Privacy Policy

Summary

This site collects the minimum information needed to answer inquiries and, if an order is accepted, fulfill it. The site does not load third-party marketing pixels, ad-network trackers, or session-replay tools. Order requests are relayed to the Operator through a third-party form-delivery service (Formspree) — see "What we collect" below. Your email and shipping address are not sold, rented, or shared with marketing partners.

Who this policy applies to

This policy governs the collection, use, and handling of personal information by Private Supply Peptides (the "Operator") through this website and through direct correspondence initiated from it.

What we collect

Information you provide directly

• Contact-form submissions: the name, email address, topic, and message body you enter in the contact form.
• Order-request submissions: the name, ship-to address, notes, and items in your cart at the time you submit an order request through the site. The cart does not ask for an email address or phone number — follow-up on a submitted request happens through the Contact page.

Both the contact form and order-request submissions from the cart are sent directly to the Operator through Formspree, a third-party form-delivery service, which relays each submission by email. If that delivery fails, the site displays a copyable version of your message on-screen so you can send it yourself — it does not open your email client automatically. Formspree processes those fields solely to deliver the message to the Operator; see Formspree's privacy policy for how it handles data in transit. It is not used for advertising, and the Operator does not use Formspree's data for any purpose beyond receiving your request.

Information collected automatically

• Cart state: the site uses your browser's localStorage to remember cart items between pages. This data stays on your device; it is not transmitted anywhere until you submit an order request.
• Basic server logs: your web host may log IP address, browser identifier, and requested URL for standard operational and security purposes. The Operator does not maintain or export those logs for marketing purposes.

What we do not collect

• No Meta Pixel, Google Ads tag, TikTok Pixel, LinkedIn Insight Tag, or other cross-site advertising trackers.
• No session-replay, mouse-tracking, or heat-mapping tools.
• No cookies beyond browser-native localStorage for cart state.
• No user accounts. There is no account to create, no password to store, no purchase-history profile.

How your information is used

• To respond to your inquiry.
• To review your order request and, if the Operator accepts it, to fulfill and ship it.
• To send order-related messages that the transaction reasonably requires (confirmation, shipping notice, resolution of issues).

Your information is not used for behavioral advertising, list monetization, or profile-building for third parties.

Sharing

Your information is shared only when necessary to carry out an action you initiated:

• Formspree: order-request form data passes through Formspree to be delivered to the Operator by email — see above.
• Shipping carrier: the ship-to name and address are shared with the carrier chosen to deliver an accepted order.
• Payment processor: if the Operator sends you a payment link, the processor receives the information it needs to process your payment under its own privacy policy.
• Legal compliance: if the Operator is compelled by lawful subpoena, warrant, or court order to produce information, it will comply as narrowly as the law permits.

Beyond these narrow, action-driven cases, your information is not shared with third parties.

Retention

Contact-form messages and order-request records are retained by the Operator only as long as needed to service the request and to satisfy applicable tax and business-record requirements. Records not required for those purposes are deleted.

Your rights

Depending on your jurisdiction (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and equivalent laws in Virginia, Colorado, Connecticut, Utah, and others), you may have the right to:

• Confirm whether the Operator holds information about you.
• Request a copy of that information.
• Request correction of inaccurate information.
• Request deletion of information the Operator is not legally required to keep.
• Object to the sale or sharing of your information (the Operator does not sell or share your information for marketing).

To exercise any of these rights, contact the Operator using the details on the Contact page. The Operator will respond within the timeframe required by your jurisdiction (generally 30 to 45 days).

Children

This site is not directed at children and does not knowingly collect information from anyone under 18. If you believe a minor has provided information to this site, contact the Operator and it will be deleted.

Changes to this policy

If this policy changes, the effective date above will be updated. Material changes will be reflected on this page. Continued use of the site after a change constitutes acceptance of the revised policy.

Contact

Questions about this policy or your data: see the Contact page.