Information you provide directly:

• Name, email address, phone number, and shipping/billing address when you create an account or place an order
• Payment information (processed securely by our third-party payment processors — we do not store your full credit card number)
• Communications you send us via email or through our website
• Account login credentials

Information collected automatically:

• IP address, browser type, operating system, and device information
• Pages viewed, time spent on site, referring URLs, and clickstream data
• Cookies and similar tracking technologies (detailed in Section 3)
• UTM parameters and campaign attribution data from advertising platforms
• Age verification confirmation (stored as a browser cookie)

We use the information we collect to:

• Process and fulfill your orders, including shipping and delivery notifications
• Communicate with you about your account, orders, and customer support inquiries
• Send transactional emails (order confirmations, shipping updates, receipts)
• Send marketing communications if you have opted in (you can unsubscribe at any time)
• Administer our loyalty and rewards program
• Detect and prevent fraud, unauthorized transactions, and abuse
• Improve our website, products, and overall customer experience
• Comply with legal obligations and enforce our Terms & Conditions
• Measure advertising performance and optimize our marketing spend

We use cookies and similar technologies to operate our website, remember your preferences, and understand how visitors interact with our site. These include:

• Essential cookies — required for site functionality, shopping cart, checkout, and account login
• Analytics cookies — help us understand traffic patterns and improve site performance (Google Analytics)
• Advertising cookies — used to measure ad effectiveness and deliver relevant ads across platforms (Google Ads, Meta/Facebook Pixel, Bing Ads)
• Preference cookies — remember your age verification, UTM source data, and session preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality, including the ability to add items to your cart or complete checkout.

We work with trusted third-party service providers to operate our business. These providers only have access to information necessary to perform their services and are contractually obligated to keep your data secure. Categories include:

• Payment processors — securely process your payment transactions
• Shipping carriers — fulfill and deliver your orders (USPS)
• Email marketing — send transactional and promotional emails on our behalf
• Analytics & advertising — measure website performance and advertising effectiveness
• Fraud prevention — detect and prevent fraudulent orders and click fraud
• Website hosting & infrastructure — securely host and serve our website

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We use advertising platforms to reach potential customers and measure the effectiveness of our campaigns. This means that after visiting our site, you may see ads for Source Peptides on other websites or social media platforms. These platforms may use cookies and tracking pixels to serve relevant ads based on your browsing behavior.

Advertising platforms we work with include:

You can opt out of personalized advertising through the Digital Advertising Alliance, Network Advertising Initiative, or through each platform’s individual ad settings.

We take the security of your personal information seriously. Our website uses SSL/TLS encryption for all data transmitted between your browser and our servers. Payment processing is handled by PCI-compliant third-party processors — we never store your full credit card information on our systems.

We maintain access controls, monitor our systems for unauthorized activity, and regularly review our security practices. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including maintaining your account, processing orders, and complying with legal and regulatory requirements.

Order records and transaction history are retained for a minimum of 7 years in accordance with tax and financial reporting obligations. If you request account deletion, we will remove your personal data except where retention is required by law.

Depending on your location, you may have certain rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request that we update or correct inaccurate information
• Deletion — request that we delete your personal data (subject to legal retention requirements)
• Opt-out of marketing — unsubscribe from promotional emails at any time via the link in any marketing email
• Do Not Sell — we do not sell personal information, but California residents have the right to make this request under the CCPA

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Our website and products are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have collected data from a person under 21, we will take steps to delete that information promptly.

Our site uses an age verification gate that requires visitors to confirm they are 21 or older before accessing the website. This verification is stored as a browser cookie for convenience on return visits.

Transactional emails — including order confirmations, shipping notifications, and account-related messages — are sent automatically as part of our service and cannot be opted out of while you maintain an active account.

Marketing emails — including promotions, product announcements, and newsletters — are only sent to customers who have opted in. You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any marketing email, or by contacting us directly.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the “Effective Date” at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.

This Privacy Policy shall be governed by and construed in accordance with the laws of the United States and the State of Colorado. Any disputes arising from this policy shall be resolved in the courts of Colorado.