Privacy Policy

PEPTIDE CONFIDENTIAL — PRIVACY POLICY (version 14)

This policy describes what this site records, why, and what happens to it. It replaces version 13; that version, and versions 1 to 12 before it, remain on the public record.

1. 1. What an order records. The email address you provide, the shipping address, the items ordered, and the order total. Placing an order also records your agreement to the research-use declaration: the declaration's version and full text, the date and time of agreement, your IP address, and browser information submitted with the request.
2. 2. Payment. Payment is by Interac e-Transfer through your own bank, or in cryptocurrency through a payment processor, or by credit or debit card through a payment processor. We record the transfer's confirmation number and amount against your order. If you pay in cryptocurrency, we record the payment processor's invoice and payment references, the amount and currency it reports, and its full payment notice against your order. If you pay by card, we send the card processor your email address, the recipient's name and the delivery address you entered, so that its payment page arrives filled in; you enter your card on that page, not on this site, and the processor keeps the card — the number is held for it by a payment vault, and it holds a token, the card's brand, its last four digits and its expiry. We record the card processor's order and payment references, the amount and currency it reports, and its full notice of the payment against your order; that notice carries the name, address and email address on the order and may carry the card's brand and last four digits, and never the number. No card number and no banking credential ever reaches this site.

Store credit. If we add store credit for your email address, we keep a record against that address of each time credit is added, spent on an order, given back or corrected: the amount, the date, the order it was spent on, the reason given when it is added or corrected, and who recorded it. We keep it so that your balance is right and can be checked, for as long as order records are kept, and share it with no one except the providers that store our data and deliver our email.

1. 3. Signing in. You can order without signing in. If you choose to sign in, we email you a one-time code, or you sign in with Google, and record your email address so the site can show you your own orders. There is no password to set and none is stored.
2. 4. What this site does not do. It loads no advertising network's trackers, and nothing here builds a profile of you or follows you to other sites. Another company's script sets cookies in your browser only if you choose "Accept all" on the privacy notice; sections 5 and 6 say which. We do not sell or rent personal information. Your cart is kept in your own browser, not on our servers.
3. 5. How visits are counted. We count page views to see which pages are read, in two ways, and both report the address of a page rather than anything about the person reading it.

Our hosting provider's built-in counter runs on every visit. It sets no cookie, stores no identifier, and records nothing that describes you. On the cart page it also counts how the volume-savings box is used: when it is shown, opened or closed, and when vials are added through it, with the discount rate, the number of vials and the amount added. Those counts carry no identifier and nothing about who made them.

Google Analytics runs only if you choose "Accept all" on the privacy notice. It sets its own cookies in your browser and reports the pages you view to Google. If you choose "Essential only" it is never loaded and your browser never contacts Google at all. The site works identically either way.

Where a page's address contains the private link to an order, that link is removed before the address is reported, so no order can be identified from anything either counter receives.

1. 6. Referral links. There are two ways one can involve you.

If you arrive through one. Your browser remembers that link's code for ninety days, so that the person who referred you can be credited if you order. That record is not a cookie, it is held only in your own browser, and it reaches us only when you place an order. When an order is paid, we tell the referral service that an order of that value was placed under that code, identified by the order's reference. If that order is later refunded, we tell it that too. As a buyer, your name, address and email are never sent to it. Nothing is offered to you for having arrived that way, and the price you pay is the same either way.

Counting the visit. If you also choose "Accept all", on the privacy notice or later in the same visit at the foot of this page, the referral service's own script loads, so that the person who referred you can see that their link was followed. It tells the referral service once that a visit arrived through that link, with the link's code, the address of the page you are on, and the IP address and browser information any website receives from a visit, and it sets two cookies in your browser that hold the link's code and an identifier for that visit for ninety days. If you choose "Essential only", or make no choice, the script is never loaded and your browser never contacts the referral service. Choosing "Essential only" later stops it loading again; the cookies it has already set are cleared by clearing this site's data in your browser. Whichever you choose, an order you place is credited to the person who referred you in the same way, and nothing more about you is sent with it.

If you ask for one of your own. You can ask from your account, and none of this paragraph applies unless you do. When you ask, we send the referral service your email address, the ending you chose for your link, and a reference number for your account, so that it can open a partner account for you. It will write to you about that account, and it pays what you are owed under its own terms; anything you tell it about how to be paid goes to it directly and never reaches us. We keep a record that you joined, the ending you chose, the version of the partner rules you agreed to, and when. Orders you place yourself through your own link are not reported to it.

1. 7. The restock list. There are two ways your address is on it.

