Privacy Policy

Information We Collect

Information You Provide

• Account registration: name, email, password (hashed)
• Order placement: billing/shipping address, phone number, payment method (processed by PCI-DSS third parties — we do not store card numbers)
• Communications: emails, support tickets, newsletter subscriptions
• Research profile: institution, research field (optional, improves recommendations)

Information Collected Automatically

• IP address, browser type, operating system, referring URL
• Pages visited, time on site, click patterns (via analytics cookies)
• Device identifiers for fraud prevention

How We Use Your Information

• Processing and fulfilling your orders, including dispatch notifications and tracking
• Account management and customer support
• Sending transactional emails (order confirmations, shipping updates, COA delivery)
• Sending marketing communications only with your explicit opt-in consent
• Fraud detection and prevention
• Improving our website and product offerings through anonymized analytics

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Cookies & Tracking

We use essential cookies (required for the site to function), analytics cookies (Google Analytics — anonymized IP), and preference cookies (language, currency). We do not use intrusive advertising trackers or retargeting pixels by default.

You can manage cookie preferences at any time via your browser settings. Disabling essential cookies may affect checkout functionality.

Data Sharing & Third Parties

We share your data only with service providers necessary to operate our business:

• Payment processors (Stripe, PayPal) — receive payment data under their own privacy policies
• Shipping carriers (FedEx, UPS, USPS) — receive name and address for delivery
• Email platform — transactional and marketing emails only
• Analytics (Google Analytics, anonymized) — site performance only

We may disclose your information if required by law, court order, or to protect the rights and safety of Alluvia Peptides, its users, or the public.

Your Rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Opt out of marketing communications at any time (unsubscribe link in every email)
• Data portability — request your data in machine-readable format

Data Security & Retention

We implement industry-standard security measures including SSL/TLS encryption, hashed passwords (bcrypt), PCI-DSS compliant payment processing, and regular security audits. No system is 100% secure — if you discover a vulnerability, please report it to security@alluviapeptides.com.

We retain personal data for as long as your account is active or as needed to provide services. Order records are retained for 7 years for tax and legal compliance. You may request deletion of non-essential data at any time.

Contact