricing, and inventory and to process purchases.
• Technical data: as with any website, the hosting platform and infrastructure may generate technical logs, such as IP address, date and time, and browser type, for security, diagnostics, and legal compliance.

Analytics and advertising tools

The current version of this site does not include third-party analytics scripts, such as Google Analytics, or advertising pixels. We will update this policy if that changes.

Purposes

We use data to operate the site, manage accounts, process orders, meet legal obligations, protect the service, and reply when you contact us.

Retention

We retain information for as long as needed for these purposes, including accounting, tax, and customer service obligations, unless the law requires or permits another period.

Your rights

Under applicable law, you may request access, correction, deletion, objection, or other rights concerning your data. To exercise them, email info@casadepeptidos.com.

Changes

We may update this policy. The latest revision date appears at the top. Continued use of the site after changes means you accept the current policy unless the law requires another process.