Privacy Policy

Last updated: July 2, 2026

Peptide Tech LLC, doing business as Peptech ("Peptech," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices available to you. By using our website, creating an account, or placing an order, you acknowledge this policy.

1. Information We Collect

We collect information you provide directly, including when you:

• Place an order: Name, email address, billing and shipping addresses, phone number, date of birth when supplied for age verification, research-use affirmations, and related order details.
• Create an account: Name, email address, and a password hashed through Supabase Auth. We do not store plaintext passwords.
• Contact us: Information you include in support messages, tickets, or other correspondence.
• Subscribe to marketing: Email address and consent preferences for promotional communications.

We also collect certain technical information automatically, such as IP address, browser type, device identifiers, referring URLs, pages viewed, and cookie identifiers. We use this data for site operation, analytics, fraud prevention, and security.

2. Payment Information

Peptech does not receive, store, or transmit full card numbers, CVV codes, or expiration dates on our servers. Card payments are tokenized and processed through NMI (Network Merchants, Inc.), a PCI DSS Level 1 compliant payment gateway. We may receive a payment token and the last four digits of your card for reference.

Bitcoin payments are processed self-custodially. We generate a unique Bitcoin address for your order and verify payment on the public blockchain through block-explorer APIs. ACH and eDebit payments are processed through Mercury; we receive payment status but do not access your full bank credentials.

3. How We Use Your Information

• Processing, fulfilling, and supporting orders
• Maintaining accounts and order history
• Sending transactional emails such as confirmations and shipping updates
• Sending marketing communications only where you have opted in
• Improving our website, products, and customer experience
• Detecting fraud, abuse, and unauthorized activity
• Complying with law, regulation, and valid legal process

4. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential operation: Cart, authentication, security, and compliance features required for the site to function.
• Preferences: Remembering settings such as age-gate status.
• Analytics: Understanding site usage through services such as PostHog and Vercel Analytics.
• Marketing measurement: Where permitted, measuring campaign and abandonment flows through providers such as Omnisend and advertising partners.

You may decline non-essential cookies through our consent controls where available. Browser settings may also limit cookies, though some site features may not work correctly if essential cookies are disabled.

5. How We Share Information

We do not sell or rent your personal information. We share information only with service providers that help us operate the business, such as payment processors, shipping carriers, email providers, analytics vendors, and hosting infrastructure. These providers may use the information only to perform services for us and subject to contractual confidentiality and security obligations. We may also disclose information when required by law or to protect rights, safety, and security.

6. Data Retention

• Order and tax records: Retained as required for accounting, tax, fraud prevention, and legal compliance, typically for at least seven years.
• Account information: Retained while your account remains active and as needed thereafter for legal, security, and operational purposes.
• Marketing records: Retained until you withdraw consent or unsubscribe.
• Analytics: May be retained in aggregated or de-identified form.

Even after a valid deletion request, we may retain certain information where retention is required or permitted by law, including completed order records, payment dispute evidence, fraud-prevention logs, and anonymized statistical data.

7. Your Privacy Rights and How to Exercise Them

Depending on where you live, you may have rights to know what personal information we maintain, to request access or correction, to request deletion, to opt out of certain processing, or to receive information in a portable format. Peptech does not sell personal information for monetary consideration.

Privacy rights requests — including requests to delete personal data — are not processed online or by email. To submit a verifiable request, you must send a written letter by U.S. Mail to the address below. We do not accept deletion requests by email, web form, phone, fax, or social media.

Your letter must include, at minimum:

• Your full legal name
• The email address associated with your Peptech account or orders
• A clear statement of the request (for example, deletion of personal data, access to personal data, or correction of inaccurate information)
• Enough information for us to verify your identity and match the request to the correct customer record
• A current mailing address where we may send our written response
• Your signature and the date

If you are an authorized agent acting on behalf of a consumer, your letter must also include proof of authorization acceptable under applicable law. We may request additional verification before fulfilling a request.

We will respond to verifiable written requests within the time required by applicable law, typically within 45 days. We may extend that period where permitted by law after notifying you in writing. We do not discriminate against consumers who exercise privacy rights.

For browser-based opt-out of certain analytics and marketing cookies, see our Do Not Sell or Share page. That opt-out does not delete account or order records and is not a substitute for a written deletion request.

8. Children's Privacy

Our services are intended only for individuals 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected such information, we will delete it as required by law.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and access controls. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

10. International Users

Our services are operated in the United States. If you access the site from outside the U.S., your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Your continued use of the site after changes become effective constitutes acceptance of the revised policy.

12. Contact for Privacy Requests

All privacy-rights requests, including requests to delete personal data, must be submitted by written letter to:

We do not process privacy-rights requests sent by email. General customer support remains available through our contact page, but support channels cannot substitute for a written privacy request.