Privacy Policy for Peptide Products

---

Privacy Policy — Maximum Peptides

Effective date-10/1/25

Applies to: MaximumPeptides.com and any pages, emails, or forms we control (the “Site”).

1) Who we are

Maximum Peptides (“Maximum Peptides,” “we,” “us,” “our”) is a U.S. business providing peptide products and accessories. This Policy explains how we collect, use, share, and protect personal information when you visit the Site, create an account, contact us, or purchase from us.

This structure aligns with industry examples from peptide sellers and life-science suppliers, but is written uniquely for this Site. 

2) Information we collect

You provide:

• Contact and account data: name, email, phone, billing and shipping address.
• Order data: items purchased, order notes, transaction totals.
• Support content: messages, attachments, survey responses.
• Marketing preferences.

Collected automatically:

• Device and browsing data: IP address, user-agent, pages viewed, referring URL, timestamps, approximate location derived from IP, error logs, and cookie IDs.
• Shopping session data: cart contents, checkout steps, payment status (success/fail), fraud-screen signals.

From third parties:

• Payment processors (payment method, last 4 digits, auth result; we do not store full card numbers).
• Analytics/ads partners (aggregated performance metrics, ad click IDs).
• Address verification, fraud-prevention, and shipping carriers.

The categories mirror what peptide e-commerce sites commonly state and what the FTC expects businesses to disclose. 

3) Why we use your information

• Provide, secure, and improve the Site and services.
• Process and deliver orders; handle returns and customer support.
• Personalize content (e.g., saved cart, language, currency).
• Measure site performance and marketing effectiveness.
• Detect, investigate, and prevent fraud or abuse.
• Comply with law, tax, and record-keeping obligations.

Under the GDPR (when it applies), our legal bases include contract necessity, legitimate interests (site security, analytics, marketing to existing customers), legal obligation, and, where required, consent. 

4) Cookies and similar technologies

We use cookies, local storage, pixels, and SDKs to:

• keep you signed in; remember cart and preferences;
• perform analytics (page performance, conversions);
• measure and improve advertising.

Your browser may let you block or delete cookies. Doing so can limit Site features. (See Your Privacy Rights for opt-out choices, including “Do Not Sell or Share.”) Disclosures like these are standard in peptide retail and required under U.S./EU guidance. 

5) How we share information

We share the minimum necessary with:

• Service providers under contract (hosting, payment processing, fraud prevention, email/SMS, analytics, fulfillment, carriers, customer support tools).
• Advertising/analytics partners to measure campaigns; where California law treats this as a “share,” you may opt out.
• Legal and safety: to comply with law, enforce terms, or protect rights.
• Business transfers: during mergers, financing, or sale of assets.

Industry policies disclose similar limited sharing and “no sale without choice.” 

6) Data retention

We keep data only as long as needed for the purposes above:

• orders and tax records: typically 7–10 years;
• support tickets: up to 3 years;
• marketing data: until you unsubscribe or request deletion, or after a defined inactivity period;
• logs and security data: short, rolling windows unless needed for investigations.

GDPR requires stating retention periods or criteria. 

7) Security

We use administrative, technical, and physical safeguards appropriate to the data we hold (HTTPS, access controls, encryption in transit, least-privilege, monitoring). No system is 100% secure. The FTC requires that companies live up to their security commitments. 

8) Your privacy rights

A) U.S. state privacy laws (including California, Virginia, Colorado and others)

Depending on your state, you may have rights to:

• Know/access categories and specific pieces of personal information we collected about you.
• Delete personal information (with certain exceptions).
• Correct inaccurate personal information.
• Opt-out of sale or sharing of personal information and targeted advertising.
• Limit use of sensitive information (if we ever process such data for non-essential purposes; we currently do not intentionally collect sensitive data).
• Appeal a decision if we deny your request.

How to exercise: submit a request at [insert link/email]. We will verify your identity and respond within the timelines required by law. Authorized agents may act on your behalf where permitted. Provide the “Do Not Sell or Share My Personal Information” link where required. Guidance from the California Attorney General and current CPRA references these disclosures. 

B) EU/UK GDPR (if you are in the EEA/UK)

You have rights to access, rectify, erase, restrict or object to processing, and data portability; where processing relies on consent, you can withdraw consent at any time; you may lodge a complaint with your local supervisory authority. When applicable, we provide transfer safeguards for data sent to the U.S. (e.g., SCCs). Required notice items are listed in GDPR Articles 13–14. 

9) Children

Our Site is not directed to children under 13, and we do not knowingly collect children’s personal information.

10) International data transfers

If you access the Site from outside the U.S., your information may be processed in the U.S. and other countries with different data-protection laws. Where GDPR applies, we rely on appropriate safeguards for transfers. 

11) Communications and marketing

• Email/SMS: You can unsubscribe via the link in any email or reply STOP to SMS.
• Transactional messages: Order and account notices are not marketing and will still be sent.

12) Automated decision-making / profiling

We may use limited automated checks (e.g., fraud screening, shipping risk scoring). You may contact us to request human review where applicable law grants that right. Emerging state laws cover profiling and targeted ads; we provide notice and opt-outs accordingly. 

13) Third-party links and services

The Site may link to third-party sites or embed third-party scripts (e.g., payment, analytics, marketing). Their privacy practices are governed by their own policies.

14) Changes to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. If changes are material, we will provide a clear notice (e.g., banner or email). The “Effective date” shows the latest version.

15) Contact us

Maximum Peptides

Email: maximumpeptidesinfo@gmail.com

If you are in the EEA/UK and wish to contact a data-protection representative (if appointed), email us.

16) Region-specific disclosures (California addendum)

Categories collected: identifiers; commercial information; internet/usage data; geolocation (coarse IP-based); inferences (e.g., interest segments); and other information you choose to provide.

Sources: you; your devices; transaction processors; advertising/analytics partners.

Business/commercial purposes: as described in Section 3.

Disclosures for business purposes: service providers (payment, hosting, shipping, fraud, analytics, support).

Sale/Share: We do not sell personal information for money. Some sharing with advertising/analytics partners may be considered “sharing” under California law; you can opt out via the “Do Not Sell or Share My Personal Information” link.

Retention: as in Section 6.

Non-discrimination: We will not discriminate against you for exercising your rights.

These items align with California AG guidance for CCPA/CPRA. 

17) Payments

Payments are handled by third-party processors. We receive limited payment metadata (e.g., status, last four digits) but not full card numbers. See your processor’s privacy policy for details.

18) Do Not Track

Some browsers send a “Do Not Track” signal. There is no industry standard for responding to DNT; we currently do not respond to DNT signals. We honor legally required opt-outs using our consent and preference tools.

19) State contact and appeals (Virginia/Colorado and similar)

If we deny your privacy request, you may submit an appeal by replying to our response or emailing [insert appeals email] with “Privacy Appeal” in the subject. We will respond within the time required by your state law.