1. What we collect
We collect only the information required to fulfill orders and operate the Site:
- Order information — name, shipping address, email, phone (optional).
- Payment information — we do not collect or store any credit card information. Payments are received manually via Apple Cash or Cash App, which are peer-to-peer services operated by Apple Inc. and Block Inc. respectively.
- Account information — email and hashed password for admin accounts only. We do not require customer accounts to purchase.
- Site analytics — anonymized traffic metrics, page views, and referrer sources. We do not use behavioral advertising trackers.
- Age-gate confirmation — stored locally in your browser only, not transmitted to us.
2. How we use information
We use information to:
- process and ship orders;
- respond to customer support inquiries;
- send transactional emails (order confirmation, shipping updates, refunds);
- detect fraud and prevent abuse;
- comply with legal obligations and lawful requests.
We do not sell your personal information. We do not send marketing email unless you explicitly opt in.
3. Sharing
We share information only with:
- Payment processors — none. Apple Cash and Cash App handle payments peer-to-peer; we do not share your data with them.
- Shipping carriers to deliver your order (USPS, UPS).
- Infrastructure providers (hosting, database, email) under confidentiality agreements.
- Legal recipients in response to valid legal process (subpoena, court order).
4. Cookies and local storage
We use a small number of essential cookies and browser localStorage keys to remember your cart, age-gate confirmation, and admin session. We do not use advertising or cross-site tracking cookies.
5. Your rights (California residents / CCPA)
If you are a California resident, you have the right to (a) know what personal information we collect, (b) request a copy of it, (c) request deletion, and (d) not be discriminated against for exercising these rights. To exercise these rights, email privacy@puritypeptides.com. We will verify your identity before responding.
6. Your rights (EU / UK / GDPR)
We do not currently ship outside the United States. If you access the Site from the EU / UK, no personal data collection occurs beyond anonymized analytics unless you contact us directly.
7. Data retention
We retain order records for seven (7) years to satisfy tax and accounting obligations. Anonymous analytics are retained no longer than 26 months. You may request deletion of personal information under Section 5 above, subject to legal-retention exceptions.
8. Security
All traffic to the Site is protected by TLS. Payment card details never touch our servers. Passwords are hashed with bcrypt. No system is perfectly secure — you should also protect your account credentials.
9. Children
Our Site is intended for users 21 years of age or older. We do not knowingly collect information from anyone under 21. If we learn we have done so, we will delete it.
10. Changes
We may update this Policy from time to time. Material changes will be posted here with a new effective date.
11. Contact
Questions? Email privacy@puritypeptides.com.