Scope and Accountability

This Privacy Policy applies to personal information collected through this website, our online store, customer accounts, checkout, contact forms and related customer-service interactions.

Peptora Peptide Labs is responsible for personal information under its control and designates responsibility for privacy compliance within the organization. Our practices are intended to reflect applicable Canadian private-sector privacy requirements, including the principles of the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable.

Information We Collect

The information collected depends on how you use the website.

Information you provide

• Identity and contact information: name, email address, telephone number, billing address and shipping address.
• Order information: products ordered, quantities, price, order status, delivery details, transaction references and communications concerning an order.
• Account information: username, account preferences and password credentials stored in protected or hashed form where customer accounts are enabled.
• Inquiry information: information submitted through our contact form or sent during customer-support communications.
• Marketing preferences: consent and unsubscribe choices where optional promotional communications are offered.

Information collected automatically

• IP address, browser type, device type, operating system, referring pages, pages viewed, timestamps and approximate geographic region.
• Cookie identifiers, session information, cart contents and information used to maintain checkout and account functionality.
• Security and diagnostic information, such as attempted logins, error records and activity used to protect the website.

Please do not submit medical information, dosing information or other sensitive health information through our forms. Peptora does not provide medical advice or treatment services.

How We Use Personal Information

We may collect, use and process personal information for the following purposes:

• to create and manage customer accounts;
• to process orders, payments, confirmations, shipping, delivery, cancellations and permitted refunds;
• to communicate about products, orders, batches, certificates of analysis, verification records and support inquiries;
• to operate carts, checkout, account features and other website functionality;
• to prevent fraud, abuse, unauthorized access and security incidents;
• to diagnose technical problems, improve website performance and understand general site usage;
• to maintain business, tax, accounting, transaction and compliance records;
• to enforce our terms, protect our rights and respond to lawful requests; and
• for other purposes identified when the information is collected or otherwise permitted by law.

We limit collection to information reasonably needed for the purposes identified in this policy or at the time of collection.

Consent and Other Permitted Processing

By voluntarily providing personal information, you consent to its collection, use and disclosure for the purposes communicated to you, subject to applicable law. Consent may be express or implied depending on the nature and sensitivity of the information and the circumstances.

You may withdraw consent for optional uses by contacting us, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide a requested service, complete an order or maintain an account. We may also collect, use or disclose information without consent where authorized or required by law.

Cookies and Similar Technologies

Cookies are small files placed on a browser or device. This website and its service providers may use cookies or similar technologies for the following purposes:

You can manage cookies through your browser and, where available, the site’s cookie controls. Blocking essential cookies may interfere with cart, account or checkout functions. The exact cookies present may change as website tools are added, removed or updated.

Service Providers and Disclosure

We may disclose information to service providers that perform functions for us, such as:

• website hosting, maintenance, security, backups and content delivery;
• e-commerce, order and customer-account functionality;
• payment processing and fraud prevention;
• shipping, delivery and order fulfilment;
• email delivery, customer support and form processing;
• analytics and website performance tools; and
• professional, accounting, compliance or legal services.

Providers receive only the information reasonably required for their functions and may process information under their own terms and privacy practices. Some providers may store or process information outside your province or outside Canada. When information is processed in another jurisdiction, it may be accessible to courts, law-enforcement agencies or regulators under that jurisdiction’s laws.

We may also disclose information when required or permitted by law; to investigate fraud, abuse or security issues; in connection with a business transaction such as a sale, reorganization or financing; or with your direction or consent.

Payment Information

Payments may be handled by third-party payment providers or financial institutions. The provider may collect payment credentials, billing details, transaction amounts, device information and fraud-prevention data directly from you. Peptora generally receives confirmation, transaction references and information needed to administer the order rather than complete payment-card credentials.

Your payment provider’s own privacy policy and terms apply to its processing. Available payment methods may change, and this section should be read together with the information displayed during checkout.

Data Retention

We retain personal information only for as long as reasonably necessary for identified purposes or to satisfy legal, tax, accounting, fraud-prevention, dispute-resolution and record-keeping requirements. Retention periods vary by record type.

For example, order and transaction records may be retained longer than abandoned-cart or routine inquiry information because business and legal obligations differ. When information is no longer required, we take reasonable steps to delete, destroy or anonymize it, subject to backup cycles and legal holds.

Safeguards and Privacy Breaches

We use reasonable administrative, technical and organizational safeguards appropriate to the sensitivity, amount, format and storage of the information. These may include access controls, authentication, encrypted transmission, software maintenance, backups, provider controls and limiting access to people who require it for legitimate duties.

No internet transmission or storage system can be guaranteed completely secure. If a breach of security safeguards occurs, we will assess it and take steps required by applicable law, which may include record keeping, notification to affected individuals and reporting to the Office of the Privacy Commissioner of Canada where the applicable legal threshold is met.

Access, Correction and Privacy Choices

Subject to applicable law and permitted exceptions, you may request:

• information about whether we hold personal information about you;
• access to personal information under our control;
• correction of inaccurate or incomplete information;
• withdrawal of consent for optional processing; or
• deletion or account closure where retention is not required.

We may need to verify your identity before responding. We may refuse or limit a request where permitted by law—for example, where disclosure would reveal another person’s information, privileged information or confidential commercial information. If we cannot fulfil a request, we will explain the reason where required.

Email and Marketing Communications

Transactional messages concerning an inquiry, account, order, security matter or service request are not promotional messages. If we offer optional marketing communications, we will send them in accordance with applicable requirements and the choices presented to you.

You may unsubscribe from promotional email using the unsubscribe mechanism in the message or by contacting us. Unsubscribing from marketing does not prevent necessary transactional or service communications.

Minors

This website and its products are intended for adults and legitimate laboratory research purposes. We do not knowingly collect personal information from children. If you believe a minor has submitted personal information, please contact us so we can assess and address the matter.

External Websites and Third-Party Links

The website may link to third-party websites, including laboratories, verification services, shipping providers or informational resources. We do not control those websites and this Privacy Policy does not govern their practices. Review the privacy policy of the third party before providing information.

Changes to This Privacy Policy

We may update this policy to reflect changes in our website, services, providers or legal obligations. The revised policy will be posted on this page with a new effective date. Material changes may also be communicated through the website or another appropriate method.