This policy explains how Peptido Cura (operated by HTH Proventus Ltd, the data controller) uses cookies and similar technologies such as browser local storage on this website. It sits alongside our Privacy Policy, which describes how we handle your personal data more broadly. We follow the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.
A cookie is a small text file a website stores on your device so it can recognise your browser. We also use related technologies, such as local storage, that work in a similar way. Throughout this policy we use the word “cookies” to cover both.
Cookies do a range of jobs: some are essential to make the site work (keeping your basket, keeping you signed in), while others are optional and help us understand how the site is used or support our marketing.
When you first visit, we set only the strictly necessary cookies the site needs to function. Under PECR these do not require your consent, so they are always on. Separately, unless you object, our own server counts the document request under PECR’s statistical-purposes exception so we can improve the shop. It maps the path to a fixed page type, reduces acquisition and referrer information to broad classes, and immediately adds one to a daily count. It does not receive a visitor or device identifier, a cookie value, an IP address, a user agent, a query value, or a key that can join the count to another system. The only thing derived from the browser’s user agent is a yes/no note that the request came from an automated browser rather than a person, so automated traffic does not distort the counts; the user agent itself is never stored in or sent to the counter, and the note cannot identify you. A random retry key is deleted after 15 minutes.
Consent-based optional purposes stay off unless you choose Accept all or enable them under Customise. The controls group the optional purposes by capability. Analytics covers aggregate service analytics, and person-level analytics and replay. Advertising covers advertising storage, advertising measurement and advertising personalisation. Preferences covers functional preferences. Each group can be switched on or off as one, and every individual purpose stays separately controllable under the group’s individual choices, so nothing is bundled beyond what each purpose describes. Essential (necessary and security) storage is always on. Selecting Deny all, or switching Analytics off (or just its Aggregate service analytics individual choice), is also a simple and free objection to our anonymous first-party statistics. Future page requests stop contributing while that choice remains off.
Each purpose describes a capability, not a particular tool. The specific providers and cookies serving a purpose can change over time; when they do, we update the tables below rather than asking you again, and the purpose you consented to stays the same. If we ever want to use your data for a genuinely new purpose, we will ask you first.
We remember your choice – whether you accept or refuse – for 365 days, so we do not ask again on every visit. Refusing is as easy as accepting, and you can change any purpose at any time using the Cookie settings link in the footer.
If you accepted analytics under our previous single-choice banner, that choice is kept exactly as you made it: analytics stays on and all advertising purposes stay off. We migrate that choice silently and do not regard it as permission for any new advertising purpose. You can choose those purposes yourself at any time using Cookie settings in the footer.
Your choice is set per device. The law treats cookie consent as specific to the device and browser you are using, so if you visit us on another device – for example you join our newsletter on your phone and later open an email on your laptop – you will be asked again on that device. A choice you make on one device does not carry over to another, and each device’s choice is respected on that device.
We keep an immutable receipt for each purpose choice on our own servers. It records the device identifier, purpose, decision, time, policy version, source, a shortened IP address and reduced browser description. It also records which consent screen was used, why any recheck was shown, the site origin and release, bounded screen and viewport dimensions, and whether each necessary consent storage key could be read, written and read back. It records outcomes only, never the values held in those storage keys. If you later give us your email, the receipt can be linked using a one-way hash rather than storing the email in the receipt. Withdrawal creates a new receipt linked to the earlier one; it never rewrites the history. You can ask for a copy or request erasure where the law permits using the contact details in our Privacy Policy.
These are required for the site to work and cannot be switched off. They do not track you for advertising.
Questions about cookies or your data? Email info@peptidocura.com and we will respond within one calendar month.
