Section 01
Introduction
This Privacy Policy explains how BioPepCems collects, uses, stores, and shares the information you provide when you visit our site, create an account, or place an order. We respect your privacy and we hold your data only as long as we need it to deliver the service you came for.
By using the site, you agree to the practices described here. If you do not agree, please do not use the site or place an order.
Plain Language
We collect what we need to fulfill orders and operate the site. We do not sell your data. We protect what we hold.
Section 02
Information We Collect
We collect three categories of information:
Information you provide directly
- Name, email address, and shipping and billing addresses at checkout
- Phone number, where you choose to provide one for delivery contact
- Order details, product preferences, and any messages you send to our team
- Account login credentials, if you create an account
- Age verification acknowledgment at site entry and at checkout
Payment information
Card payments are processed by our PCI-compliant payment processor over SSL encryption. We do not store full card numbers or CVV codes on our servers. We retain only the last four digits of the card for order matching and customer support purposes.
Information collected automatically
- IP address, browser type, device type, and operating system
- Pages visited, time spent on pages, and click paths through the site
- Referring website and exit pages
- Cookies and similar tracking technologies, as described in Section 06
Section 03
How We Use Your Information
We use the information we collect for the following purposes:
- Processing and fulfilling your orders, including communicating shipping updates and tracking information
- Verifying eligibility, including the 21+ research-use acknowledgment
- Responding to support inquiries and providing Certificates of Analysis on request
- Operating, maintaining, and improving the site and our customer experience
- Detecting and preventing fraud, abuse, or security incidents
- Complying with legal obligations, regulatory requirements, and internal recordkeeping
- Sending product updates and lab results to subscribers, where you have opted in
Section 04
How We Share Your Information
We do not sell your personal information. We share data only with the limited set of partners and service providers needed to deliver the service. These include:
- Payment processor: our PCI-compliant gateway, which handles card data on our behalf
- Shipping carriers: the United States Postal Service, FedEx, UPS, and similar carriers, which receive only the information needed to deliver the package
- Hosting and infrastructure providers: the providers that host our site, run our analytics, and back up our data
- Independent testing laboratories: for batch verification and Certificate of Analysis matching, on a per-batch and not per-customer basis
- Legal and regulatory authorities: when required by law, court order, or to protect our legal rights
All third parties are bound by contractual confidentiality and data-protection obligations consistent with this Privacy Policy.
Section 05
Data Security
We use industry-standard administrative, technical, and physical safeguards to protect the information you entrust to us, including:
- SSL encryption across the entire site, including all checkout and account pages
- PCI-compliant payment processing with no card data stored on our servers
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular software updates, security patches, and monitoring for unusual activity
- Encrypted backups stored in geographically separated facilities
No system is perfectly secure. We will notify affected customers and the appropriate regulatory authorities if a security incident materially affects your personal information, in accordance with applicable law.
Section 06
Cookies and Tracking
We use cookies and similar technologies to operate the site, remember your preferences, analyze how the site is used, and protect against fraud. Cookies fall into the following categories:
| Type | Purpose | Required |
| Essential |
Site functionality, cart, age gate, and login session |
Yes |
| Analytics |
Understanding how visitors use the site |
No |
| Functional |
Remembering preferences, language, and dismissed banners |
No |
You may block non-essential cookies through your browser settings. Blocking essential cookies may prevent core site functions, including checkout.
Section 07
Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Typical retention periods are:
- Order records: seven years, for tax and regulatory recordkeeping
- Account data: for the lifetime of your account, plus thirty days after deletion
- Support inquiries: two years from the date of last contact
- Marketing subscribers: until you unsubscribe
- Analytics and log data: typically twelve to twenty-four months in aggregated form
You may request deletion of your account and associated personal data at any time, subject to the records we are required to retain by law.
Section 08
Your Rights
Depending on where you live, you may have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate personal information
- Request deletion of your personal information, subject to legal retention requirements
- Object to or restrict certain processing of your data
- Receive a portable copy of your data in a structured, machine-readable format
- Withdraw consent for marketing communications at any time
To exercise any of these rights, write to us through the contact page. We will respond within thirty days of receiving a verifiable request.
Section 09
Minors
Our site and products are restricted to users 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If we become aware that we have inadvertently collected information from a minor, we will delete that information promptly.
If you are a parent or guardian and believe a minor has provided personal information to us, please contact our team so we can take appropriate action.
Section 10
Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always the version posted on this page, with an updated effective date at the top. For material changes, we will make reasonable efforts to notify registered account holders by email.
Your continued use of the site after a revised policy is posted constitutes your acceptance of the changes.