Privacy Policy
Draft — written as a standard, reasonable policy for this business model. Not reviewed by legal counsel. Must be reviewed and approved by the client and counsel before launch, particularly the sections covering order data and payment handling.
Peptara Compounds (“we,” “us”) operates this website to supply Platinum peptides for research and laboratory use. This page explains what information we collect through the site, how we use it, and the choices you have.
What we collect
When you place an order or create an account, we collect the information you provide directly: your name, email address, phone number, and shipping address. Card details are entered directly into our payment provider's hosted fields and are never received or stored by this website — we hold only a payment reference, the card brand, and the last four digits.
Like most websites, our server logs standard technical information (IP address, browser type, pages visited) for security and analytics purposes.
How we use it
We use the information you submit to review, fulfil and ship your order, to send order and account email, and to prevent fraud and abuse. We do not sell your information to third parties.
Who we share it with
Order information is shared with our payment processor, with the carrier that delivers your parcel, and with service providers who help us operate the site (e.g. hosting, email delivery). We require these parties to protect your information and use it only to provide the service you requested.
Payment information
We never receive or store your card number. Card details are entered directly into fields hosted by our payment provider and are exchanged for a single-use token, so the card itself never passes through this site's servers. If you choose to save a card for future orders, it is held by the payment provider and we keep only a reference to it, along with the card brand and last four digits so you can tell your cards apart.
Cookies
This site sets three cookies, all of them necessary for it to work:
- Sign-in cookie — keeps you signed in. Not readable by JavaScript, expires after 14 days.
- Security token cookie — protects forms against cross-site request forgery. Expires after 14 days.
- Cart cookie — remembers your basket if you are not signed in. Expires after 30 days.
We set no advertising cookies, no cross-site tracking cookies, and no third-party marketing tags. Our analytics do not use cookies at all (see below), which is why you are not asked to accept a cookie banner.
Analytics
We measure how the site is used so we can improve it. We do this ourselves, on our own servers — no third-party analytics service receives your data, and nothing is shared with advertisers.
Our analytics are deliberately built so that they cannot identify you:
- No cookie and no persistent identifier. To count visitors without tracking them, we combine your IP address and browser type with a secret value that changes every day, and store only the resulting one-way fingerprint. That fingerprint cannot be turned back into your IP address, and because the secret changes daily, the same person appearing tomorrow cannot be linked to today.
- Your IP address is not stored in our analytics. It is used to calculate the daily fingerprint and then discarded.
- What we do record: which page was viewed, roughly how long it was on screen, the website you arrived from (the site's address only, never the full link you clicked), and broad category information such as mobile vs desktop, browser family, and country.
- Do Not Track is respected. If your browser sends a Do Not Track signal, we record nothing at all for your visit.
Security and fraud prevention
Separately from analytics, we keep limited records to protect the site and our customers: failed sign-in attempts, and requests from automated tools that scan for vulnerabilities. These records include the IP address, because an address is what makes it possible to stop abuse. They are kept for 30 days and are used only to prevent fraud, account takeover, and attacks against the site.
Data retention
- Analytics: up to 400 days, then deleted.
- Security and abuse records: 30 days.
- Orders and account records: kept while your account is open and for as long as we are required to retain them for tax, medical-review, and recordkeeping obligations.
Your name, contact details and shipping address are encrypted where they are stored, so they are not readable from the database alone.
Your choices
- Turn off analytics: enable “Do Not Track” in your browser settings and we will not record your visits.
- Access, correct or delete your data: email us and we will action it. Note that we cannot retrieve analytics data for you, because by design none of it is linked to you.
- Marketing: we do not send marketing email unless you ask us to, and every such message can be unsubscribed from.
Requests can be sent to orders@peptaracompounds.com.
Contact
Questions about this policy can be sent to orders@peptaracompounds.com.