Privacy Policy
Who is responsible
Peppies Research Supply, Bulgaria. Contact privacy@peppies.eu, or see the imprint. This policy covers this website only. The policy for peppies.eu, the app, blood testing and clinician sessions is a separate and considerably longer document, because those services process health data.
What this site collects
One thing, and only if you choose to give it: the email address you type into the form, together with which page you were on, which language you were reading, and any campaign parameters that were in the link you arrived through. Those parameters tell us which advertisement or guide brought you here. They are stored with your entry and are not shared with the advertising platform.
Our hosting provider records standard server log data — IP address, time of request, page requested, browser user agent — which is technically necessary to deliver the page and keep it secure.
What this site does not do. There are no advertising pixels here. No Meta pixel, no TikTok pixel, no analytics script, no embedded fonts or scripts loaded from anyone else's server. This site sets no cookies and stores nothing in your browser. Nothing you do here is tracked across other websites.
That is why you are not being asked to accept cookies: there are none to accept.
Why we are allowed to process it
- Your email address and the campaign parameters stored with it: your consent, given by submitting the form (GDPR Art 6(1)(a)). You can withdraw it at any time.
- Server logs: our legitimate interest in delivering and securing the site (GDPR Art 6(1)(f)).
What we do with your email address
We use it to create your account and to send you the information about verification, blood testing and clinician access described on this site. We do not sell it, rent it or pass it to advertisers. Every message includes a one-click unsubscribe.
Who processes it for us
The site is hosted by Cloudflare, Inc., which operates the servers that deliver these pages and stores form entries on our behalf. Cloudflare processes this data under a data processing agreement and the EU Standard Contractual Clauses.
How long we keep it
Your email address until you ask us to delete it or unsubscribe, whichever comes first. Server logs for the short retention period set by our hosting provider, after which they are deleted or anonymised.
Your rights
Under the GDPR you have the right to ask what data we hold and get a copy (Art 15), to have inaccurate data corrected (Art 16), to have it deleted (Art 17), to restrict how it is used (Art 18), to receive it in a portable format (Art 20), to object to processing based on legitimate interest (Art 21), and to withdraw consent at any time without affecting processing already carried out (Art 7(3)).
To use any of these, email privacy@peppies.eu. You may also complain to a supervisory authority — in Bulgaria the Commission for Personal Data Protection, or the authority where you live.
Minors
This site is not directed at anyone under 18 and we do not knowingly collect data from minors.
Changes
If this site ever starts doing more than it does today — in particular if an advertising pixel is added — this policy will be updated and a consent banner will be in place before that goes live, not after.