Last updated: October 2026
01Who is responsible
The controller responsible for this website is Innovative Synthesis Solutions Ltd. ("we", "us"). You can reach us through the contact page of this website.
02Which data we process
Project inquiry form: company, name, email address, country, and optionally phone number and website; the production formats, peptides, single peptide or blend, concentration and volume, branding and packaging choices, estimated quantity, target timeline and your message.
Contact form: name, optionally company, email address and your message.
Technical data: when you visit the website, our hosting provider processes technical information such as your IP address, browser type, the pages requested and the time of the request. This is necessary to deliver the website and to keep it secure.
Website statistics: we use privacy-friendly, cookieless analytics that count page views and performance metrics in aggregated form (see “Analytics” below).
03Purposes and legal bases
- Answering your inquiry and preparing a possible offer or project — Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request).
- Answering general messages — Art. 6(1)(f) GDPR (our legitimate interest in responding to people who contact us).
- Operating, securing and protecting the website against abuse, including a short-lived limit on the number of form submissions per connection — Art. 6(1)(f) GDPR.
- Aggregated, cookieless website statistics to improve the website — Art. 6(1)(f) GDPR.
Providing data through the forms is voluntary. Without the required fields we cannot answer your inquiry.
04How form submissions are handled
When you send a form, its content is delivered to us by email. The website itself does not store submissions in a database. To limit abuse, your IP address is kept in the server's memory for up to ten minutes. If we have set up a confirmation email, you receive a short, standard confirmation that we received your message.
05Service providers
We use the following processors, bound by data processing agreements:
- Vercel Inc. — hosting of the website, server logs, and cookieless Web Analytics and Speed Insights.
- Resend — delivery of the emails generated by the forms.
These providers may process data outside the European Economic Area. Where this happens, the transfer is based on appropriate safeguards as required by Chapter V GDPR.
06How long we keep data
Inquiry and contact emails are kept as long as needed to handle your request and any resulting business relationship, and are then deleted unless statutory retention obligations require us to keep them longer.
Server logs are kept by our hosting provider for a limited period for security and operational purposes.
07Analytics and cookies
This website does not use cookies for tracking or advertising. Vercel Web Analytics and Speed Insights work without cookies and report page views, anonymous events (such as “inquiry sent”, without any form content) and performance metrics only in aggregated form. They do not identify you or follow you across websites.
08Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have your data erased (Art. 17),
- restrict the processing (Art. 18),
- receive your data in a portable format (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- lodge a complaint with a data protection supervisory authority (Art. 77).
To exercise your rights, contact us through the contact page of this website.
09Changes to this policy
We may update this policy when the website or the law changes. The current version is always available on this page.