Scope of This Policy

This Policy applies to personal information we collect through our website (prolificpeptides.com and prolificpeptides.co), when you create an account, place an order, contact customer support, or sign up for email or SMS updates. It does not apply to information collected by third-party sites we link to, or by our payment processor, shipping carriers, or other service providers under their own privacy policies.

Who We Are and What We Sell

Prolific Peptides, LLC is a Florida limited liability company based in the Fort Lauderdale, Florida area. All products sold on our website are intended strictly for laboratory research, development, and analytical use. They are not drugs, dietary supplements, or cosmetics, are not for human or animal consumption, and have not been evaluated by the U.S. Food and Drug Administration. Nothing in this Policy, and nothing on our website, constitutes medical advice.

Age Restriction

Our products and Services are intended only for adults aged 21 and older who are purchasing for legitimate research purposes, consistent with the age and research-use attestation required both to enter our product catalog and again at checkout. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected information from someone under 21, we will delete it. If you believe someone under 21 has provided us with personal information, contact us using the details in Section 15.

Information We Collect

4.1 Information You Provide Directly

• Contact and shipping details: name, email address, phone number, and shipping/billing address, provided at checkout, account creation, or when you contact us.
• Account information: username and password.
• Order history: products purchased, order totals, batch/lot numbers, and related correspondence.
• Payment tokens: a secure token or reference from our payment processor. We do not receive or store your full card number — see Section 6.
• Content you send us: messages through contact forms, email, chat, or SMS, including anything you choose to include (for example, describing your research use case).
• Marketing preferences: your opt-in/opt-out choices for email and SMS.

4.2 Information Collected Automatically

• Device and technical data: IP address, browser type, device identifiers, operating system, and approximate location derived from your IP address or shipping address.
• Usage data: pages and products viewed, referring links, and how you navigate the site, collected via cookies and similar technologies — see Section 7.

4.3 Information From Third Parties

• Service providers we use to run the store — payment processing, shipping, email/SMS delivery, hosting, and analytics.
• Social platforms, if you interact with our content or log in using a social account.

Health-Related Information We Do Not Ask For

Because our products relate to scientific research on biological and physiological processes, you may voluntarily mention a health goal, condition, or intended research application in a customer service message or product inquiry. We do not ask for, and you should not send us, medical records or clinical health information.

If you do share health-related context voluntarily:

• Purpose-limited use: we use it solely to respond to your specific inquiry or provide support.
• No advertising: we do not use it for advertising, retargeting, or profiling.
• No sharing: we do not sell it and do not share it with any third party for marketing purposes.
• Limited access: we limit employee access to that information to what's needed to help you.

We do not knowingly collect Social Security numbers, government ID numbers, or biometric or genetic information.

We are not a HIPAA-covered entity, and this Policy is not a HIPAA privacy notice. The protections described in this Section are provided as a matter of company policy and applicable state law, not HIPAA, and should not be understood as HIPAA-equivalent protection.

Washington and Nevada residents have additional rights over “consumer health data” under state law — including data inferred from what you browse or purchase, not only what you tell us directly. Those rights and our related commitments are set out in our separate Consumer Health Data Privacy Policy, available at prolificpeptides.com/consumer-health-data-privacy-policy.

Payment Data

Payments are handled by a PCI-DSS-compliant, third-party payment processor. Your card details are transmitted directly to that processor, which returns a token we use to complete and reference your transaction. We do not store your full card number or card security code on our systems. Your payment provider's own privacy policy also applies to that transaction.

Cookies and Tracking Technologies

We use two categories of cookies:

• Essential cookies — required for the site to function: they keep you logged in, remember your cart, and support checkout and security.
• Analytics cookies — optional; they help us understand how visitors use the site so we can improve it.

You can block or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the site, including checkout, from working correctly. Because there is no common industry standard for interpreting browser “Do Not Track” signals, our site may not respond to all DNT signals. Where required by applicable law, we make reasonable efforts to honor a detected Global Privacy Control (GPC) signal as an opt-out of the sale or sharing of personal information.

7.1 Advertising Pixels and Retargeting

If we use advertising or analytics pixels (for example, from Meta or TikTok) for retargeting, they will not fire until you have given affirmative consent through our cookie banner, and essential/checkout functionality will not depend on that consent. We will not configure these tools to transmit product-, category-, or SKU-level detail that could reveal or allow a third party to infer a health condition, and we will not use browsing or purchase history to build advertising audiences based on inferred health status. This commitment applies whether or not we are currently running such tools, and is intended to satisfy both general cookie-consent requirements and the heightened consent standard under state consumer health data laws — see our Consumer Health Data Privacy Policy.

