Legal
Privacy Policy
Last updated: 23 July 2026
This Privacy Policy explains how PeptidesBooking LTD collects, uses, stores, and protects personal data when you use the PeptidesBooking website, account features, appointment services, calculator, protocols, reminders, and related tools.
1. Data controller
PeptidesBooking LTD
Riviera OD, 593/359, Second Rd, Pattaya, Thailand
Privacy enquiries: gdpr@peptidesbooking.com
2. Information we collect
Account information
Your name, email address, encrypted password credentials, account role, account creation date, and authentication information.
Appointment information
Appointment dates, times, clinic details, practitioner details, appointment status, and contact details associated with a booking.
Protocol and research information
Saved peptide calculations, vial and concentration values, protocol names, schedules, notes, injection records, and completion history that you choose to save.
Technical information
IP address, browser and device information, security logs, cookie identifiers, error reports, and information required to operate and protect the service.
Communications
Messages, support requests, privacy enquiries, and other information you send to us.
3. How and why we use your information
Providing the service
We use account, appointment, protocol, and history data to create your account, provide requested features, manage bookings, save protocols, produce exports, and maintain your account. The legal basis is normally performance of a contract or taking steps requested by you before entering a contract.
Security and service reliability
We process technical and account information to prevent misuse, investigate errors, secure accounts, protect the service, and maintain availability. The legal basis is our legitimate interest in operating a secure and reliable service.
Legal compliance
We may process or retain information where necessary to comply with applicable law, respond to lawful requests, resolve disputes, or establish and defend legal claims.
Consent-based processing
We rely on consent where required, including for optional non-essential cookies, marketing communications, or certain sensitive-data processing. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
4. Health-related and sensitive data
Information about peptide protocols, injections, appointments, dosages, or schedules may constitute health-related or other special-category personal data under applicable law.
Where this information is treated as special-category data, we process it only when a valid legal condition applies, such as your explicit consent or another condition permitted by law. You should not submit another person's sensitive information unless you have lawful authority to do so.
5. Cookies
We may use essential cookies required for authentication, security, session management, and basic website functionality. These cookies cannot normally be disabled without affecting the service.
Non-essential analytics, advertising, or marketing cookies will be used only where appropriate consent has been obtained. You can update your cookie preferences through the cookie controls made available on the website.
6. How we share information
We do not sell personal data. We may share information with service providers only where necessary to operate the service, including:
- Website hosting and cloud infrastructure providers
- Database and data-storage providers
- Authentication and security providers
- Email and communication providers
- Technical support and error-monitoring providers
- Clinics and practitioners involved in your appointments
- Professional advisers and authorities where legally required
Service providers may process information only for agreed purposes and must apply appropriate confidentiality and security protections.
7. International data transfers
PeptidesBooking LTD operates from Thailand, and our service providers may process information in other countries. This means personal data may be transferred outside your country of residence.
Where data-protection law requires additional safeguards for an international transfer, we use an applicable legal mechanism, such as an adequacy decision, approved contractual protections, or another permitted transfer mechanism.
You may contact us to request more information about safeguards relevant to your personal data.
8. Data retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining security, complying with legal obligations, and resolving disputes.
- Account, protocol, and injection data are normally retained while your account remains active.
- You may delete your account and associated protocol history through Account settings.
- Appointment records may be retained or anonymized where necessary for clinic administration, legal compliance, fraud prevention, or dispute resolution.
- Security logs and backups may remain for a limited period before being automatically overwritten or securely deleted.
9. Your privacy rights
Depending on your location and applicable law, you may have the right to:
- Request access to your personal data
- Correct inaccurate or incomplete information
- Request deletion of personal data
- Request restriction of processing
- Object to certain processing
- Receive portable copies of eligible data
- Withdraw consent where processing relies on consent
- Lodge a complaint with an applicable supervisory authority
Signed-in users can download account data or request account deletion through Account settings.
You may also submit a privacy request to gdpr@peptidesbooking.com. We may need to verify your identity before completing a request.
10. Account deletion
Patient accounts can be permanently deleted through Account settings after password confirmation. This removes the account, saved protocols, injection history, authentication records, and related account data.
Some information may instead be anonymized or retained where required by law, needed to preserve legitimate clinic records, or necessary to establish or defend legal claims.
11. Security
We use reasonable technical and organisational safeguards designed to protect personal data against unauthorized access, alteration, loss, misuse, or disclosure.
No online service can guarantee absolute security. You are responsible for keeping your password confidential and informing us promptly if you believe your account has been compromised.
12. Children
PeptidesBooking is not intended for children who are not legally permitted to create an account or consent to data processing in their jurisdiction. We do not knowingly collect personal data from children without appropriate authorization.
13. Changes to this policy
We may update this Privacy Policy when our service, providers, or legal obligations change. The latest version will be published on this page with an updated revision date.