Privacy Policy

Data controller: Pulse Organization LTD, 71-75 Shelton Street, London WC2H 9JQ, United Kingdom, registered in England and Wales under company number 14018578. Email: support@pulsepeptides.com.

1. Who collects your information

Pulse Organization LTD (“PulsePeptides.com”) collects information about the use of our website pulsepeptides.com to provide a secure and personalized experience. This includes the customer’s name, email, purchasing records, and shopping patterns. We will collect information when you place an order with us.

2. How we use your information

We do not sell, rent, or loan your information to third parties without your permission. So, for example, we do not sell your email address or other information to mass marketers. With your consent (for example if you opt in under “Stay in the loop” or to phone or WhatsApp contact at checkout), PulsePeptides.com may contact you by email, phone, or WhatsApp about your orders, new products, lab results, and special offers related to PulsePeptides.com, and you can withdraw this consent at any time.

At PulsePeptides we only collect and store information beyond what is required to process your order and run the website if you give your consent (such as optional cookies and tracking for Statistics, Marketing, and Usage analysis via the cookie banner, or optional marketing updates). Personal details such as your name, address or purchase history are not visible to other customers or the public. All transactions on this site are SSL encrypted for your protection.

3. Legal basis and retention

We process personal data under the UK GDPR and the EU GDPR on the following legal bases:

Order processing, customer account, shipping, and payment (Art. 6 (1) (b) UK GDPR and EU GDPR, performance of a contract): processing your orders, managing your customer account, handing parcels over to DHL for delivery, and processing payments via card (Niftipay), direct bank transfer (our bank), or cryptocurrency.
Invoicing, accounting, and tax records (Art. 6 (1) (c) UK GDPR and EU GDPR, legal obligation): retaining order, invoice, and payment records required under UK commercial and tax law.
Security, fraud prevention, server logs, and strictly necessary cookies (Art. 6 (1) (f) UK GDPR and EU GDPR, legitimate interests): operating and securing our website and checkout, preventing fraud, spam, and abuse, maintaining technical server logs, and storing strictly necessary session, cart, and consent cookies.
Statistics, marketing, usage analysis, email newsletter, and phone or WhatsApp contact (Art. 6 (1) (a) UK GDPR and EU GDPR, consent): evaluating visits and shopping steps (Statistics), measuring advertising campaigns, order origin, and referral links (Marketing), recording strictly masked heatmaps and sessions (Usage analysis), and contacting you by email (“Stay in the loop”) or by phone or WhatsApp if you opted in at checkout. You can withdraw your consent at any time with effect for the future, for cookies via “Cookie settings” in the footer or the cookie button on the page and for email, phone, or WhatsApp messages by contacting support@pulsepeptides.com or using the unsubscribe link.

Recipients of personal data: Depending on the processing purpose and your consent choices, data is shared with our hosting provider, our email service provider, our bank (for bank transfers), Niftipay (for card payments), DHL (for parcel shipping), and, where active or consented to, Google Ireland Limited / Google LLC (Google Tag Manager, where the cookie banner runs when active, Google Analytics 4, Google Ads Conversion Tracking), ProfitMetrics ApS (ProfitMetrics Conversion & Attribution), Metorik Pty Ltd (Metorik Source Tracking), TrustPulse, and Microsoft Ireland Operations Limited / Microsoft Corporation (Microsoft Clarity), in addition to first-party storage by Pulse Organization LTD (WooCommerce, Order Attribution, AffiliateWP).

International data transfers: Some recipients process data in the USA or Australia (in particular Google LLC, Microsoft Corporation, and Metorik Pty Ltd). Transfers to the USA and other third countries rely on adequacy decisions (such as the EU-US Data Privacy Framework and the UK Extension to the Data Privacy Framework) or Standard Contractual Clauses (Art. 46 UK GDPR and EU GDPR). Google and Microsoft may combine data into user profiles for their own purposes, including advertising, and US authorities may access data under US law.

Retention periods: We store personal data only as long as necessary for the respective purpose or as required by law:

Order and invoice records: 6 years after the end of the financial year in which the transaction took place, in accordance with UK tax and company law.
Customer account: until you delete your account or ask us to delete it.
Support enquiries: as long as needed to handle your request and any follow-up questions, unless the correspondence is part of a statutory order or invoice record.
Server logs: only as long as needed for security and troubleshooting, after which they are deleted in the server’s regular log rotation.
Email newsletter and phone or WhatsApp opt-in: until you unsubscribe or withdraw your consent.
Consent records: 3 years from the date of your cookie choice when recorded by the theme cookie banner, stored pseudonymously without your IP address to document compliance.
Cookies and browser storage: your cookie choice is stored for 12 months when granted and 6 months when rejected by the theme cookie banner, or for 12 months by the Tag Manager cookie banner; individual cookie durations are listed in the table below under “Cookies and similar technologies”.

4. Your use of this website

Our collection and/or use of any information you provide while using or visiting this Web Site is governed by the www.PulsePeptides.com Privacy Policy and this Terms and Conditions of Use Agreement. By using this Web Site you grant us the rights contained therein. In using this Web Site you may not upload, distribute, or otherwise publish on this Web Site any information which may be viewed as obscene, defamatory, libelous, threatening, abusive, illegal, an invasion of privacy rights, or otherwise objectionable, or may constitute or encourage a violation of any law.

