Privacy policy

Last updated 5 October 2026

Mossbench operates mossbench.com and supplies synthetic peptides for laboratory research use to qualified organisations. This policy describes exactly what the site collects, and it describes only what the site actually does. Questions, or any request under this policy, go to [email protected].

What we collect

Two things, and nothing else.

• What you type into the account inquiry form. Your organisation, your name and role, your work email address, the country of delivery, your registration or licence number, and the research application you describe.
• Technical data recorded with that submission. The IP address the request came from, the browser user-agent string it sent, and the country our content network reports for that connection. These exist so an inquiry can be traced and abuse can be refused.

We also keep a short-lived counter against your IP address to limit how many inquiries can be submitted from one connection in a day. It expires automatically after 24 hours.

What we do not collect

• No cookies. This site sets none, for any purpose, including analytics.
• No analytics, tracking pixels or advertising networks. There is no third-party script on this site at all.
• No payment details. No payment is taken through this website.
• No profiling and no automated decisions that produce legal effects. A person reads every inquiry.
• No special-category data. Do not send health data, identification documents or anything similar through the inquiry form. We do not ask for it and do not want it.

Why we hold it, and on what basis

To qualify a buyer before quoting, to answer your inquiry, to keep a record of who we supplied and on what stated application, and to prevent abuse of the form. Qualification is not optional for us: supplying research materials to an unverified buyer is the thing this business exists to avoid. Where a legal basis must be named, we rely on our legitimate interest in verifying buyers and operating the site securely, on taking steps at your request before entering a contract, and on our obligations to verify buyers in regulated markets.

How long we keep it

An inquiry is kept while it is under consideration and, if an account is opened, for as long as we are required to show who we supplied and against which stated application. Rate-limit counters expire after 24 hours. If you ask us to delete your inquiry and no legal obligation requires us to keep it, we delete it and confirm.

Who else processes it

The site, its storage and its email routing run on Cloudflare infrastructure, which processes this data on our instructions as our hosting provider. Outbound email is sent through Resend. Nobody else receives it. We do not sell personal data, we do not share it with advertisers, and we do not transfer it to other peptide suppliers.

Where it is processed

Cloudflare operates a global network, so your data may be processed outside the country you are in, including in the United States. We rely on our providers' contractual data-protection terms for those transfers.

Your rights

Wherever you are, we will honour the following: access to the data we hold about you, correction of anything inaccurate, erasure, restriction of processing, objection to processing, withdrawal of any consent, and a copy in a portable form. If you are in Egypt, these rights are also yours under the Personal Data Protection Law No. 151 of 2020, which applies to processing of data of individuals in Egypt regardless of where the processor is established. If you are in the UK or EU, the equivalent rights under the UK GDPR and GDPR apply.

Write to [email protected] and we will answer within 30 days. You may also complain to your national data protection authority.

Security

The site is served over HTTPS with HSTS, carries a restrictive content security policy, loads no third-party scripts, and stores inquiries in access-controlled storage. No system is perfect; if we discover a breach affecting your data we will tell you and the relevant authority as the law requires.

Children

This is a business-to-business site. It is not directed to children, and account holders attest that they are at least 21 and authorised to procure for the organisation they name.

Changes

If this policy changes, the date at the top changes with it. Material changes to how we use existing inquiry data will be notified to the email address on the account.