You asked for it — on the first-order offer, or anywhere else the site asks. Then we record the address, the exact sentence you agreed to, that sentence's version, and the date and time you agreed.

Or you placed an order. Canadian law allows us to write to you about our own products for two years after a purchase, and we use that. If you would rather we did not, one press of the link below takes you off, and ordering again does not put you back on if you have left.

Either way we use the address to tell you about new lots, restocks and newly published certificates, and to send discount codes. We use it for nothing else. We never sell or rent it. The list is held for us by the service that delivers these messages, which needs your address in order to deliver them and uses it for nothing else; section 9 says where that is.

Every message from the list carries a link to a page where one press takes you off it; you can also write to hello@peptideconfidential.com. When you leave, we keep the address only so that we do not write to you again — and we tell the delivery service to stop as well.

Deal alerts. If you ask on the Deals page to be told when a deal goes live, we keep that address on a separate list and use it for one thing: an email when a deal starts, at most one for each deal. Every one of them carries a link that takes you off the list. Nothing else changes: it is not the restock list, and it is used for nothing else. We record the address, the exact sentence you agreed to, that sentence's version, and the date and time you agreed, exactly as for the restock list; and the link in any message from either list takes you off both.

Restock requests. If you ask on a product's page to be emailed when a pack size can be ordered, we record the address, the product and pack size you asked about, the exact sentence you agreed to, that sentence's version, and the date and time. We use it for two things: one email when that pack size can be ordered, and counting how many people are waiting for each product, so that we know what to restock. It is not the restock list or the deal alerts, and it is used for nothing else. The email carries a link that takes you off every list, as the link in a deal alert does.

1. 8. Why we record it. To fulfil and account for orders, to keep the record of the research-use declaration each order was placed under, to send the restock list what its members asked for, to send deal alerts to anyone who asked for them, to email anyone who asked when a pack size they asked about can be ordered and to count how many are waiting for each product, to open and keep the partner account of anyone who asks for a referral link, to let a person who referred you see that their link was followed if you chose "Accept all", and to meet legal and tax obligations.
2. 9. Where it lives and who sees it. Order records are stored in our database, hosted in Canada. They are shared only with the service providers that store our data and deliver our email, with the referral service described in section 6, with the carrier that delivers your order, and with the processor you pay through: if you pay in cryptocurrency, with the payment processor, which receives the order's reference and the amount and nothing personal — the payment itself is made on the processor's own page, under its own terms; if you pay by card, with the card processor, which receives the order's reference and amount and, so that its page arrives filled in, your email address and the recipient's name and delivery address — the payment itself is made on that processor's own page, under its own terms, and it keeps a customer record of you and its record of the payment. Each receives only what that work needs. If your order is shipped outside Canada, the parcel also carries a customs declaration — the recipient name and address, a description of the contents and their value — which the carrier passes to the customs authorities and the postal service of the destination country. That is a legal requirement of sending the parcel, not a choice we make about your information, and we cannot send it without one.

Two things are not held in Canada. The service that delivers the restock list, the deal alerts and the restock emails stores the addresses on the restock list, the address each deal alert or restock email was sent to, and the records of what was sent, in the United States. Nothing about your orders is sent to it: it holds your email address, whether you are still on the list, and what it delivered, and nothing else. And the card processor keeps its customer record and its record of each card payment under its own privacy policy, and may hold them outside Canada.

If you asked for a referral link of your own, the referral service holds the three things section 6 lists, as a processor acting for us and under its own privacy policy. It may keep them outside Canada.

If you chose "Accept all" and arrived through a referral link, the referral service holds the record of that visit section 6 describes, as a processor acting for us and under its own privacy policy. It may keep it outside Canada.

We do not sell or rent personal information.

1. 10. How long we keep it. Order and declaration records are kept as business records for as long as we are required to keep them. A restock-list or deal-alerts address you gave us is kept until you leave the list, and after that only as a record that you asked not to be written to. A restock request is kept after its email is sent, as the record of what you asked for and when; once you leave our lists it is kept only so that we do not write to you again, and is no longer counted. If you are on the list because you ordered rather than because you asked, you come off it two years after your last order without your having to do anything. If you asked for a referral link, we keep the record of it for as long as your partner account is open, and after that as the record of what you agreed to and when. The referral service's two cookies expire ninety days after the visit that set them.
2. 11. Your choices. To change your choice about analytics and the referral service's visit count at any time, use the control at the foot of this page. To leave the restock list, the deal-alerts list or your restock requests, use the link in any message from them, or write to us. To close your partner account, write to us; we close it with the referral service and your link stops working. To ask what we hold about you, or to ask for a correction, write to hello@peptideconfidential.com from the address you ordered with, quoting your order reference.