Except for that individually-identifiable information collected from you in accordance with our Privacy Policy, all comments, remarks, suggestions, ideas or other information communicated will become the exclusive property of www.PulsePeptides.com and you grant to www.PulsePeptides.com a royalty-free, perpetual, irrevocable, world-wide, non-exclusive license to use or reproduce the same. www.PulsePeptides.com is free to copy, disclose, distribute or analyze any such information for any and all purposes and are in no way obligated to compensate you for any such information.

5. Contact

If you require any more information or have any questions about our privacy policy, please feel free to contact us by email at support@pulsepeptides.com.

For any data protection requests or to exercise your rights, contact us at support@pulsepeptides.com. Under the UK GDPR and the EU GDPR, you have the right to request access to your personal data, rectification of inaccurate data, erasure of your data, restriction of processing, and data portability, the right to object to processing based on legitimate interests or for direct marketing, and the right to withdraw any consent at any time with effect for the future.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO, ico.org.uk) in the United Kingdom or with the data protection supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

6. Scope of this document

At PulsePeptides, the privacy of our visitors is of extreme importance to us. This privacy policy document outlines the types of personal information is received and collected by PulsePeptides and how it is used.

Cookies and similar technologies

You can change or withdraw your choice at any time via “Cookie settings” in the footer or the cookie button on the page.

Cookie settings

Strictly necessary

Required for operating the shop, shopping cart, checkout, account sign-in, security, and storing your cookie choice.

WooCommerce & Consent Storage

Company & location: Pulse Organization LTD (First-party)
Purpose: Operates the shopping cart, checkout session, security tokens, and stores your cookie consent decision.
Storage duration: Session to 12 months
Third-country transfer: None - Not applicable (first-party storage)
Role: Controller (first-party)

Name	Type	Duration	Purpose
`wp_woocommerce_session_*`	Cookie	48 hours	Assigns a unique session code to keep your cart contents during your visit.
`woocommerce_items_in_cart`	Cookie	Session	Indicates whether the shopping cart contains items.
`woocommerce_cart_hash`	Cookie	Session	Detects when the shopping cart contents change.
`userConsent`	Cookie	12 months	Necessary; stores your cookie choice.
`pp_ccc_v`	Cookie	12 months	Necessary; stores the version of the cookie choice so consent is requested again when providers or texts change.

Google Tag Manager

Company & location: Google Ireland Limited (Dublin, Ireland) / Google LLC (Mountain View, USA)
Purpose: Loads the cookie banner and the Google tags on every page; Google tags measure only after consent; own cookies: none.
Storage duration: None
Third-country transfer: USA possible (Google LLC) - EU-US Data Privacy Framework (DPF)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`None`	None	None	Loads the cookie banner and Google tags on every page without setting own cookies (Google tags measure only after consent).

Statistics

Evaluates visits, page views, shopping steps (view_item, add_to_cart, begin_checkout, purchase, using item SKUs without product names) and shop interactions (certificate views, search length and results without the search text, filters, quantity tiers, coupon success without the code, payment method chosen, checkout field errors) without personal data, to improve the shop (analytics_storage).

Google Tag Manager

Company & location: Google Ireland Limited (Dublin, Ireland) / Google LLC (Mountain View, USA)
Purpose: Manages and loads measurement tags after consent without setting its own cookies.
Storage duration: None
Third-country transfer: USA (Google LLC) - EU-US Data Privacy Framework (DPF)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`None (tag loader only)`	Script	None	Loads authorised tags after consent without storing own cookies.

Google Analytics 4

Company & location: Google Ireland Limited (Dublin, Ireland) / Google LLC (Mountain View, USA)
Purpose: Reach and funnel measurement (page views and shopping steps only with item SKU, without Google Signals).
Storage duration: 13 months
Third-country transfer: USA (Google LLC) - EU-US Data Privacy Framework (DPF)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`_ga`	Cookie	13 months	Distinguishes visitors for statistical reach measurement.
`_ga_*`	Cookie	13 months	Maintains session state across page views.

Microsoft Clarity

Company & location: Microsoft Ireland Operations Limited (Dublin, Ireland) / Microsoft Corporation (Redmond, USA)
Purpose: Records clicks, scrolling, and mouse movements for heatmaps and session recordings in strict masking mode, with non-identifying labels such as payment method or cart value range and the same shop interaction events as Statistics (loads with Statistics consent; never on account or order confirmation pages, checkout fully masked; advertising use by Microsoft only with Marketing consent).
Storage duration: 1 year (_clck), 1 day (_clsk), Recordings 30 days, Heatmaps 9 months
Third-country transfer: USA (Microsoft Corporation) - DPF & SCC
Role: Independent controller (Microsoft also uses data for its own purposes under its terms, including profiling and advertising)

Name	Type	Duration	Purpose
`_clck`	Cookie	1 year	Persists the Clarity user ID and preferences across visits.
`_clsk`	Cookie	1 day	Connects page views of a session into a single recording.

