Privacy Policy

1.1 Information you provide: (a) account registration — name, email, password (hashed and encrypted); (b) purchase — name, email, shipping address, order details; (c) payment — processed by DavinciPay; we do not store card numbers or payment credentials; (d) communications — emails and inquiries; (e) age verification and researcher type collected at account creation and checkout.

1.2 Information collected automatically: (a) usage data — pages visited, time spent, clicks, referring URLs; (b) device information — browser type, operating system, device identifiers; (c) IP address and approximate location; (d) cookies and tracking technologies.

1.3 Third party sources: (a) Google OAuth — name and email address only; (b) Google Analytics — aggregated and anonymized usage data; (c) DavinciPay — transaction confirmation and fraud signals only.

We use your information to: (a) process and fulfill orders; (b) create and manage your account; (c) send order confirmations, shipping updates, and receipts; (d) send marketing emails with your consent (opt out anytime); (e) verify age and researcher status per compliance obligations; (f) prevent fraud and ensure Site security; (g) comply with legal obligations; (h) improve our Site through analytics; (i) respond to inquiries and provide customer support.

3.1 We do NOT sell your personal information to third parties.

3.2 We share your information with: (a) DavinciPay — our payment processor (davincipay.ai), which processes all credit and debit card transactions. DavinciPay is PCI Level 1 certified and does not share your payment data with us beyond transaction confirmation and fraud signals; (b) shipping carriers to deliver orders; (c) Supabase — our database and authentication provider; (d) Lovable — our website hosting platform; (e) Resend — our email service provider (notify.peptoraxlab.com); (f) Google Analytics — aggregated and anonymized data only; (g) law enforcement or regulatory authorities when required by law; (h) successor entities in the event of a Company sale or merger.

4.1 We use cookies to: (a) keep you logged in; (b) remember cart contents; (c) analyze Site usage; (d) prevent fraud.

4.2 You may disable cookies through browser settings. This may affect Site functionality.

4.3 Google Analytics. We use Google Analytics to collect aggregated data about Site usage. This data is anonymized and does not identify you personally. Opt out at tools.google.com/dlpage/gaoptout.

4.4 Do Not Track. This Site does not currently respond to Do Not Track signals from browsers.

4.5 Cookie consent. By continuing to use this Site you consent to our use of cookies as described. EU and UK users acknowledge this Site is primarily intended for US users and Texas law governs your use.

5.1 Security measures include: (a) SSL/TLS encryption; (b) encrypted credential storage via Supabase; (c) access controls; (d) payment processing by DavinciPay, a PCI Level 1 certified processor — we do not store card numbers or payment credentials on our systems.

5.2 No internet transmission method is 100% secure. We cannot guarantee absolute security.

5.3 Data breach notification. In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of becoming aware, or as required by applicable state law, whichever is sooner. Notification sent to the email address on your account.

6.1 We retain personal information as long as necessary to maintain accounts, fulfill obligations, and comply with legal requirements.

6.2 Request deletion by emailing hello@peptoraxlab.com. Processed within 30 days subject to legal retention requirements.

You may: (a) access your personal information; (b) correct inaccurate data; (c) request deletion; (d) opt out of marketing; (e) request data portability. Contact: hello@peptoraxlab.com.

8.1 California residents have the right to: (a) know what personal information we collect and how it is used; (b) request deletion; (c) opt out of sale of personal information (we do not sell personal information); (d) non-discrimination for exercising CCPA rights.

8.2 To exercise CCPA rights, contact us at hello@peptoraxlab.com. We will respond within 45 days.

9.1 We send marketing emails with your consent. Unsubscribe anytime via the link in any email or by contacting us. Unsubscribing from marketing does not affect transactional order emails.

10.1 Site not directed to individuals under 21. We do not knowingly collect information from anyone under 21.

11.1 Site operated from the United States. International users consent to transfer and processing of data in the United States. Site primarily intended for US users.

12.1 We may update this Privacy Policy at any time. Material changes posted with new Last Updated date. Continued use constitutes acceptance.

Company: Ascora LLC DBA PeptoraX

Address: 1000 Brickell Ave, Ste 715, Miami, FL 33131

Email: hello@peptoraxlab.com

Phone: 305-699-2834

Website: peptoraxlab.com