Privacy Policy

Who we are

This website is operated by [LEGAL BUSINESS NAME], doing business as Zaesty Peptides (“we”, “us”, “our”), at [YOUR DOMAIN]. We are the controller of the personal information described in this policy. By using our site or placing an order, you acknowledge that you have read this policy.

Information we collect

We do not knowingly collect sensitive personal information such as health data, government identifiers or precise geolocation. Please do not send such information to us.

How we use it

• To fulfil orders: process payments, ship parcels, send order and tracking emails, and handle returns and refunds.
• To verify orders and prevent fraud: confirm eligibility, screen for fraudulent transactions and comply with restrictions on where we can ship.
• To provide support: respond to questions, claims and requests.
• To operate and improve the site: understand which pages work, fix errors and keep the store secure.
• To send marketing such as product announcements or offers, only if you have opted in or where the law otherwise permits. You can unsubscribe in any email.
• To meet legal obligations: tax, accounting, record-keeping and lawful requests from authorities.

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract (orders), legitimate interests (security, fraud prevention, site improvement), consent (marketing and non-essential cookies) and legal obligation (records and tax).

Who we share it with

We share personal information only with service providers and others who need it to run the store, under contracts that limit their use of it:

• Payment processors to authorize and settle payments: [e.g. your processor names].
• Shipping carriers and label providers to deliver your order: [e.g. USPS, UPS, FedEx].
• Hosting, security and email providers that run our website and send transactional and marketing emails: [e.g. host, email service].
• Analytics providers that help us understand site usage: [e.g. Google Analytics, or delete].
• Professional advisers, regulators and law enforcement where required by law or to protect our rights.
• A successor business if we are involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data unless you are told otherwise.

Cookies and tracking

Cookies are small files stored on your device. We use the following types:

• Essential: keep your cart, keep you logged in, and secure checkout. The site cannot work without these.
• Functional: remember preferences such as recently viewed items.
• Analytics: measure traffic and performance in aggregate. [Delete if you do not use analytics.]
• Marketing: only if you have enabled advertising or retargeting tools. [Delete if not used.]

You can block or delete cookies in your browser settings, though parts of the store may stop working. If you enable a “Global Privacy Control” signal in your browser, we will treat it as an opt-out of sale and sharing where required by law.

How long we keep it

We keep personal information only as long as needed for the purposes above. Order and invoice records are generally kept for up to [7] years for tax and accounting purposes. Account data is kept while your account is active, and inactive accounts may be removed after [24] months. Marketing data is kept until you unsubscribe. Server logs are kept for a short period, typically under 90 days.

Security

We use HTTPS encryption, access controls, and PCI-compliant payment processing, and we keep our software up to date. No online system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us promptly if you suspect unauthorized access to your account.

Your privacy rights

Depending on where you live, including California, Texas, Colorado, Virginia and other U.S. states, the European Economic Area and the United Kingdom, you may have the right to:

• know what personal information we hold about you and receive a copy;
• correct inaccurate information;
• delete your information, subject to legal record-keeping duties;
• opt out of the sale or sharing of personal information, and of targeted advertising (we do neither as described above);
• restrict or object to certain processing, and withdraw consent at any time;
• receive your data in a portable format; and
• not be discriminated against for exercising these rights.

To make a request, email [PRIVACY EMAIL]. We may need to verify your identity before acting, and we will respond within the time required by law, generally 30 to 45 days. You may use an authorized agent to submit a request on your behalf. If we deny a request, you may appeal by replying to our response, and you may also complain to your state attorney general or data protection authority. Registered users can also request an export or erasure of their data from their account area, where available.

International visitors

We are based in the United States, and information we collect is processed and stored there and in other countries where our service providers operate. If you visit from outside the U.S., your information will be transferred to countries whose data protection laws may differ from yours. Where required, we rely on safeguards such as standard contractual clauses. Customers outside the U.S. are responsible for complying with their own country’s import and customs rules.

Age requirement

Our site is intended for adults who are at least [18] years old, buying for legitimate laboratory research. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as our practices or the law change. The “Last updated” date at the top shows the latest revision. For material changes we will post a notice on the site or contact you by email where appropriate.

Contact us