This Privacy Policy explains how Ceilie Consulting (“Company”, “we”, “our”, or “us”) collects, uses, stores, shares, and protects personal information through the Website and related onboarding, ordering, support, and account‑management processes. This policy should be read together with the Terms of Use and other active legal documents made available through the Website. (Original reference: “The Peptide Clinic” is defined as the operator in the Terms of Use. )
For purposes of the personal information processed through the Website, Ceilie Consulting is the responsible party for product‑supply operations carried out through the Website.
Depending on how you use the Website, we may collect and process:
We do not intentionally store full raw card numbers in our own application records. Payment information is handled by the external payment processor, and we may receive tokenised or limited transaction metadata from that processor.
We may collect personal information:
We may process personal information for the following purposes:
Where South African data‑protection law applies, we process personal information on one or more of the following grounds:
If consent is withdrawn, that withdrawal does not affect processing already undertaken lawfully before withdrawal. Some services may no longer be available if the withdrawn consent was necessary for those services.
We may share personal information with:
We do not sell personal information as a standalone commercial data product.
The Website may use infrastructure or service providers located outside South Africa. As a result, personal information may be processed, stored, or accessed in jurisdictions other than the country in which the user is located. Where cross‑border processing occurs, we aim to use service providers and transfer arrangements that are appropriate to the sensitivity of the information and the purpose of the processing.
We may use cookies, local storage, session technologies, and similar tools to:
You may be able to restrict some cookies through browser settings, but doing so may affect Website functionality.
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including compliance, accounting, dispute handling, fraud review, and security needs. Unless longer retention is required or justified by law, audit needs, or active disputes, customer account and transaction information may be retained for up to 12 months after prolonged inactivity. We may retain selected records for longer where necessary to:
We use administrative, technical, and organisational measures designed to reduce the risk of unauthorised access, loss, misuse, alteration, or disclosure of personal information. Those measures may include:
No system can be guaranteed to be completely secure, and you use internet‑connected services at your own risk.
Subject to applicable law and reasonable identity verification, you may have rights to:
Where South African law applies, these rights may arise under POPIA and, where relevant, PAIA. We may decline or limit a request where the law permits us to do so, including where disclosure would prejudice the rights of others, legal proceedings, or security controls.
We do not currently operate broad standalone email marketing campaigns as a core service feature. Operational or transaction‑related messages may contain limited service information, updates, or account‑related notices. If we introduce broader marketing communications in the future, we may do so only on a lawful basis and provide any opt‑out mechanism required by law.
The Website is intended for adults and not for persons under 18 years of age. We do not knowingly solicit or maintain accounts for minors. If you believe a minor has provided personal information to us, contact us so that we can investigate and take appropriate action.
The Website may contain links to third‑party websites or rely on third‑party services such as payment processors, hosting providers, or couriers. We are not responsible for the privacy practices of third‑party sites or services except to the extent required by law.
Privacy requests, correction requests, objections, complaints, and general data‑protection enquiries may be sent to sales@ceile.co.za.\* (replace with your actual domain email). (Original reference email: support@thepeptide.clinic. ) If we publish more specific Information Officer particulars or formal request channels, this policy will be updated accordingly. If you believe your personal information has been processed unlawfully, you may also have the right to complain to the Information Regulator in South Africa, where applicable.
We may update this Privacy Policy from time to time. The current version published on the Website is the version that applies from its effective publication date.
