Information you provide and information collected automatically

• Contact details, including name, email address, telephone number, billing address, and shipping address.
• Account details, preferences, customer-service messages, and information submitted through forms.
• Order and transaction data, such as products ordered, order value, payment status, shipment details, returns, and support history.
• Device and technical data, including IP address, browser type, operating system, device identifiers, referring pages, and approximate location derived from IP address.
• Usage data, including pages viewed, links selected, session activity, website performance, and interactions with emails where permitted.
• Fraud-prevention and compliance information reasonably required to secure transactions, enforce policies, or meet legal obligations.

Where information comes from

We may receive information directly from you; automatically from your browser or device; from service providers that support payments, fraud screening, analytics, communications, fulfillment, and delivery; and from publicly available or lawful sources used for security and compliance.

Business and operational purposes

• Process, verify, fulfill, deliver, and administer orders.
• Create and maintain customer accounts and transaction records.
• Respond to inquiries, provide customer support, and resolve disputes.
• Operate, personalize, measure, troubleshoot, and improve the website.
• Detect, investigate, and prevent fraud, abuse, security incidents, and prohibited activity.
• Send service messages, order updates, policy notices, and, where permitted, marketing communications.
• Comply with applicable legal, tax, accounting, recordkeeping, and regulatory requirements.
• Establish, exercise, or defend legal claims and enforce our terms and policies.

Where applicable law requires a recognized legal basis for processing, we rely on the basis appropriate to the activity, which may include performing a contract, complying with law, pursuing legitimate business interests, or obtaining consent.

Transaction processing

Payment information is processed through third-party payment providers. Royal Peptides does not store full payment-card numbers or full banking credentials. We may receive limited transaction information such as payment status, payment method type, billing details, transaction identifiers, and fraud-screening results.

Payment providers process information under their own terms and privacy policies. You should review those policies when selecting a payment method.

Site functionality, analytics, and preferences

We may use cookies, pixels, local storage, logs, and similar technologies to keep the website functioning, remember preferences, protect transactions, understand traffic, measure performance, and improve the user experience.

Your cookie choices

You can adjust browser settings to block or delete cookies. Some essential cookies are required for features such as cart, checkout, account security, and saved preferences; blocking them may affect website functionality. Where required, additional cookie choices will be presented through an available consent tool.

Do Not Track and preference signals

Because browser “Do Not Track” signals are not interpreted uniformly, our response may vary. We process recognized browser-based preference signals when and to the extent required by applicable law.

Service and marketing messages

We may send transactional messages about orders, accounts, security, customer support, and material policy changes. These service communications are not promotional and may be necessary to complete your request.

Where permitted, we may also send marketing communications. You can unsubscribe using the link in a marketing email or by contacting us. Unsubscribing from marketing will not stop essential service messages.

When information may be disclosed

Royal Peptides does not rent personal information. We do not sell personal information for money. We may disclose information in the following limited circumstances:

• To service providers supporting website hosting, payments, analytics, communications, fraud prevention, order fulfillment, shipping, professional advice, and customer support.
• To comply with law, court orders, lawful requests, tax requirements, or regulatory obligations.
• To protect Royal Peptides, customers, service providers, or the public from fraud, abuse, security threats, or unlawful activity.
• In connection with a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality and legal requirements.
• With your direction or consent, or as otherwise disclosed when the information is collected.

Service providers are authorized to process information only for the services they provide, subject to contractual or legal duties applicable to them.

How long information is kept

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfillment, customer support, security, fraud prevention, recordkeeping, dispute resolution, and legal, tax, or accounting requirements.

Retention periods vary by information type and context. When information is no longer required, we take reasonable steps to delete, de-identify, or securely dispose of it, unless continued retention is required or permitted by law.

Cross-border service delivery

Royal Peptides and its service providers may process information in countries other than the country where you reside. Privacy and data-protection laws may differ between jurisdictions. Where required, we use lawful safeguards appropriate to cross-border processing.

Services are not directed to children

The website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and take appropriate action. A higher age threshold may apply in some jurisdictions.

Requests and choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to or a copy of personal information associated with you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain information.
• Object to or request restriction of certain processing.
• Request portability of information in an available, usable format.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications or certain legally defined data practices.
• Appeal a decision on a privacy request where applicable.
• Make a complaint to an appropriate privacy or data-protection authority.

Submitting and verifying a request

Submit a request using the contact information below. We may ask for information reasonably necessary to verify your identity, locate responsive records, prevent fraud, and protect other people’s information. Authorized agents may submit requests where permitted, subject to verification of their authority.

We will not unlawfully discriminate against you for exercising a privacy right. Some requests may be limited or denied where an exception applies, such as when information must be retained for legal compliance, transaction records, security, or the rights of others.

Independent privacy practices

The website may connect to third-party services or contain links to external websites. These parties control their own privacy and security practices. Royal Peptides is not responsible for the content or privacy practices of independent third parties, and we encourage you to review their policies before providing information.

Updates to this policy

We may update this policy to reflect changes in operations, technology, services, or legal requirements. The revised policy will be posted with an updated effective date. Where required, we will provide additional notice or obtain consent before a material change takes effect.