Privacy Policy

Personal Information You Provide

When you create an account, place an order, or contact us, we collect information that you voluntarily provide, including:

• Identity data: Full name, username, and account credentials
• Contact data: Email address, phone number, billing and shipping addresses
• Financial data: Payment method details (processed securely by third-party payment processors — we never store full card numbers)
• Transaction data: Order history, purchase amounts, items ordered, and delivery details
• Communication data: Support tickets, live chat transcripts, emails, and feedback you send us

Information Collected Automatically

When you visit our website, we automatically collect certain technical data through cookies and similar technologies:

• Device data: IP address, browser type and version, operating system, device type
• Usage data: Pages visited, time spent on pages, click patterns, referring URL, and site navigation paths
• Location data: General geographic location derived from your IP address (country and city level only)

We use your personal information exclusively for legitimate business purposes, including:

• Order fulfillment: Processing, shipping, and delivering your peptide orders
• Account management: Creating and maintaining your customer account, order history, and saved preferences
• Customer support: Responding to inquiries, resolving issues, and processing returns or refunds
• Communications: Sending order confirmations, shipping updates, tracking information, and COA documents
• Marketing (opt-in only): Newsletters, product updates, and promotional offers — only if you have explicitly opted in
• Site improvement: Analyzing usage patterns to improve website performance, navigation, and user experience
• Fraud prevention: Detecting and preventing fraudulent transactions and unauthorized access
• Legal compliance: Meeting regulatory obligations, tax requirements, and responding to lawful requests

We share your personal data only with trusted partners who are essential to operating our business. We never sell your data. Information may be shared with:

• Payment processors: Stripe, PayPal, and cryptocurrency payment gateways to securely process your transactions
• Shipping carriers: USPS, UPS, FedEx, DHL, and PostNL to fulfill and deliver your orders
• Analytics providers: Google Analytics to understand website traffic and improve user experience (anonymized data only)
• Email service providers: Mailchimp or similar services for transactional emails and opted-in marketing
• Legal authorities: When required by law, subpoena, court order, or to protect our rights and safety

All third-party service providers are contractually bound to protect your data and use it only for the purposes specified by us.

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality. Most browsers allow you to block or delete cookies — refer to your browser's help section for instructions.

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL encryption on all pages, including checkout and account areas
• PCI-DSS compliant payment processing — credit card details are never stored on our servers
• Firewalls and intrusion detection systems monitoring for suspicious activity 24/7
• Regular security audits and vulnerability assessments conducted by qualified professionals
• Employee access controls — only authorized personnel can access customer data on a need-to-know basis
• Encrypted backups stored in geographically distributed, secure data centers

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. If you suspect unauthorized access to your account, contact us immediately at sales@researchpeptidecoa.com.

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy or as required by law:

• Account data: Retained while your account is active and for 2 years after your last login
• Order and transaction data: Retained for 7 years for tax, legal, and accounting compliance
• Communication records: Retained for 3 years after the last interaction
• Analytics data: Anonymized and aggregated data retained indefinitely for trend analysis

Upon expiration of the retention period, your data is securely deleted or anonymized. You can request earlier deletion at any time — see "Your Rights" below.

Depending on your location, you may have the following rights under applicable data protection laws (including GDPR and CCPA):

• Right to access: Request a copy of all personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent for marketing communications at any time
• Right to non-discrimination (CCPA): We will not discriminate against you for exercising your rights

Our website may contain links to third-party websites, services, or platforms. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

Third-party services used on our site include but are not limited to Google Analytics, Stripe, PayPal, Mailchimp, Cloudflare, and social media platforms. Each service operates under its own privacy policy and data handling practices.

Our website and services are not intended for individuals under the age of 18 years. We do not knowingly collect personal information from minors. If we discover that a minor has provided us with personal data, we will delete it immediately.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at sales@researchpeptidecoa.com so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage for at least 30 days
• Send an email notification to registered account holders for significant changes

Your continued use of our website after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out:

• Email: sales@researchpeptidecoa.com
• Website: researchpeptidecoa.com/contact-us
• Location: United States

We aim to respond to all privacy-related inquiries within 30 calendar days. For urgent security concerns, please include "URGENT" in your email subject line.