Who We Are
Pep IQ is operated by Tom Fogg, a sole trader trading as Pep IQ, who is the data controller for the personal data described here. We are registered with the UK Information Commissioner's Office (ICO), registration number C1958163. Pep IQ is intended for adults aged 18 or over only. For any privacy query, contact hello@pepiq.co.uk.
What We Collect
When you use this Site we may collect: your email address (if you subscribe or contact us), payment information processed by our payment provider (we do not store card details), and basic usage analytics (pages visited, time on site — no personally identifiable information).
Protocol Tracker (health data). If you use the optional Protocol Tracker, we store the compounds, protocols, doses and timing you choose to record, along with your dose logs. Because this relates to your health, it is special-category data under Article 9 of the UK GDPR, and we treat it as such from the moment you save anything. We never require you to tell us why you track something or any medical condition.
How We Use Your Information
We use your information to: provide and manage your subscription, send you updates about the Site if you opt in, respond to enquiries, and improve the Site based on aggregate usage data. We do not sell your personal data to third parties.
Our lawful bases (UK GDPR). Account and payment: performance of a contract. Marketing emails and push reminders: your consent. Analytics: our legitimate interest in improving the Site. Protocol Tracker health data: your explicit consent (Article 9(2)(a)), which you give by a clear opt-in when you first save, recorded with a timestamp. You can withdraw consent at any time, which stops further processing and lets you delete your tracker data; withdrawal does not affect anything done beforehand.
Cookies & Tracking
This Site uses minimal cookies necessary for functionality (session management, subscription verification). For analytics we use Plausible, a privacy-friendly, cookieless service that records only aggregate usage (pages visited, time on site) with no personally identifiable information.
We also use the Reddit advertising pixel to measure the effectiveness of our advertising. It records page visits and sign-up events so we can understand which adverts bring people to Pep IQ. We have disabled advanced matching, which means we do not pass your email address, name or other identifying details to Reddit — only the fact that a page visit or sign-up occurred. Reddit's own privacy policy governs the data they receive. You can disable cookies in your browser settings, and browser-level ad or tracker blockers will also block the Reddit pixel — some Site functionality may be affected.
Push Notifications
Pep IQ offers optional browser push notifications for dose reminders. These are:
- Strictly opt-in — your browser will ask for permission before any notifications are sent. We will never send notifications without your explicit consent.
- Functional only — notifications are used solely to remind you of dose times you have set yourself in your personal protocol tracker. We do not send marketing messages via push notifications.
- Revocable at any time — you can disable notifications at any time through your browser settings or within the Pep IQ platform.
- Processed by OneSignal — push notifications are delivered via OneSignal (onesignal.com), a third-party push notification service. OneSignal processes your browser token to deliver notifications. Their privacy policy is available at onesignal.com/privacy.
No notification data is used for marketing, profiling, or shared with any party other than OneSignal for delivery purposes.
Third-Party Services
We use the following providers strictly to run the service, each under a data-processing agreement: Supabase (database, authentication and hosting of your account and tracker data); Stripe for payment processing (they handle card data; we do not store it); Loops for sending emails you have subscribed to; OneSignal for push reminders (only if you enable them); Netlify for website hosting; and Plausible for cookieless analytics. We also use the Reddit advertising pixel to measure advert performance, as described under Cookies & Tracking above. Some of these providers process data outside the UK; where they do, the transfer is covered by appropriate safeguards (UK adequacy regulations or the UK International Data Transfer Agreement). Other than these providers, we do not share your personal data, and we do not sell it.
Data Retention
We retain your account and Protocol Tracker data for as long as your account is active. If you delete specific tracker entries they are removed; if you close your account, your account and tracker data are deleted within 30 days. Email-list data is kept until you unsubscribe. Payment records are retained as required by tax and accounting law (typically six years). You may request deletion of your data at any time by emailing hello@pepiq.co.uk.
Your Rights (UK GDPR)
Under UK GDPR you have the right to: access the personal data we hold about you, correct inaccurate data, request erasure of your data, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time. To exercise any of these, email hello@pepiq.co.uk and we will respond within one month. You also have the right to complain to the ICO (ico.org.uk) — though we would appreciate the chance to put things right first.
Contact
For privacy enquiries, contact hello@pepiq.co.uk. Data controller: Tom Fogg trading as Pep IQ · ICO registration C1958163.
© 2026 Pep IQ · pepiq.co.uk