Effective from August 31, 2026.
The data controller is Arion Labs — a trading name of index rozvoje s.r.o., Company ID 10881662, registered at Pitterova 2855/7, 130 00 Praha 3 (the “controller”). This policy describes what personal data we process about you, for what purpose, and what rights you have in connection with it.
When you place an order, we process your first and last name, email, phone number, delivery address (if home delivery is selected) or the selected Packeta pickup point, the order contents, and payment details.
When you submit the contact form, we process your name, e-mail and the content of your message; when you withdraw from the contract using the form on the website, your name, e-mail, order number and the details you enter in the form. When you visit the website, we also process technical data necessary for its operation, in particular your IP address — for example to protect the order form against abuse.
We process order data to fulfil the order, deliver the goods, and comply with legal obligations, in particular accounting and tax obligations — the legal basis is performance of a contract and compliance with legal obligations.
We process contact form data to handle your inquiry, based on legitimate interest. We process technical data, in particular the IP address, based on a legitimate interest in securing and protecting the website against abuse.
After your order is delivered, we will send you one email asking you to review your purchase on Trustpilot. The legal basis is our legitimate interest in customer feedback (Art. 6(1)(f) GDPR and Art. 13(2) of Directive 2002/58/EC). We do not pass any of your data to Trustpilot — you write a review only if you choose to. You can decline further requests at any time via the link in the email or by writing to info@arionpeptides.com.
We retain order data for the period required by law, in particular the Accounting Act and the VAT Act, generally for 10 years from the end of the tax period in which the transaction took place. We retain contact form messages for the period necessary to handle the inquiry, for a maximum of 12 months.
To fulfil orders we use the following processors: Zásilkovna s.r.o. (shipping), our payment gateway provider (payment processing), Supabase (database and technical infrastructure hosting), Vercel (website hosting and traffic measurement), and Resend (sending transactional emails). The controller has a data processing agreement in place with each processor, or is bound by their equivalent processing terms.
We do not share your personal data with any third parties for marketing purposes.
Vercel, Resend and Supabase are providers based in the USA. Where their services involve a transfer of personal data outside the European Economic Area, it takes place on the basis of the European Commission’s adequacy decision (EU–US Data Privacy Framework) for certified companies, or otherwise on the basis of standard contractual clauses approved by the European Commission.
The website does not use tracking or advertising cookies. It stores in your browser only what it needs to work: the contents of your shopping cart, your age-verification confirmation and your chosen language, delivery country and currency. Most of this stays in your browser's local storage on your device; the website also remembers your language and country in functional cookies so that it takes you to the right version of the site on your next visit. This information is necessary for the service you asked for, so no consent is required.
If you arrive through a link from one of our partners, we store the partner's identifier for 30 days so that we can apply their discount code and attribute any order to them. Only the partner's identifier is stored, nothing about you; it is sent to our server only together with an order.
We keep our own shopping statistics only in aggregate: daily counts of product views, items added to the cart and visits to the checkout. No visitor identifier, no IP address, no cookies and nothing stored in your browser — these numbers cannot reveal who visited the website.
We measure website traffic with Vercel Web Analytics, provided by our hosting provider Vercel Inc. It uses no cookies and stores nothing on your device. It records the page visited, the page you came from, your country and your device and browser type. To tell visits apart, a one-way hash is derived from the request and discarded after 24 hours; your IP address is not stored. We only see the results as aggregate statistics. The legal basis is our legitimate interest in knowing how the website is used.
In connection with the processing of personal data, you have the right to access your data, to have it rectified or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can exercise your rights by emailing info@arionpeptides.com.
If you believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).
Last updated: September 28, 2026.