Privacy policy
PRIVACY POLICY
Effective date: 3 August 2026
Last updated: 24 September 2026
1. Data controller
This Privacy Policy explains how Pencell Peptide (PCP) collects, uses and protects personal data when you visit our store, contact us or place an order.
Pencell Peptide (PCP) is a trading brand of:
Swift & Easy s.r.o.
Podkrušnohorská 1070
435 11 Lom
Czech Republic
IČO: 19285825
Email: info@pencellpeptide.cz
Swift & Easy s.r.o. is the controller responsible for the personal data described in this policy.
2. Personal data we collect
Depending on how you use the store, we may collect:
- Your name
- Billing and delivery address
- Email address
- Telephone number
- Products ordered and order history
- Payment method and payment status
- Delivery and tracking information
- Returns, refunds and complaint records
- Messages sent to customer support
- Account information, if accounts are available
- IP address, browser and device information
- Website usage information
- Cookie and consent preferences
- Marketing preferences
Payment card information is normally collected directly by the selected payment provider.
Pencell Peptide (PCP) does not receive or store complete payment card details.
3. Information you provide
You are responsible for ensuring that personal data submitted during checkout is accurate.
If you provide another person’s information, such as a parcel recipient’s details, you must be authorised to do so.
Please do not send medical records, health information or other sensitive personal data through customer support emails. We do not require such information to process ordinary orders.
4. How we use personal data
We use personal data to:
- Process and fulfil orders
- Process or confirm payments
- Arrange delivery through our appointed delivery providers
- Send order and tracking notifications
- Handle returns, refunds and complaints
- Provide customer support
- Prevent fraud and protect the store
- Comply with accounting, tax and other legal obligations
- Maintain and improve the store
- Send marketing communications where we have a valid legal basis
5. Legal bases
We process personal data where necessary:
- To perform a contract with you or take steps at your request before entering into a contract
- To comply with a legal obligation
- For our legitimate interests in operating, securing and improving the store, where these interests do not override your rights
- With your consent, particularly for certain marketing activities and non-essential cookies
You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
6. Delivery information
We may share the following information with our appointed delivery providers, including Packeta/Zásilkovna, and their local delivery partners:
- Recipient’s name
- Delivery address
- Email address
- Telephone number
- Parcel and delivery details
- Cash-on-delivery amount and payment status
A telephone number may be used by the delivery provider for delivery, payment, pickup-point or parcel-locker notifications.
7. Payments
Cash-on-delivery information may be processed by the appointed delivery provider to collect and confirm payment.
For prepaid orders, personal data is shared with the selected payment provider.
We receive only the information necessary to confirm, manage or refund the payment.
8. Shopify
Our online store is hosted by Shopify.
Shopify processes customer, order, device and website information to provide the store, checkout, security and fraud-prevention services.
For customers in the European Economic Area, relevant services may be provided through Shopify International Ltd.
Shopify and its providers may process data outside the EEA using legally recognised safeguards where required.
More information is available at:
https://www.shopify.com/legal/privacy/consumers
9. Other recipients
Where reasonably necessary, personal data may be shared with:
- Shopify and its service providers
- Our appointed delivery providers and their local delivery partners
- Payment and refund providers
- Website, security and technical providers
- Analytics and marketing providers, subject to consent where required
- Accounting, tax, legal and professional advisers
- Public authorities where disclosure is legally required
- A lawful buyer or successor to the business
We do not sell personal data.
10. International transfers
Some providers may process personal data outside the European Economic Area.
Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses or another lawful safeguard.
11. Data retention
We retain personal data only for as long as reasonably necessary.
Order, payment and accounting records may normally be retained for up to 10 years where required by law.
Delivery, complaint and support information is retained for the period necessary to resolve the matter and establish or defend legal claims.
Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer needed.
When data is no longer required, it is deleted or anonymised.
12. Cookies
We use cookies and similar technologies to operate the store, remember preferences, maintain security and understand website use.
Strictly necessary cookies may be used without consent where permitted by law.
Non-essential analytics, personalisation and advertising technologies are used only after consent where required.
Further information and available choices are provided through the website’s cookie-preference tool.
13. Fraud checks
Shopify, payment providers and security services may use automated indicators to identify potentially fraudulent or high-risk orders.
An order may be held for review, additional information may be requested or the order may be refused where reasonably necessary.
Contact info@pencellpeptide.cz if you believe an order was incorrectly affected.
14. Your rights
Subject to applicable law, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict certain processing
- Object to processing based on legitimate interests
- Receive certain data in a portable format
- Withdraw consent
- Object to direct marketing
- Lodge a complaint with a supervisory authority
These rights are not absolute. We may need to retain information to comply with legal obligations or defend legal claims.
To exercise your rights, email info@pencellpeptide.cz.
We may request information reasonably necessary to verify your identity.
15. Marketing
We send promotional emails only where we have a valid legal basis.
You may unsubscribe at any time using the link in a marketing email or by contacting info@pencellpeptide.cz.
You may still receive essential messages about orders, payments, delivery or security.
16. Complaints
If you have concerns about how your personal data is processed, contact:
You may also lodge a complaint with:
Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Website: https://uoou.gov.cz/
Email: posta@uoou.gov.cz
Residents of another EU or EEA country may also contact their local data protection authority.
17. Data security
We use reasonable technical and organisational measures designed to protect personal data from unauthorised access, loss, alteration or misuse.
No online system can be guaranteed to be completely secure.
18. Children
The Pencell Peptide (PCP) store is not intended for anyone under 18.
We do not knowingly accept orders from children.
19. Changes
We may update this Privacy Policy to reflect legal, operational or service changes.
The effective date and latest revision date are shown at the top.
20. Contact
Pencell Peptide (PCP)
Operated by Swift & Easy s.r.o.
Email: info@pencellpeptide.cz