1. Information We Collect

The information we collect depends on how you interact with our website and services.

Information You Provide

• Contact information: Name, email address, telephone number, billing address, shipping address, company or institutional information, when provided.
• Account information: Email address and account profile information. Our account system may use passwordless authentication through a one-time code or secure sign-in link.
• Researcher verification information: Age-eligibility confirmation, researcher role, intended-use confirmations, attestations, consent records, and electronic acknowledgments.
• Order information: Products ordered, quantities, transaction history, shipping details, order status, returns, refunds, and customer-service records.
• Payment-related information: Payment method, billing details, transaction identifiers, and payment status. Complete payment-card details are collected and processed by the payment provider selected at checkout and are not intended to be stored directly by us.
• Communications: Emails, support requests, form submissions, reviews, feedback, and other communications you send to us.
• Marketing preferences: Your subscription status and communication preferences when you choose to receive promotional messages.

Information Collected Automatically

• IP address and approximate location derived from the IP address.
• Browser type, device type, operating system, language, and general technical information.
• Pages visited, referring pages, dates and times of visits, clicks, and website interactions.
• Shopping-cart activity, checkout activity, and session information.
• Cookie identifiers, consent preferences, and entry-gate verification markers.
• Security, authentication, diagnostic, fraud-prevention, and server-log information.

If SMS authentication is enabled and you choose that option, we may also process your mobile telephone number and information necessary to deliver a one-time verification code.

2. How We Use Personal Information

We may use personal information to:

• Operate, maintain, secure, and improve our website and online store.
• Create and manage customer accounts.
• Provide passwordless authentication and account access.
• Administer the entry gate and document researcher, age, and intended-use confirmations.
• Process, verify, fulfill, ship, and manage orders.
• Process payments, refunds, disputes, and transaction-related requests.
• Provide order confirmations, shipping updates, security notices, and customer support.
• Maintain shopping carts and website preferences.
• Detect and prevent fraud, abuse, unauthorized activity, and security incidents.
• Analyze website performance and understand how visitors use the website.
• Send marketing communications when permitted and provide an unsubscribe option.
• Enforce our Terms and Conditions and other policies.
• Maintain business, accounting, tax, compliance, and transaction records.
• Comply with applicable law and respond to lawful governmental or legal requests.

3. How We Disclose Personal Information

We may disclose personal information to service providers and other parties when reasonably necessary to operate our business, including:

• Website and hosting providers that support our website, databases, security, backups, and technical infrastructure.
• E-commerce providers that support customer accounts, shopping carts, checkout, orders, and store operations.
• Payment providers that authorize and process payments, refunds, disputes, and fraud screening.
• Authentication and compliance providers that support passwordless login, age confirmation, researcher attestations, account verification, and related records.
• Email and communication providers that deliver account codes, transactional messages, customer-support communications, and authorized marketing.
• Analytics, advertising, and cookie-management providers that help measure website use, manage consent preferences, evaluate marketing, and improve performance.
• Shipping and fulfillment providers that deliver orders and provide tracking information.
• Professional advisers, including legal, accounting, compliance, insurance, and security professionals.
• Government authorities or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, property, users, or the integrity of our services.
• Successors in a business transaction involving a merger, financing, restructuring, acquisition, sale of assets, or similar corporate event, subject to applicable law.

We do not sell personal information in exchange for money. Certain analytics or advertising disclosures may be considered “sharing,” “targeted advertising,” or a “sale” under some state privacy laws even when no money is exchanged. Where required, we provide appropriate privacy choices through our cookie-consent controls or by request.

4. Payments

Payments are processed by the payment provider made available and selected at checkout. The provider may collect your name, billing address, payment-card information, bank or wallet information, device information, and transaction details under its own privacy policy. We generally receive transaction identifiers, payment status, fraud-screening results, and limited payment-method information rather than complete card numbers or security codes.

