Privacy policy

HeartPep operates a research catalogue and US online ordering service. Stripe collects payment and checkout details, including your email and delivery address. HeartPep does not receive full payment-card details.

To fulfil paid US orders, the recipient name, delivery address, product quantities and order reference are shared with our US supplier through its Google Sheets order system. The supplier manages access to that shared order sheet. HeartPep stores payment references and order-processing status to reconcile payments, prevent duplicate fulfilment and provide support.

Sites and Cloudflare process technical information to operate and protect the website. Owner sign-in uses ChatGPT authentication; public browsing and ordering do not require a ChatGPT account. Cloudflare processes the human check and securely relays enquiry messages to the business inbox. Microsoft 365 processes email correspondence and support. No advertising pixels are enabled.

We use order information to process purchases, fulfil orders, resolve problems and keep necessary business records. Service providers may process information outside your country. To request access, correction or deletion where applicable, use the contact form. Some records may need to be retained for accounting, disputes or other legal requirements. Do not include payment-card details.

Contact enquiries

When you send the contact form, we process your name, reply email address, subject, message, selected delivery region and any product context to respond. Cloudflare Turnstile helps protect the form from spam. We keep enquiry references and delivery status to prevent duplicate submissions and handle support. General, product and wholesale enquiries are sent to HeartPep for review; they do not create a supplier order.

Delivery-region selection

The hosting platform may use your IP address to suggest the UK or US storefront. Our routing code does not store your IP address; hosting services may retain technical logs. A first-party preference cookie remembers your storefront choice for 180 days and is not used for advertising. You can switch storefronts or remove the cookie at any time.

Cookie-free website measurement

We use Cloudflare Web Analytics on public catalogue, product and documentation pages whose addresses have no query string to measure aggregate page views, referring sites and browser performance. This measurement does not use cookies, localStorage, sessionStorage or IndexedDB. Cloudflare states that it discards source IP addresses at its nearest data centre. Analytics totals are measurements of page activity, not persistent profiles or counts of unique people.

We do not load the Cloudflare analytics script on shopping bags, checkout-return pages, contact forms, administration pages or the privacy-choices page. Browser Do Not Track and Global Privacy Control signals suppress it. Analytics can be blocked by browser controls, so reports do not represent every visit.

Optional Google Analytics

Google Analytics is off until you choose Allow analytics. After that choice, Google receives measurements of public-page visits, including a page address without query strings or fragments and a referring-site origin without its path. Google also processes technical connection and browser information. Google Analytics uses cookie identifiers to distinguish browser activity. We do not send names, email addresses, contact-form content, order details, payment details or search queries to Google Analytics. Advertising storage, advertising user data and advertising personalisation remain denied; Google signals and advertising personalisation signals are disabled.

Optional first-party _ga and _ga_RNBL369LD1 cookies support this measurement for up to 180 days. A separate first-party browser-storage record remembers your analytics choice for 180 days (about six months). The Google tag is not loaded on contact forms, shopping bags, checkout-return pages, administration, errors, preview hosts or the privacy-choices page. Do Not Track or Global Privacy Control keeps it off. Rejecting or withdrawing consent stops future measurement and removes this measurement’s Google Analytics cookies; it cannot delete measurements Google has already received.

You can allow, reject or withdraw Google Analytics through Privacy choices in the footer without affecting shopping. This choice is separate from the cookie-free Cloudflare measurement described above. Read Google’s privacy policy for its processing information.

Google Search Console supplies separate search-performance and indexing reports. It does not add a visitor tracking script to this website.

Read Cloudflare’s measurement and privacy documentation or see your privacy choices.