Marketing

Measures the effectiveness of advertising campaigns (Google Ads), order origin (Order Attribution, Metorik), affiliate referral links (AffiliateWP), and displays recent purchase notifications (TrustPulse) (ad_storage, ad_user_data, ad_personalization).

Google Tag Manager

Company & location: Google Ireland Limited (Dublin, Ireland) / Google LLC (Mountain View, USA)
Purpose: Manages and loads measurement tags after consent without setting its own cookies.
Storage duration: None
Third-country transfer: USA (Google LLC) - EU-US Data Privacy Framework (DPF)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`None (tag loader only)`	Script	None	Loads authorised tags after consent without storing own cookies.

Google Ads Conversion Tracking

Company & location: Google Ireland Limited (Dublin, Ireland) / Google LLC (Mountain View, USA)
Purpose: Measures whether a click on a Google ad leads to a purchase (gclid, purchase value, without product data, without Enhanced Conversions, ad_personalization granted with Marketing consent (personalised ads)).
Storage duration: 90 days
Third-country transfer: USA (Google LLC) - EU-US Data Privacy Framework (DPF)
Role: Independent controller (Google Ads Controller-Controller Data Protection Terms)

Name	Type	Duration	Purpose
`_gcl_au`	Cookie	90 days	Stores and tracks conversions across advertising clicks.
`_gcl_aw`	Cookie	90 days	Stores the Google click identifier (gclid) from ad clicks.
`_gcl_gs`	Cookie	90 days	Stores Google campaign source information.
`_gcl_ls`	Cookie & localStorage	90 days	Stores conversion linker data for ad attribution.
`FPGCL*`	Cookie	90 days	First-party Google click identifier for conversion attribution.
`_gac_*`	Cookie	90 days	Contains campaign information for Google Ads conversion measurement.

ProfitMetrics Conversion & Attribution

Company & location: ProfitMetrics ApS (Denmark)
Purpose: Links advertising clicks and sessions to orders for profit and campaign attribution (only active when both Statistics and Marketing are allowed).
Storage duration: 90 days
Third-country transfer: EU/EEA (Denmark) - Within EU/EEA (no third-country transfer)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`pmTPTrack`	Cookie	90 days	Stores click and attribution parameters for order matching.
`pmcd`	Cookie	90 days	Stores consent and attribution state for ProfitMetrics.
`pmLastOrderId`	Cookie	90 days	Prevents duplicate conversion reporting for the same order.

WooCommerce Order Attribution (Sourcebuster)

Company & location: Pulse Organization LTD (First-party)
Purpose: Stores the origin of an order (search engine, direct visit, campaign parameters) in first-party cookies.
Storage duration: Session / 30 minutes
Third-country transfer: None - Not applicable (first-party storage)
Role: Controller (first-party)

Name	Type	Duration	Purpose
`sbjs_current`	Cookie	Session	Stores the traffic source of the current visit.
`sbjs_first`	Cookie	Session	Stores the traffic source of the first visit.
`sbjs_session`	Cookie	30 minutes	Counts pages viewed during the current session.
`sbjs_udata`	Cookie	Session	Stores basic browser and visit metadata.
`sbjs_migrations`	Cookie	Session	Internal version marker for Sourcebuster cookies.
`sbjs_current_add`	Cookie	Session	Stores timestamp and landing page of the current visit.
`sbjs_first_add`	Cookie	Session	Stores timestamp and landing page of the first visit.
`sbjs_promo`	Cookie	Session	Stores promotional campaign parameters.

Metorik Source Tracking

Company & location: Metorik Pty Ltd (Australia / USA)
Purpose: Records the origin of the session for order evaluation.
Storage duration: 6 months
Third-country transfer: USA / Australia (Standard Contractual Clauses) - Standard Contractual Clauses (Art. 46 GDPR)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`sbjs_*`	Cookie	6 months	Stores referral source details for order evaluation.
`mtk_src_trk`	Cookie	6 months	Tracks session source for Metorik order reporting.

AffiliateWP Referral Tracking

Company & location: Pulse Organization LTD (First-party)
Purpose: Stores the affiliate partner identifier when visiting via a referral link in order to assign commissions (coupon codes also work without this cookie).
Storage duration: 30 days
Third-country transfer: None - Not applicable (first-party storage)
Role: Controller (first-party)

Name	Type	Duration	Purpose
`affwp_ref`	Cookie	30 days	Stores the referring affiliate partner ID.
`affwp_ref_visit_id`	Cookie	30 days	Stores the referral visit ID for commission attribution.
`affwp_campaign`	Cookie	30 days	Stores the affiliate campaign identifier.

TrustPulse Activity Notifications

Company & location: Awesome Motive, Inc. (West Palm Beach, USA)
Purpose: Displays notifications about recent purchases and activity in the shop.
Storage duration: None
Third-country transfer: USA - Standard Contractual Clauses (Art. 46 GDPR)
Role: Processor (Art. 28 GDPR)

Name	Type	Duration	Purpose
`None`	None	None	Loads the notification script after Marketing consent without setting cookies or browser storage.