How We Use Your Information

We use personal information only for the following purposes:

• To process, fulfill, and ship your orders, including sending Certificates of Analysis, order confirmations, and tracking updates.
• To create and manage your account.
• To provide customer support and respond to inquiries.
• To send marketing communications where you have opted in, which you may opt out of at any time.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with our legal, tax, and recordkeeping obligations.
• To improve our website, catalog, and service.

Legal bases (for users in jurisdictions that require one): your consent, the necessity of processing to fulfill your order, our legitimate interest in operating and securing the Services, and compliance with legal obligations.

Who We Share Your Information With

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We share personal information only as needed to run our business, and only with parties bound to protect it:

• Shipping carriers — the name and address required to deliver your order and provide tracking.
• Payment processors — the information needed to authorize and settle your payment.
• Service providers — vendors that host our site (WordPress/WooCommerce), send transactional or marketing email/SMS, or provide analytics on our behalf.
• Legal requests — where required by law, subpoena, or valid legal process, or to protect our rights, safety, or property.
• Business transfers — if Prolific Peptides is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction; we will notify you of any material change in ownership or use of your data.

Data Retention

We keep personal information only as long as needed to fulfill the purposes in this Policy — completing your orders, providing support, and maintaining business records — and as long as required for tax, accounting, and legal obligations. Order and transaction records are generally retained for 7 years to meet tax and recordkeeping requirements. Marketing preferences are retained until you opt out or request deletion. When information is no longer needed, we delete or anonymize it.

Data Security

We use encryption in transit (TLS), access controls, PCI-compliant payment processing, and other administrative and technical safeguards appropriate to the sensitivity of the data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law. Email, text, and chat are not fully secure channels — please avoid sending sensitive information through them.

SMS and Email Marketing

If you opt in to receive SMS messages, you agree to receive recurring automated promotional and informational text messages from Prolific Peptides at the number provided. Consent to SMS marketing is not a condition of purchase. Message and data rates may apply; message frequency varies. Because we operate in Florida, our SMS program is also designed to meet the Florida Telephone Solicitation Act: messages are sent from a number capable of receiving a reply that reaches us, and we will honor an opt-out request within the time required by law — no later than 15 days, and typically much sooner.

• Reply STOP at any time to opt out of SMS messages, or reply HELP for assistance.
• Click “unsubscribe” in any marketing email to opt out of email marketing.

We do not sell, rent, or share your phone number with third parties for their own marketing purposes. We share it only with the platform providers, carriers, and vendors who help us deliver messages.

Your Privacy Rights

13.1 General Rights

Depending on where you live, you may have the right to know what personal information we hold about you, request a copy of it, request correction, request deletion, and opt out of the sale or sharing of your information for targeted advertising (we do not currently sell or share information for that purpose). To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before completing your request, and you may designate an authorized agent to submit a request on your behalf.

13.2 California Residents (CCPA/CPRA)

California residents have the right to know the categories and specific pieces of personal information we've collected, request deletion (subject to legal exceptions such as completing a transaction or tax compliance), request correction of inaccurate information, and opt out of the sale or sharing of personal information. We do not sell personal information for money and do not currently share it for cross-context behavioral advertising. Submit requests to the email in Section 15. If you're unsatisfied with our response, you may contact the California Privacy Protection Agency at cppa.ca.gov.

13.3 Washington and Nevada Residents (Consumer Health Data)

Washington's My Health My Data Act and Nevada's consumer health data law give residents of those states additional rights over “consumer health data” — a term defined broadly enough to include data inferred from your browsing or purchase activity, not just information you tell us directly. Because these laws require their own standalone notice, we've covered them separately in our Consumer Health Data Privacy Policy at prolificpeptides.com/consumer-health-data-privacy-policy rather than folding them into this general Policy. That document explains what we collect, why, and how to exercise your rights under both laws.

13.4 Other States

Residents of other states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut, or Utah) may have similar rights to access, correct, delete, and opt out of certain processing. Contact us using the details in Section 15 to submit a request; we will respond within the time required by applicable law.

Third-Party Links

Our site may link to third-party websites, such as our payment processor or shipping carriers. We are not responsible for the content or privacy practices of those external sites and encourage you to review their policies before providing any information.

Related policies: our Consumer Health Data Privacy Policy (prolificpeptides.com/consumer-health-data-privacy-policy) covers Washington and Nevada consumer health data rights in more detail than this Policy.

Contact Us

To exercise your privacy rights, or with questions about this Policy, contact:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated Policy here with a revised “Last Updated” date. Your continued use of our website after changes are posted constitutes acceptance of the revised Policy.