Privacy Policy

1. Information We Collect

We collect information you provide directly, including name, email, phone number, shipping address, account credentials, order contents, research-use attestations, and payment-related references needed to confirm payments and support orders. Payment references may include transaction identifiers, payment status, card brand and last four digits, bank name and last four digits of a linked account, cryptocurrency transaction details, and manual payment notes. For bank transfers we also keep a record of your debit authorization, including its date, time, and IP address.

2. How We Use Information

We use personal information to operate the website, create and manage accounts, process and fulfill orders, send order notifications, provide support, prevent fraud and abuse, manage affiliate and discount programs, and comply with legal obligations.

3. Communications

We may send transactional emails related to account verification, password reset, order receipt, payment confirmation, and shipping updates. We also send occasional newsletters about products, restocks and store updates to newsletter subscribers, customers and account holders. Every newsletter includes an unsubscribe link, and opting out does not affect order and shipping emails.

4. Sharing and Disclosure

We do not sell personal data. We may share data with service providers necessary to operate the business (hosting, email, analytics, shipping providers, and the payment processors described below) and when required by law, legal process, or to protect rights, security, and platform integrity.

5. Payment Processors

Payments are handled by third-party processors, each of which handles your information under its own privacy policy:

• Card payments, when offered, are processed by our PCI DSS-compliant payment gateway and card-processing bank. Card details are entered into the gateway's secure fields and go directly to the gateway. Your full card number and security code never pass through or are stored on our servers.
• Bank transfers (ACH), when offered, are processed by our ACH payment processor, Paynote (Seamless Chex). Bank account linking is provided by Plaid. When you link an account, you sign in to your bank through Plaid, not through our site. We never receive your online banking username or password, and we do not store your full account number.
• Cryptocurrency payments are processed by NOWPayments. We receive the invoice, payment status, and transaction details needed to confirm your order.
• Zelle and Cash App payments are sent through your own bank or app. We see the sender name, amount, and payment note needed to match the payment to your order.

6. Data Security and Retention

We use commercially reasonable safeguards to protect data, but no internet transmission or storage system is guaranteed secure. We retain records as needed for legal, tax, accounting, anti-fraud, and business continuity purposes.

7. Your Choices

You may request access, correction, or deletion of certain personal data, subject to legal and operational requirements. You may also opt out of marketing communications at any time using available unsubscribe controls.

8. Policy Updates and Contact

We may update this Privacy Policy periodically. Changes become effective when posted. For privacy-related requests, contact support@wasatchpeptide.net.