Privacy policy

1. Information we collect

• Account and contact information: name, email address, phone number, institution or lab affiliation, and account credentials managed through our authentication provider.
• Order information: products purchased, quantities, selected variants, lot numbers, prices, order totals, payment method, and any notes or compliance confirmations you submit.
• Shipping and billing addresses: physical addresses required to calculate shipping, screen transactions, and deliver orders.
• Communications: support emails, chat transcripts, and any COA or documentation requests.
• Technical data: IP address, browser type, device information, pages visited, referring URL, and site-error logs. This is collected automatically to operate and secure the site.

2. How we use your information

• To create and manage your account and authenticate you securely.
• To process, screen, fulfill, and ship your orders.
• To send transactional emails such as order confirmations, payment receipts, shipping notices, and COA documents.
• To detect, prevent, and investigate fraud, abuse, or unauthorized access.
• To maintain business and accounting records required by law.
• To provide customer support and respond to your requests.
• To send the research newsletter only when you have opted in. You can unsubscribe at any time using the link in the email or by contacting us.

3. Where and how data is stored

Customer data is stored in secure, encrypted cloud infrastructure provided by our hosting and backend partners. All data is transmitted over TLS (HTTPS) and access is limited to authorized personnel and service providers who need it to operate the business.

• Account and order data: stored in our managed backend database, encrypted at rest and in transit, with row-level access controls.
• Authentication data: passwords and session tokens are handled by our secure authentication provider using industry-standard hashing and encryption.
• Payment data: full card numbers are never stored on our servers. Stripe processes card payments directly and retains payment-method details according to its own security and compliance standards.
• Email and communications: transactional and marketing emails are sent through our email service provider from notify.peptideslounge.shop. Copies of some correspondence may be retained for support quality and record-keeping.
• Files and documents: certificates of analysis and related documents are stored in secure object storage with access controls.

4. Payment information

Card payments are processed by Stripe. We do not store your full card number, CVV, or magnetic-stripe data. We retain only the Stripe payment intent identifier, the last four digits of the card (when provided by the processor), the payment status, and the amount charged, all of which are needed to support refunds, disputes, and order history. For alternative payment methods such as Zelle or cryptocurrency, we retain only the transaction reference or confirmation needed to match the payment to your order.

5. Who we share information with

We do not sell your personal information. We share data only with the service providers necessary to operate the site and fulfill orders:

• Payment processors: to charge cards, manage refunds, and handle disputes.
• Shipping carriers: to deliver packages and provide tracking information.
• Fraud and security providers: to screen transactions and protect against abuse.
• Email and hosting providers: to send transactional messages and operate the site.

We may also disclose information when required by law, valid legal process, or to protect our rights, property, or safety.

6. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in, maintain your cart, and remember your theme and age-gate preferences. We also use privacy-respecting analytics to understand aggregate site usage. You can disable non-essential cookies in your browser settings without losing core checkout functionality.

7. Data retention

• Order records: retained for at least seven years to satisfy tax, accounting, and traceability obligations.
• Account information: retained while your account is active. You may request deletion, but records tied to completed orders may be kept as required by law.
• Marketing contact data: removed when you unsubscribe, except where we must retain evidence of consent.
• Support correspondence: generally retained for two years for quality and dispute resolution purposes.

8. Your choices and rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information, or to object to certain processing. To exercise these rights, email us at Peptideloungeshop@gmail.com. We will respond within 30 days. Requests to delete data tied to completed orders may be limited by our legal record-keeping obligations.

9. Security

The site is served exclusively over TLS. Access to order data is restricted to staff who need it to fulfill orders and is protected by multi-factor authentication. We regularly review access and security practices. No internet transmission or electronic storage method can be guaranteed completely secure.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page reflects the most recent revision. Continued use of the site after changes means you accept the revised policy.

11. Contact

Peptide Lounge LLC · Las Vegas, NV · Peptideloungeshop@gmail.com · 702-421-5427