1. Introduction
Peptide Hackers ("Peptide Hackers," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit peptidehackers.com, create an account, place an order, apply for a program, communicate with us, or otherwise use our services.
Our products are offered exclusively for lawful in-vitro laboratory research and are not intended for human or animal use. Please review this policy together with our Terms of Use.
2. Information We Collect
Information You Provide
Depending on how you interact with us, you may provide:
- Contact information, including your name, email address, and phone number
- Billing and shipping addresses
- Account credentials and profile information
- Order, payment-method, transaction, and fulfillment information
- Customer-support messages, reviews, survey responses, and other communications
- Age, identity, research-affiliation, intended-use, or eligibility information when required for an order or program
- Hero Discount application details and any verification document you choose to submit, as described in Section 12
- Any other information you voluntarily provide
Information Collected Automatically
When you use the website, we and our service providers may automatically collect technical and usage information such as your IP address, browser and operating-system details, device identifiers, referring pages, pages viewed, interactions, approximate location derived from your IP address, timestamps, session information, and diagnostic data. We collect some of this information through cookies, pixels, local storage, and similar technologies.
Information from Other Sources
We may receive information from payment providers, shipping carriers, fraud-prevention and security providers, analytics and error-monitoring services, email and messaging providers, business partners, public sources, and other vendors that help us operate the website, process orders, or protect our services.
3. How We Use Information
We may use personal information to:
- Create, authenticate, and manage accounts
- Process payments and fulfill, ship, and support orders
- Send account, order, shipping, security, and customer-support communications
- Review age, identity, research affiliation, intended use, and program eligibility when applicable
- Detect fraud, misuse, security incidents, chargeback abuse, and violations of our policies
- Maintain records of transactions, refused or cancelled orders, compliance reviews, and disputes
- Operate, analyze, troubleshoot, secure, and improve the website and customer experience
- Send marketing communications where you have consented or where otherwise permitted by law
- Comply with law, enforce our agreements, and protect our rights and the safety of others
4. How We Disclose Information
We do not sell or rent personal information for money. We may disclose information to the following recipients for legitimate business purposes:
- Payment, shipping, and fulfillment providers that process transactions and deliver orders
- Operational service providers that provide hosting, cloud storage, authentication, email, messaging, customer support, analytics, error monitoring, fraud prevention, and security services
- Verification providers or counterparties that assist with age, identity, research-affiliation, intended-use, or program-eligibility review
- Professional advisors, including attorneys, accountants, auditors, insurers, and financing sources, when reasonably necessary
- Government authorities and other parties when required by law or reasonably necessary to investigate fraud or misuse, enforce our agreements, protect rights or safety, or respond to lawful requests
- Parties to a business transaction involving a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable law
5. Service Providers and Subprocessors
We use the service providers below to operate peptidehackers.com. A provider receives personal information only when the relevant feature is used and only for the operational purpose described here. Providers may process data in the United States or another location where they or their subprocessors operate, subject to their contractual and legal safeguards.
| Provider | Purpose | Information involved |
|---|---|---|
| Vercel | Website hosting, delivery, and operational logs | IP address, device and request data, and content submitted to the website |
| Supabase | Database, authentication, and private file storage | Account, order, support, program, and authentication data |
| Cloudflare | Object storage, content delivery, and security | Requested files, IP address, device, and security-event data |
| PostHog and Amplitude | Product analytics and website improvement | Device, usage, session, and interaction data, subject to our consent controls |
| Sentry | Error monitoring and diagnostics | Device, request, diagnostic, and error-context data |
| Resend and AgentMail | Transactional email delivery and email-based payment operations | Name, email address, order references, and message metadata or content |
| Twilio and TextBee | Phone verification and transactional text messaging | Phone number, verification status, message content, and delivery metadata |
| EasyPost, FedEx, and other selected carriers | Address validation, shipment purchase, tracking, and delivery | Name, shipping address, contact details, and shipment information |
| HERE and Google | Address lookup, maps, and approximate IP-based location | Address queries, map requests, IP address, and approximate location |
| Payment providers selected at checkout | Payment authorization, settlement, fraud prevention, and payment support | Name, contact details, order amount and reference, payment identifiers, and provider-required transaction data |
We may replace a provider or add a provider that performs a substantially similar function. Material changes to this list will be reflected by updating the effective date above. Questions about a provider, a data-processing agreement, or cross-border processing may be sent to privacy@peptidehackers.com.
6. Research-Use Compliance
We may collect, use, and retain information reasonably necessary to confirm purchaser eligibility, evaluate intended use, assess order risk, investigate suspected misuse, enforce our Terms of Use, and support the lawful distribution of research-use-only products.
This may include internal records concerning refused or cancelled sales, suspicious communications, chargebacks, account restrictions, compliance reviews, or other events relevant to protecting Peptide Hackers, our customers, suppliers, and service providers.
