Privacy Policy

1. Data controller

NeuroPept Ltd., Rotterdam, Netherlands, is the controller of personal data processed via this website. Contact: contact@npept.com.

Postal enquiries may be addressed to NeuroPept Ltd., Rotterdam, Netherlands. Chamber of Commerce (KvK) and VAT identification numbers are available on request.

2. Data we collect

• Contact details you provide (name, email address, telephone number, organisation, delivery address)
• Order and enquiry content
• Technical data: IP address, browser type, device type, pages visited
• Analytics and advertising identifiers where cookies are accepted

3. Legal basis

We process data on the basis of contract performance (Art. 6(1)(b) GDPR) for orders and quotations, legitimate interest (Art. 6(1)(f)) for security and service improvement, consent (Art. 6(1)(a)) for analytics and marketing cookies, and legal obligation (Art. 6(1)(c)) for tax and trade compliance records.

4. Purposes

• Responding to research enquiries and issuing quotations
• Fulfilling orders and shipping research compounds
• Providing Certificates of Analysis and product documentation
• Complying with applicable legal obligations including trade regulations

5. Third-party recipients

We share data only with: (i) logistics partners for shipping, (ii) accredited testing laboratories that issue Certificates of Analysis, (iii) regulatory authorities where required by law, and (iv) IT service providers under written data-processing agreements.

6. Cookies and tracking

This website uses the Meta Pixel for advertising measurement. It is loaded only where permitted by your cookie choice and applicable law. You can block cookies in your browser settings; essential site functions will continue to work.

7. Retention

Contact records are retained for up to 3 years from last interaction. Transaction records, Certificates of Analysis and tax-relevant documents are retained for 7 years in accordance with Dutch fiscal law.

8. Your rights (GDPR Art. 15–21)

You have the right to access, rectify, erase, restrict processing of, port and object to processing of your data. You may withdraw consent at any time without affecting the lawfulness of prior processing. Complaints may be filed with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. International transfers

Transfers outside the EEA are protected by Standard Contractual Clauses (GDPR Art. 46) or equivalent safeguards.

10. Security

All data is transmitted via HTTPS/TLS. Internal systems are protected by access controls, encryption at rest and audit logging.

11. Contact

Privacy enquiries: contact@npept.com