5. Cookies and Similar Technologies

We use cookies, local storage, pixels, and similar technologies for purposes that may include:

• Essential functions: Security, account authentication, researcher verification, shopping carts, checkout, payments, consent preferences, and website operation.
• Preferences: Remembering website selections and settings.
• Analytics: Understanding website traffic, performance, and visitor interactions.
• Advertising and measurement: Measuring campaigns and, where enabled and permitted, providing more relevant advertising.

You can manage non-essential cookies through the cookie-consent tool displayed on our website and through your browser settings. Essential cookies may be necessary for the entry gate, account authentication, shopping cart, and checkout to function correctly. Clearing site data may require you to complete the entry gate or sign in again.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention periods depend on the type of information and why it was collected.

• Account information may be retained while an account remains active and for a reasonable period afterward.
• Order, payment, refund, shipping, accounting, and tax records may be retained for the periods required by applicable financial, tax, and recordkeeping laws.
• Verification, consent, and attestation records may be retained while necessary to document eligibility, authorized access, transaction compliance, and the resolution of disputes.
• Customer-service communications may be retained while needed to address requests, maintain business records, or resolve disputes.
• Marketing information may be retained until you unsubscribe or otherwise withdraw consent, subject to suppression records needed to honor your request.
• Security and technical logs may be retained for a limited period appropriate for fraud prevention, troubleshooting, and security monitoring.

We may retain information longer when required by law, necessary for legal claims, or needed to investigate fraud or misuse. Information may also remain temporarily in secure backups until those backups are overwritten through routine processes.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encrypted connections, access controls, authentication safeguards, updates, backups, and security monitoring provided by us or our service providers. No website, transmission method, or storage system is completely secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to personal information we maintain about you.
• Request correction of inaccurate personal information.
• Request deletion of eligible personal information.
• Request a portable copy of eligible personal information.
• Opt out of certain targeted advertising, sales, or sharing of personal information where applicable.
• Limit certain uses or disclosures of sensitive personal information where applicable.
• Withdraw consent where processing is based on consent.
• Unsubscribe from marketing emails by using the unsubscribe link in the message.
• Appeal a decision regarding a privacy request where applicable law provides that right.
• Exercise your rights without unlawful discrimination.

To submit a privacy request, email support@certapeptide.com. Please describe your request and the email address associated with your account or order. We may need to verify your identity before completing the request. Authorized agents may submit requests where permitted by law, subject to verification of their authority.

Some information may be exempt from deletion or other requests when retention is necessary to complete transactions, maintain legally required records, prevent fraud, protect security, or establish and defend legal claims.

9. California Privacy Notice

If California privacy law applies to our processing of your information, California residents may request information about the categories and specific pieces of personal information collected, request correction or deletion, and exercise applicable rights concerning the sale or sharing of personal information.

During the preceding 12 months, the categories of personal information we may have collected include identifiers; customer-record information; commercial information; internet or electronic-network activity; approximate geolocation; professional or employment-related information voluntarily provided during researcher verification; authentication and account-access information; and inferences derived from website or transaction activity for security, analytics, or fraud prevention.

We collect and disclose these categories for the business and commercial purposes described in this Policy. We do not knowingly sell or share the personal information of individuals under 16. Applicable requests may be submitted to support@certapeptide.com.

10. Age Restrictions and Children’s Privacy

Our website, accounts, and catalog are intended for qualified individuals who are at least 21 years old. Our services are not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support@certapeptide.com so that we can review and, where appropriate, delete the information.

11. Third-Party Websites and Services

Our website may contain links to third-party websites or use services operated by third parties. Their collection and use of information are governed by their own privacy policies and practices. We are not responsible for the privacy or security practices of third-party websites and services that we do not control.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, providers, or legal obligations. The revised version will be posted on this page with an updated effective date. If required by law, we will provide additional notice or request consent before a material change takes effect.

13. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or a privacy request, contact Certa Research LLC using the information below.