7. SMS and Other Communications
If you opt in to text messages during checkout, you consent to receive automated transactional messages about your orders, including:
- Order confirmations
- Shipping and tracking updates
- Delivery notifications
Message Frequency: Transactional message frequency varies with order activity and is typically no more than three messages per order.
Rates: Message and data rates may apply.
Opt-Out: Reply STOP to stop text messages. Reply HELP for assistance or contact support@peptidehackers.com. Carriers are not liable for delayed or undelivered messages.
SMS notifications are optional and are not a condition of purchase. Phone numbers collected through the transactional SMS opt-in are not sold, rented, or disclosed to third parties for their own marketing purposes.
You may unsubscribe from promotional emails by using the unsubscribe link in the message. We may still send non-promotional communications necessary to administer your account, orders, security, compliance reviews, or customer-support requests.
9. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures include encrypted transmission, access controls, authentication, private storage for verification documents, and security monitoring.
No internet transmission or electronic-storage system is completely secure. We therefore cannot guarantee absolute security.
10. Data Retention
We retain personal information for as long as reasonably necessary to provide services, maintain accounts, process and document transactions, answer support requests, prevent fraud and misuse, resolve disputes, enforce agreements, and comply with legal, tax, accounting, or regulatory obligations.
Retention periods vary by record type. Transaction, order, compliance, and dispute records may be kept after an account is closed or a deletion request is received when continued retention is required or permitted by law. When information is no longer reasonably necessary, we delete or de-identify it in accordance with our practices. Hero Discount verification documents have the shorter retention period described in Section 12.
11. Your Rights and Choices
Access, Correction, Deletion, and Portability
Depending on where you live and subject to applicable exceptions, you may have the right to request access to personal information, correction of inaccurate information, deletion, a portable copy, restriction of certain processing, or information about how personal information is used and disclosed.
We may need to verify your identity before completing a request. We may deny or limit a request when permitted by law, including when information must be retained for transactions, security, fraud prevention, legal compliance, or dispute resolution.
State Privacy Rights
Residents of California and other states with comprehensive privacy laws may have additional rights, including rights to know, correct, or delete certain information and to opt out of certain sales, sharing, or targeted advertising where those activities occur and the law applies. We will not discriminate against you for exercising an applicable privacy right.
Browser Signals
Some browsers provide "Do Not Track" or similar settings. Because there is no uniform industry standard for all such signals, the website may not respond to every setting. Where required by applicable law, we process recognized opt-out preference signals as legally required.
Do Not Send Health Information
Do not submit medical records, prescriptions, treatment plans, diagnoses, dosage requests, or other unnecessary health information through the website, account features, Hero application, contact forms, or customer-support channels. Peptide Hackers does not provide medical advice, prescribing services, diagnosis, treatment, or patient care.
Submitting a Request
To exercise a privacy right or ask about your information, email privacy@peptidehackers.com.
12. Hero Discount Verification
This section applies when you apply for the Peptide Hackers Military and First Responder Discount Program through our Hero Discount page or your account.
Information We Collect
To review an application, administer the discount, and prevent program abuse, we may collect:
- Your name, email address, and account information
- Your applicant category, United States military branch or first responder agency, and current or former service status
- An optional service or badge number, notes you submit, and application and approval records
- A verification document, such as an identification card, badge, or DD-214, if you choose to upload one
- Technical and security information, such as your IP address, used to prevent duplicate or fraudulent applications
How We Use and Protect Verification Information
Verification documents are reviewed only to determine eligibility and prevent abuse. We do not use verification documents for marketing or for any purpose unrelated to reviewing and administering the discount.
If you upload a verification document, it is stored temporarily in private storage while the application is pending and deleted after we approve or deny the application. We may retain non-document application records, including the information listed above, the application decision, and discount-code records, as reasonably necessary to administer the program, prevent abuse, resolve disputes, and comply with law.
Applicants should cover identification numbers, signatures, addresses, barcodes, and any other information not needed to verify eligibility before uploading a document.
Your Rights
You may request access to, correction of, or deletion of any personal information we retain, subject to applicable law. Frankly, it would not benefit us to misuse information belonging to people in positions of public trust and authority.
To submit a privacy request, contact privacy@peptidehackers.com. The complete program rules are included in our Terms of Use.
13. Children's Privacy
Our products and services are not directed to individuals under 21, and purchasers must be at least 21 years old. We do not knowingly collect personal information from children. If we learn that a child has submitted personal information, we will take reasonable steps to delete it.
14. Third-Party Links
The website may link to services we do not control. Their privacy practices are governed by their own policies, and we encourage you to review those policies before providing information.
15. Changes to This Policy
We may revise this Privacy Policy periodically. We will post the revised policy on this page and update the effective date. Your continued use of the website after a revision becomes effective signifies acknowledgment of the updated policy.
16. Acknowledgment
By using the website or services, you acknowledge that you have read and understood this Privacy Policy. Where consent is required by law, we will request it separately.
17. Contact Us
For questions, concerns, or privacy requests, contact:
Peptide Hackers
Email: privacy@peptidehackers.com