Effective date: 24 October 2026.
KCompounds ("we", "us") operates the KCompounds platform at kcompounds.com and is the data controller for the personal data described in this Policy.
Contact for privacy matters: contact@kcompounds.com
1. Data we collect
Account data. Email address, display name, password hash, account settings, and account activity.
Order data. Products ordered, order value, the vendor you purchased from, the delivery name and address you provide, order status, and order-issue reports.
Payment data. Orders are paid in cryptocurrency through our payment processor. We record the coin, the network, the payment address, the amount and the transaction identifier of each payment, which are inherently public on the relevant blockchain, and any refund address you give us. We do not collect bank account or card details, and payment records are never shared with vendors beyond the amount and status of the order they are fulfilling.
Content you submit. Reviews, order reports, evidence you attach (such as screenshots or documents), messages to vendors sent through the platform, and correspondence with us. Review evidence may contain personal data; we redact personal identifiers before publication where feasible.
Community intelligence data. The platform aggregates publicly posted content from research-chemical community forums and groups (including messages, usernames and dates) to build vendor histories, ratings evidence and the vendor-mention search. Where this content contains personal data (such as a username attached to a review), we process it on the basis described in Section 2, minimize and pseudonymize it where feasible, and honor objection requests as described in Section 7.
Technical data. IP address, device and browser information, and usage analytics (see the Cookie Policy).
2. Why we process it and on what legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Providing your account and the platform | Contract (Art. 6(1)(b)) |
| Processing orders and payments; passing delivery details to the vendor you bought from | Contract (Art. 6(1)(b)) |
| Publishing reviews and building vendor ratings, histories and intelligence search from first-hand and community evidence | Legitimate interests (Art. 6(1)(f)): enabling informed, safer purchasing decisions in an opaque market; freedom of expression and information |
| Fraud prevention, review-integrity checks, security, enforcement of our Terms | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance, including sanctions screening, tax and accounting | Legal obligation (Art. 6(1)(c)) |
| Service emails about your account and orders | Contract (Art. 6(1)(b)) |
| Marketing emails (if any) | Consent (Art. 6(1)(a)); opt-out at any time |
| Analytics cookies | Consent (Art. 6(1)(a)); see Cookie Policy |
We do not sell personal data and we do not use it for third-party advertising.
3. Who we share it with
- The vendor you buy from. When you place an order, the vendor receives the delivery name and address you provided and your order details, so it can fulfil the order. Vendors are independent controllers of the data they receive and are contractually bound to use it only for fulfilment and legal compliance, and not for marketing without your consent. Many vendors are located outside the UK, including in China; by placing an order with such a vendor, your delivery details are transferred to it in that country.
- Payment processors, to collect payments and process refunds.
- Service providers (hosting, database, email delivery, error monitoring and analytics providers), acting under our instructions as processors.
- Professional advisers, authorities and successors, where required by law, to enforce our Terms, to protect rights and safety, or in connection with a transfer of the platform business.
4. International transfers
We are UK-based; our service providers may process data in the UK, EEA and United States, under the UK GDPR transfer safeguards (adequacy regulations or the applicable standard contractual clauses / UK Addendum). Transfers of delivery details to non-UK vendors are made under Article 49(1)(b)/(c) UK GDPR as necessary for the performance of, or conclusion of, your contract with that vendor. Countries such as China do not have UK adequacy status and local law there may not protect your data to UK standards; this is inherent to ordering from an overseas vendor and we cannot control the vendor's local handling of the delivery data it needs to ship to you.
5. Retention
Account data is kept while your account is active and deleted or anonymized within 12 months of closure, except where longer retention is required (for example, transaction records for tax purposes, typically 6 years). Transaction records are retained for the statutory period. Published reviews and the evidence records behind vendor ratings are retained indefinitely in pseudonymized form, because the historical record is the service.
6. Security
Data is encrypted in transit and access is restricted on a need-to-know basis. Payment records are held by our payment processor and in our order records, restricted to the systems that create and reconcile orders. No system is perfectly secure; we will notify you and the ICO of any breach where required by law.
7. Your rights
Under the UK GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to processing (including any processing based on legitimate interests, such as community intelligence data referencing you), to data portability, and to withdraw consent where processing is based on consent. To exercise any right, contact contact@kcompounds.com. We respond within one month. Erasure and objection requests affecting published evidence records are balanced against the platform's legitimate interest in maintaining an accurate historical record; where we retain, we will tell you why, and we will pseudonymize where feasible.
You can complain to the Information Commissioner's Office (ico.org.uk). If you are in the EEA or elsewhere, you may have equivalent rights under local law, exercisable the same way.
8. Age
The platform is for users aged 18 and over. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
9. Changes
We will post any updated Policy here with a new effective date and notify you of material changes via the platform or email.
Questions about this document go through the contact page.