Privacy policy
Last updated: 14 October 2026
This Privacy Policy explains how Electric Lotus s.r.o., Říční 456/10, Praha 1, 118 00, Czech Republic ("we", "us"), the operator of Peptigram, processes your personal data when you visit our shop, place an order or contact us. We are the controller of your data under the General Data Protection Regulation (GDPR). The shop runs on Shopify, which acts as our processor.
What we collect
Contact and order data: name, billing and shipping address, email address, phone number, ordered items, order history.
Payment data: payment method, transaction status and amounts. Card details are handled by our payment providers; we do not store them.
Communication data: messages you send us, for example through the contact form.
Device and usage data: IP address, browser and device information, pages viewed, cart activity, collected through cookies and similar technologies.
Marketing data: your newsletter subscription and how you interact with our emails, if you subscribe.
Why we process it, and on what legal basis
Fulfilling orders and contracts (Art. 6(1)(b) GDPR): processing payments, shipping, returns, customer support.
Legal obligations (Art. 6(1)(c)): accounting, tax, customs and anti-fraud duties.
Legitimate interests (Art. 6(1)(f)): securing the shop, preventing fraud and abuse, improving the shop and measuring its performance, enforcing our terms.
Consent (Art. 6(1)(a)): marketing emails, non-essential cookies and tracking. You can withdraw consent at any time with effect for the future.
Who receives your data
We share data only where needed: Shopify (shop platform and checkout), payment providers, shipping carriers and fulfilment partners, email and marketing service providers where you have subscribed, analytics and advertising partners where you have consented, IT and security providers, and authorities where the law requires. These providers process data on our behalf or as independent controllers under their own privacy policies.
Transfers outside the EU and EEA
Some providers process data in countries outside the European Economic Area, for example the United States. In that case we rely on an adequacy decision, the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
Cookies
We use essential cookies to run the shop, such as the cart and checkout. Other cookies, for analytics and marketing, are used only with your consent where the law requires it. You can change your choice at any time and delete cookies in your browser settings.
How long we keep data
We keep order and invoice data as long as tax and accounting law requires, up to 10 years. Contact enquiries are deleted when the matter is closed, normally within 3 years. Marketing data is kept until you unsubscribe or withdraw consent. Cookie data is kept for the periods stated in the cookie banner.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to receive your data in a portable format, to object to processing based on legitimate interests and to withdraw consent. To use these rights, contact us through the contact form. You also have the right to complain to a supervisory authority, in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or to the authority in your country of residence.
Security
We use technical and organisational measures to protect your data, including encrypted connections and access controls. No transmission over the internet is completely secure, so we cannot guarantee absolute security.
Age
Our shop is not directed at persons under 18, and we do not knowingly collect data from them.
Changes
We may update this policy. The current version is always available on this page.
Contact
Electric Lotus s.r.o., Říční 456/10, Praha 1, 118 00, Czech Republic. Use the contact form for any privacy request.