Privacy Policy

1. Information We Collect

Information You Provide

• Account information: name, email address, password, billing and shipping addresses, phone number.
• Order information: products purchased, order history, preferences, and any messages you send to customer support.
• Payment information: processed through our third-party payment processor (Stripe or equivalent). We do not store full card numbers on our servers.
• Research verification: optional institutional affiliation or research credentials you provide.
• Communications: emails, support tickets, and form submissions.

Information Collected Automatically

• Usage data: pages visited, time spent, clicks, scroll depth, referring URL.
• Device data: IP address, browser type, operating system, device type, screen resolution.
• Cookies and similar technologies: session cookies, analytics cookies, preference cookies (see Cookies section).

2. How We Use Information

• To process and fulfill orders (shipping, payment, customer support).
• To manage your account and authenticate logins.
• To send order confirmations, shipping updates, and transactional emails.
• To provide customer support and respond to inquiries.
• To improve the Site and our products (analytics, A/B testing).
• To comply with legal obligations, prevent fraud, and enforce our Terms.
• To send marketing communications (only with your consent; you can unsubscribe anytime).

3. Third-Party Services We Use

We share limited information with trusted third parties solely to operate our business:

• Payment processing: Stripe (or equivalent) — handles payment card data under PCI-DSS standards.
• Shipping carriers: USPS, UPS, FedEx — receives shipping address and contact info.
• Email delivery: transactional email provider (e.g., SendGrid, Mailgun) — handles order confirmations and support replies.
• Analytics: Google Analytics or equivalent — aggregated usage data, IP addresses are anonymized where possible.
• Hosting: HostArmada — stores Site data and user data under standard hosting agreements.
• Security: Wordfence or equivalent — monitors for suspicious activity.

We do not sell your personal information to third parties under any circumstances.

4. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in during a session;
• Remember items in your shopping cart;
• Analyze aggregate usage patterns;
• Improve Site performance and caching.

You can control cookies through your browser settings. Disabling cookies may affect Site functionality (for example, your cart will not persist across page loads).

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services, comply with legal obligations (including tax and accounting records), resolve disputes, and enforce our agreements. Typical retention periods:

• Order records: 7 years (for tax and accounting compliance).
• Inactive accounts: deleted or anonymized after 3 years of inactivity upon request.
• Marketing lists: until you unsubscribe.
• Support correspondence: 2 years.

6. Data Security

We implement reasonable technical and organizational safeguards to protect your information, including SSL/TLS encryption for data in transit, restricted access controls for our systems, and regular security reviews. However, no method of transmission or storage is 100% secure. You are responsible for keeping your account password confidential.

7. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate information.
• Deletion: request that we delete your account and personal information.
• Portability: request your data in a machine-readable format.
• Opt out: opt out of marketing communications at any time.
• Consent withdrawal: withdraw previously given consent.

To exercise any of these rights, email privacy@peptigo.com. We will respond within 30 days. We may require identity verification before processing your request.

8. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to delete personal information, the right to opt out of the sale or sharing of personal information (we do not sell or share), and the right to non-discrimination for exercising these rights.

9. European Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include contract performance (order fulfillment), legitimate interest (site operations and security), and consent (marketing). You have the right to lodge a complaint with your local data protection authority if you believe we have mishandled your data.

10. Children

The Site and our products are not directed at individuals under 21 years of age, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it.

11. International Transfers

Peptigo is operated from Canada. If you access the Site from outside Canada, your information may be transferred to, stored in, and processed in Canada, the United States, or other jurisdictions where our service providers operate. We use standard contractual safeguards to protect data transferred across borders.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, notify you via email or a Site notice. Continued use of the Site after changes are posted constitutes acceptance.

13. Contact

Questions about privacy? Email privacy@peptigo.com.