How PeptaLux collects, uses, and protects personal information.
PeptaLux LLC · Last updated: May 28, 2026
This Privacy Policy describes how PeptaLux LLC (“PeptaLux,” “we,” “us,” or “our”) collects, uses, discloses, and protects the personal information of website visitors and customers (“you” or “your”). It applies to the website and order-processing services operated by PeptaLux. By accessing or using the website, or by placing an order, you acknowledge that you have read and understood this Policy and consent to the practices it describes. This Policy is incorporated into and forms part of our Terms and Conditions.
2.1 Information you provide to us: name; billing and shipping address; email address; telephone number; payment information (processed by our third-party payment processor — we do not store full payment card numbers); age and qualified-researcher attestations; account-registration details; and the contents of any communications you send to us.
2.2 Information collected automatically: IP address, device identifiers, browser type, operating system, referring and exit URLs, pages viewed, session activity, timestamps, and information collected through cookies and similar technologies.
2.3 Information from third parties: fraud-prevention and risk-scoring data, address-verification data, and transaction-related information from our payment processor.
We process personal information to: (a) accept, process, fulfill, and ship orders, including through third-party fulfillment partners acting at our direction; (b) verify purchaser eligibility and conduct fraud prevention and risk assessment; (c) create and maintain records of acceptance of our Terms and of our research-use gate attestations, including time-stamped IP logs of such acceptance; (d) provide customer service and respond to inquiries; (e) comply with applicable law and respond to lawful requests from public authorities; (f) operate, maintain, secure, and improve the website and our products; (g) send transactional communications and, where permitted by law, marketing communications (from which you may opt out at any time); and (h) establish, exercise, or defend legal claims and enforce our Terms.
For individuals located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), where applicable, our legal bases for processing are: performance of a contract (Art. 6(1)(b)); compliance with a legal obligation (Art. 6(1)(c)); our legitimate interests in operating, securing, improving, and defending our business (Art. 6(1)(f)); and, where required, your consent (Art. 6(1)(a)).
PeptaLux is a United States business that sells and ships exclusively within the United States. PeptaLux does not target, market to, or solicit customers in the EEA or UK, and does not knowingly offer goods or services to, or monitor the behavior of, data subjects in the EEA or UK. If you choose to access this website from outside the United States, you do so on your own initiative and are responsible for compliance with your local laws.
We disclose personal information to the following categories of recipients: (a) our payment processor and fraud-prevention vendors; (b) shipping carriers and third-party fulfillment partners engaged under contract; (c) information-technology, hosting, analytics, and email-service vendors engaged under contract; (d) professional advisors, including legal and accounting professionals; (e) governmental authorities, courts, law-enforcement agencies, or other parties where we believe in good faith that disclosure is required by law, subpoena, or legal process, or is necessary to protect the rights, property, or safety of PeptaLux, our customers, or others; (f) a successor entity or acquirer in connection with a merger, acquisition, sale of assets, financing, reorganization, bankruptcy, or similar transaction; and (g) other parties with your consent or at your direction.
We do not sell personal information for monetary or other valuable consideration, and we do not share personal information for cross-context behavioral advertising. Where personal information is shared with a fulfillment partner or other service provider, that recipient is contractually obligated to use the information solely to perform services on our behalf and not for its own independent purposes.
We use cookies and similar technologies for website operation, security, authentication, and analytics. You may control or disable cookies through your browser settings. Disabling certain cookies may impair website functionality. For more information about how we respond to browser-based privacy signals, see Section 14.
We retain personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with our legal, tax, accounting, and regulatory obligations, and to establish, exercise, or defend legal claims. Acceptance and attestation logs (research-use gate, checkout, associated IP address, and timestamp) are retained for a minimum of seven (7) years. When personal information is no longer required, we will delete, de-identify, or securely dispose of it.
8.1 Categories of personal information collected in the preceding 12 months: identifiers; commercial information; internet or other electronic network activity information; geolocation data (general, IP-derived); inferences; and financial information (limited).
8.2 Sources, business purposes, and disclosures are described in Sections 2, 3, and 5 of this Policy.
8.3 Sale and Sharing. We do not sell personal information and do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.
8.4 Sensitive Personal Information. We do not collect or use sensitive personal information for purposes that would require us to provide a “right to limit” notice under the CPRA.
8.5 Your rights. Subject to applicable law and verification, California residents have the right to: know and access the personal information we have collected; correct inaccurate personal information; delete personal information; opt out of the sale or sharing of personal information (not applicable — see Section 8.3); limit the use of sensitive personal information (not applicable — see Section 8.4); data portability; and to not receive discriminatory treatment for exercising these rights.
To submit a request, email support@peptalux.com. We will verify your identity using information you provide before responding. You may use an authorized agent to submit a request on your behalf with valid written authorization. We will respond within the timeframes required by applicable law (generally within 45 days, extendable as permitted).
Residents of states with comprehensive consumer privacy laws — including, as applicable, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others — have rights similar to those described in Section 8, including the right to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, or certain profiling. To submit a request, email support@peptalux.com. Where the applicable law provides a right to appeal a denied request, you may appeal by replying to our response or by contacting us at the same address; we will inform you in writing of the outcome of any appeal.
Subject to applicable law, individuals in the EEA or UK may have the right to access, rectify, erase, restrict, or port their personal information, to object to certain processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority. PeptaLux has no establishment in the EEA or UK and has not appointed an Article 27 representative; if you believe such an appointment is required in your circumstances, contact support@peptalux.com.
Personal information is collected and processed in the United States. If you access the website or submit information from outside the United States, you understand and consent to the transfer, storage, and processing of your information in the United States, which may have data-protection laws that differ from those of your jurisdiction. Where required by law, we rely on appropriate safeguards for such transfers.
The website is intended solely for individuals who are at least 21 years of age. The website is not directed to, and we do not knowingly collect personal information from, anyone under 21 years of age. If we become aware that we have collected personal information from an individual under 21, we will delete it promptly.
We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You transmit information to us at your own risk.
Because there is no industry-standard consensus on how to interpret “Do Not Track” browser signals, we do not currently respond to them. We honor Global Privacy Control (GPC) signals from California and other applicable jurisdictions to the extent required by law.
We may update this Privacy Policy from time to time. Any changes become effective upon posting to this page, with the “Last updated” date revised accordingly. Your continued use of the website after changes are posted constitutes acceptance of the revised Policy.
For questions about this Policy or to exercise your rights, contact:
support@peptalux.com PeptaLux LLC, 30 N Gould St, Ste 62570, Sheridan, WY 82801
Last updated: May 28, 2026