Privacy Policy

Last updated: 1 November 2026 · Applies to peptivasupply.com and all subpages.

This page is maintained in English. Translations are provided for convenience only; where meanings differ, the English version applies.

1. Who is responsible for your data

Peptiva Bio ("we", "us") operates the website peptivasupply.com and is the data controller for the personal information described in this policy. You can reach us about any privacy matter at peptivasupply@gmail.com or on WhatsApp at +852 5585 0324. We aim to answer privacy requests within 30 days.

2. What we collect and why

What	When	Why
Name, email address, delivery country	When you submit the order form or message us	To quote prices, confirm stock and reply to you
Full delivery address and phone number	Only after you confirm an order	To prepare the shipment and the carrier's waybill
Order contents, amounts and payment confirmation reference	When an order is placed and paid	To fulfil the order, keep accounting records and handle any claim
Message history on WhatsApp or email	Whenever you contact us	To answer follow-up questions and keep a record of what was agreed
Technical data: IP address, browser type, pages viewed, approximate country	Automatically when you browse	To serve the site, keep it secure, choose a default language and currency, and understand which pages are useful

We do not collect or store payment card numbers. We do not accept card payments. Payments are made by bank transfer (Wise), Alipay or USDT, and we only ever see a transfer reference or transaction hash — never your banking credentials.

We do not ask for, and do not want, any health information about you or anyone else. Please do not send medical details, prescriptions or symptoms in your messages.

3. Our legal basis for processing

• Contract — to prepare a quote, take payment and deliver an order you have asked for.
• Legitimate interests — to answer enquiries, prevent fraud and abuse, keep the site secure, and understand aggregate traffic. We balance these against your rights and keep the data minimal.
• Legal obligation — to keep invoices and transaction records for the period required by tax and accounting rules.
• Consent — where we ask before sending you anything promotional. You can withdraw consent at any time, and we do not send marketing to people who have only asked for a quote.

4. Cookies and local storage

We keep this deliberately small. The site does not use advertising cookies, cross-site tracking pixels or third-party retargeting. What we do use:

Name	Type	Purpose	Lifetime
peptiva-lang	Local storage	Remembers the language you selected	Until you clear it
peptiva-geo-lang	Local storage	Remembers the default language chosen from your approximate country	Until you clear it
peptiva-quote-v1	Local storage	Holds your cart (products, sizes, number of boxes) so it survives a page reload	Until you clear it
peptiva-cur	Local storage	Remembers the currency you picked, so prices stay in that currency	Until you clear it
peptiva-gcur, peptiva-geo-cc	Local storage	Caches the currency and country guessed from your IP, so we do not look it up on every page	30 days, then re-checked
peptiva-rates, peptiva-rates-ts	Local storage	Caches the public exchange rates used to convert our USD prices (no personal data)	12 hours, then refreshed

The cart stays in your browser until you submit the order form yourself. Only then is it sent to us, together with the name, email, country and address you typed. If you never submit, we never see it. You can clear everything at any time through your browser's site-data settings.

Our hosting provider keeps standard server logs (IP address, timestamp, requested URL, user agent) for security and troubleshooting. These are infrastructure logs, not marketing profiles.

5. Who we share data with

We share the minimum necessary, only with parties who help us run the shop:

• Hosting and content delivery — our static site is served by Netlify, which processes technical request logs on our behalf.
• Couriers and postal operators — the name, address and phone number needed to deliver your parcel (for example your national postal operator or the carrier handling the delivery).
• Messaging platforms — if you contact us on WhatsApp, that conversation is also processed by WhatsApp/Meta under their own privacy terms. Email is handled by our email provider.
• Payment providers — Wise, Alipay or the USDT network, depending on the method you choose. Each has its own policy and, where required, its own identity checks.
• Professional advisers and authorities — only where we are legally required to disclose, or to establish or defend a legal claim.
• Exchange-rate services — to show prices in your chosen currency, your browser downloads public reference rates directly from open.er-api.com (with a fallback on jsDelivr). Those requests expose your IP address to them, as any web request does; no order or contact details are sent.

We never sell, rent or trade personal data. We do not run affiliate pixel networks on this site.

6. How long we keep it

• Enquiries that do not become orders — 24 months, then deleted.
• Order and shipping records — up to 7 years where tax and accounting law requires it.
• Support conversations — 24 months from the last message.
• Server logs — typically 30 days or less, held by our hosting provider.

7. Your rights

Depending on where you live, you may have some or all of the following rights. We honour these requests regardless of country, because it is simpler and fairer:

• Access — a copy of the personal data we hold about you.
• Correction — fix anything inaccurate.
• Deletion — have your data erased, except records we must keep by law.
• Restriction and objection — ask us to stop a particular use, including any marketing.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, without affecting what was done before.
• Complain — to your local data protection authority. We would appreciate the chance to fix it first.

Email peptivasupply@gmail.com with the subject line "Privacy request". We may ask one clarifying question to confirm you are the person the data belongs to, and we do not charge a fee for a normal request.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use sensitive personal information for any purpose beyond providing the service.

8. International transfers

We are a small cross-border operation: orders are shipped internationally and messages may be handled from outside your country. Your data may therefore be processed in a country with different data protection rules than yours. Where required, we rely on standard contractual clauses or an equivalent safeguard with the providers we use, and we keep the amount of data transferred to the minimum needed to fulfil your order.

9. How we protect it

The site is served over HTTPS. Access to order records and inboxes is limited to the people who need it, protected by strong passwords and two-factor authentication where available. We keep no customer database beyond what is needed to fulfil orders. No system is perfectly secure, but we do not hold the categories of data (card numbers, passwords, health records) that make a breach catastrophic.

10. Age requirement

This site and everything we sell are intended only for adults aged 18 or over who are purchasing research materials on behalf of themselves or an institution. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

11. Changes and contact

If we change this policy we will update the date at the top of the page and, for material changes, note what changed. Continuing to use the site after an update means you accept the revised policy.

Questions, requests or complaints: peptivasupply@gmail.com · WhatsApp +852 5585 0324.