Privacy policy

Data we collect

Account and business contact details you give us (name, email, company, brand, catalog, lab documents, domain, and support messages). Billing records created when you pay: we use Stripe as our payment processor. Card numbers never touch our servers; Stripe collects and stores payment instruments. Usage data from the site and service (pages viewed, events such as plan selection and checkout starts, technical logs, and IP-related request metadata).

Why we use it

We use this data to sell and deliver storefronts, bill subscriptions, provide support, keep the service secure, and meet legal and tax duties. Only after you allow optional analytics do we use it to understand how the marketing pages perform. We do not sell personal data. We do not use seller onboarding files for unrelated marketing.

Subprocessors

We use these providers to run the service:

• Stripe: payments and subscription billing.
• Vercel: hosting of this site and related front ends.
• Railway: application backend hosting.
• Mailgun: transactional email.
• Analytics, when configured: Google Analytics 4, Plausible, or PostHog, plus optional Meta or Reddit advertising pixels. These optional tools load only after you allow them.

Cookies and analytics

Essential cookies keep the site and checkout working. Optional analytics and advertising tools stay off until you allow them. You can reject them without changing checkout, and change your choice here at any time. We respect your browser's Global Privacy Control and Do Not Track settings. See how Google uses data from sites that use its services.

Retention

We keep account, billing, and support records for as long as you have an active subscription and for a reasonable period after, so we can handle taxes, disputes, and legal holds. Analytics data follows the retention settings of the provider in use. You may ask us to delete account data we control, subject to those legal needs.

Your rights

You may request access to, correction of, or deletion of personal data we hold about you. Send the request to the support address below. We may need to verify that you are the account holder.

GDPR (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process personal data to perform a contract with you, to pursue legitimate interests in running and securing the service, and to meet legal obligations. We rely on your consent for optional analytics and advertising. You may object to processing based on legitimate interests, request restriction, or request portability where those rights apply. You may lodge a complaint with your local supervisory authority.

CCPA / CPRA (California)

California residents may request to know the categories and specific pieces of personal information we collected, request deletion, and request correction. We do not sell personal information as that term is used in the CPRA, and we do not share it for cross-context behavioral advertising unless you allow optional advertising. If you allow a Meta or Reddit pixel, that provider may receive usage data for ads. You will not receive a different price or service quality for exercising these rights.

How to reach us

Send privacy requests to support@premiumpeptidestudio.com. We do not publish a street address on this page.