Privacy Policy
Table of Contents
1.Information We Collect
Personal Information You Provide:
- Name, email address, phone number, and company/institution name
- Billing and shipping addresses
- Payment information (processed securely by our payment processors)
- Account credentials and preferences
- Research interests and order history
- Communications with our team
Automatically Collected Information:
- IP address and device information
- Browser type and version
- Pages visited and time spent on Site
- Referring URLs and exit pages
- Cookie data and tracking technologies
2.How We Use Your Information
We use your information for legitimate business purposes including:
- Processing and fulfilling your orders
- Verifying your research qualifications
- Communicating about orders, account status, and support
- Improving our website, products, and services
- Complying with legal and regulatory requirements
- Preventing fraud and unauthorized activities
- Sending important notices and updates
We do NOT sell your personal information to third parties for marketing purposes.
3.Legal Basis for Processing
Under GDPR and similar regulations, we process your data based on:
- Contract Performance: To fulfill orders and provide services
- Legal Obligations: For tax, compliance, and record-keeping
- Legitimate Interests: To improve our services and prevent fraud
- Consent: For marketing communications (you may opt out anytime)
4.Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. Types of cookies we use:
- Essential Cookies: Required for site functionality (shopping cart, login)
- Analytics Cookies: Help us understand how visitors use our site
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. However, disabling cookies may affect site functionality.
5.Data Sharing and Disclosure
We may share your information with:
- Service Providers: Payment processors, shipping carriers, IT services
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In case of merger, acquisition, or bankruptcy
All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.
6.Data Security
We implement industry-standard security measures to protect your data, including:
- SSL/TLS encryption for data transmission
- Encrypted password storage using bcrypt
- Regular security audits and updates
- Access controls and authentication protocols
- Secure data centers with physical safeguards
While we strive to protect your data, no transmission method is 100% secure. You use our Site at your own risk.
7.Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy, including:
- Active accounts: Duration of account + 2 years for tax/legal purposes
- Order history: 7 years for financial record-keeping
- Communication records: 3 years from last interaction
- Analytics data: 26 months (anonymized after 14 months)
You may request deletion of your data at any time, subject to legal retention requirements.
8.Your Privacy Rights
Depending on your location (GDPR, CCPA, etc.), you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (Right to be Forgotten)
- Restriction: Limit how we use your data
- Portability: Receive your data in a machine-readable format
- Object: Opt-out of certain processing activities
To exercise these rights, contact us at privacy@peptide.com. We will respond within 30 days.
9.International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) for EU-US transfers
- Data Processing Agreements with all service providers
- Compliance with GDPR and other applicable regulations
10.Children's Privacy
Our Site is not intended for individuals under 21 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.
11.Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to read their privacy policies before providing any personal information.
12.Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending email notifications to registered users (for significant changes)
Your continued use of the Site after changes constitutes acceptance of the updated policy.
13.Contact Information
For privacy-related inquiries, please contact:
Data Protection Officer (DPO)
Email: dpo@peptide.com
Phone: +1 (555) 123-4567
Address: 123 Research Drive, Wilmington, DE 19801
You also have the right to lodge a complaint with your local data protection authority.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
