Short version: we keep what an order needs and the record that you confirmed what the material is for. We do not sell anything about you to anybody, and we never see your card number.

What we collect

When you order: your name, email address, shipping address, and a phone number if you give one. Your order itself — what you bought, at what price, and which lot it came from.

The research-use confirmation you tick at checkout, with the date and time, and the network address and browser it came from. That record exists because it is the only proof of what you told us the material was for, and it is the first thing anyone auditing this shelf would ask to see.

If you join the mailing list, your email address and nothing else.

We do not collect card numbers. Card details go directly to our payment processor; what comes back to us is an approval, the last four digits and a reference.

What your browser keeps

Your basket, your answer to the age gate, and whether you have already seen the welcome offer are stored in your own browser, not on our servers. Clearing your site data removes all three.

We do not run advertising trackers and we do not share browsing behaviour with advertisers.

Who else sees it

Our supplier, American Peptides, receives what a shipment needs — your name, address and the lines on your order — because they pack and dispatch it. They do not receive your payment details.

Our payment processor receives what a card transaction needs, directly from you. Our carriers receive the address. Our email provider receives your address and the message.

Otherwise, nobody. We do not sell, rent or trade personal information, and no part of this business is funded by doing so.

We will disclose records if a law or a court requires it, and we will tell you when we are allowed to.

How long we keep it

Order records, including the research-use confirmation, are kept for seven years, because tax law and product-liability exposure both run longer than a normal business record. Mailing-list addresses are kept until you unsubscribe.

What you can ask for

A copy of what we hold about you, a correction, or deletion. We will do all three, except where an order record has to be kept for the period above. Write to us and we will answer within thirty days.

There is nothing to opt out of on selling or sharing, because we do neither.

Security

The site runs over TLS. Card data never touches our servers. Access to order records is limited to the people who fulfil them, behind a password and a signed session.

If we ever have a breach that affects you, we will tell you and say plainly what was taken.

Reaching a person

[Registered company name] LLC, [Street address], [City], [ST] [ZIP]. hello@touchstonepeptides.com.