TideLabs Peptide Testing

Privacy Policy

Last updated: 8 June 2026

This policy explains how we collect and use personal data when you submit a peptide test request through testing.tidelabs.co.uk. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.

1. Who we are

The data controller is TL Research Ltd (trading as TideLabs), a company registered in England & Wales, company number 16935616, registered office 86-90 Paul Street, London, EC2A 4NE. For any privacy question or to exercise your rights, contact testing@tidelabs.co.uk.

2. What we collect

  • Contact and company details: your name, company name, email address(es), and phone number.
  • The email addresses you give for the Certificate of Analysis and for invoicing.
  • Details of the products you want tested (name, code/batch, tests required, specification, storage, turnaround, number of samples) and any PO/quote references.
  • The declarations you accept and the date/time you submit the request.
  • Basic technical data needed to serve the website securely.

3. Why we use it, and our lawful basis

  • To assess and respond to your request, arrange testing, invoice and communicate with you — lawful basis: taking steps at your request prior to entering a contract and our legitimate interests in operating the service.
  • To meet legal and accounting obligations — lawful basis: legal obligation.
  • To send you marketing about our services — only if you opt in; lawful basis: consent, which you can withdraw at any time.

4. Who we share it with

We share your data only as needed to provide the service:

  • Marfleet Analytical Services — the laboratory that carries out the testing. Approved request paperwork (the FRM-0186 form) is sent to them.
  • Resend — our email delivery provider, used to notify us of your request.
  • Cloudflare — our website hosting and security provider.
  • Professional advisers, or authorities where we are legally required to.

We never sell your personal data.

5. International transfers

Some providers (for example Resend and Cloudflare) may process data on servers outside the UK. Where they do, the transfer is protected by appropriate safeguards such as a UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

6. How long we keep it

We keep request and enquiry data for up to 24 months after our last contact with you, unless you ask us to delete it sooner. Records needed for financial, tax or legal reasons are kept for as long as the law requires (typically 6 years).

7. Your rights

Under data protection law you have the right to:

  • access a copy of your data;
  • have inaccurate data corrected;
  • have your data erased, or its use restricted;
  • object to processing based on legitimate interests;
  • data portability; and
  • withdraw consent at any time (where we rely on consent).

To exercise any of these, email testing@tidelabs.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

8. Cookies

We use only essential storage and do not use tracking or advertising cookies. See our Cookie Policy for details.

9. Changes

We may update this policy from time to time. The "last updated" date above shows when it was last changed.