Privacy policy

Only what an order or an account actually needs:

• Order details — your name, email address, shipping address, what you ordered, and the order’s status and history.
• Account details, if you create one — your email address and a password held by our authentication provider in hashed form. We never see your password.
• Messages you send us — anything you write in the contact form or by email, and our replies.
• Technical basics — a coarse client identifier derived from your connection, used to rate-limit forms and lookups so they cannot be abused.
• Marketing consent, if you opt in — your email address and the fact and time of the opt-in.

We do not ask for, and have no use for, information about your health. Please do not send us any.

Card details are entered into, and held by, a third-party payment processor. They never pass through our own storage: we keep a reference to the payment and the amount, not your card number. Where a bank transfer is offered instead, the transfer happens between your bank and ours, outside this site.

• Taking, fulfilling, shipping, and refunding orders.
• Sending transactional email — confirmations, shipping updates, refunds.
• Answering your messages.
• Preventing abuse and fraud, and keeping the site up.
• Meeting our tax and record-keeping obligations.
• Sending marketing email, only if you asked for it.

Service providers, each doing one job and only receiving what that job needs. We do not sell your personal information, and we do not share it for advertising.

• A payment processor, to take and refund payment.
• A hosting and database provider, which stores the site’s data, and an authentication provider for accounts.
• An email provider, to deliver transactional and marketing email.
• A shipping provider and the carrier, to buy a label and return tracking events — they receive the delivery address.
• An address-autocomplete provider, which sees what you type into the address field at checkout so it can suggest a complete address.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

We use what the site needs to work, and nothing for advertising. There is no advertising or cross-site tracking tag on this site.

• A session cookie, set only when you sign in, so you stay signed in. Signing out clears it.
• Your cart, kept in your browser’s own storage rather than on our servers. Clearing site data clears the cart.

Marketing email is opt-in. Every marketing message carries an unsubscribe link, and unsubscribing takes effect for future marketing sends. Transactional email about an order you placed is not marketing and is not affected by unsubscribing.

Order records are kept while we need them to run the business and to meet tax and record-keeping obligations. An order that is created but never paid for is deleted automatically by a scheduled sweep.

Not set yet: Peppers Peptides LLC has not fixed a retention period for order and account records. Rather than print a number nobody has agreed to, we say what is true today: records are kept until they are no longer needed for the purposes above, and you can ask us to delete yours.

Write to support@peppers.bio to ask for a copy of what we hold about you, to correct it, or to ask us to delete it. Depending on where you live you may have these rights by law; we will honour a reasonable request either way, apart from records we must keep for tax or legal reasons.

We will need enough information to be sure the request is really from you, which usually means writing from the email address on the order.

This site is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.

Peppers Peptides LLC is responsible for this site’s data. Questions go to support@peppers.bio or the contact form. If this policy changes, the date at the top of the page changes with it. This policy is governed by the laws of the Commonwealth of Virginia, United States.