Privacy Policy

What we collect and why

Account details: your email, password (stored only as a secure hash by our authentication provider) and, optionally, your name. Used to operate your account and order history. If you sign in with Google, Google provides us your name, email and profile identifier.

Order details: your name, email, delivery address, optional phone number and order notes, the items ordered, and the payment method you selected. Used to process, confirm and dispatch orders, provide support, and meet our record-keeping obligations. We do not receive or store card numbers; if card payments are enabled they are processed by our payment provider on its own systems.

Contact and application forms: your name, email, message and, for affiliate applications, a description of your audience and channels. Used to respond to you and assess applications.

Referral and affiliate program: the referral code used on an order, the referring account, and a ledger of rewards earned and paid. If you request a payout we collect the details needed to pay you.

Technical information: IP address, browser and device type, pages visited and referring site. Some of this is collected automatically to run and secure the site; analytics and advertising measurement only run with your consent (see Cookies below).

We collect only what we need for these purposes. Where a field is optional you can leave it blank.

Research-use confirmation and age

Our products are supplied strictly for laboratory research to people aged 18 or over. We record the confirmation you give on our forms and at checkout that you meet these requirements. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will delete it.

Cookies, analytics and advertising

Essential cookies keep you signed in, protect the site from abuse, remember your cart, your theme, your cookie choice and your research-use confirmation, and record a referral code for 90 days if you arrive through a referral link.

With your consent we use Google Analytics 4 (site usage statistics) and Google Ads conversion measurement (whether an order followed one of our ads). These run through Google Consent Mode: until you accept them in the cookie banner, no analytics or advertising cookies are set. You can change your choice at any time via "Cookie settings" in the footer. Full details are in our Cookies Policy.

Who we share information with

Service providers who help us run the business, only to the extent needed: Supabase (database and account authentication), Hostinger (web hosting), Cloudflare (network security and content delivery), Google (analytics, advertising measurement, and sign-in if you use it), Google Workspace (email), our blog platform Soro (which hosts article images but receives no customer data), delivery carriers (your name, address and phone number for delivery), PayPal if you pay by PayPal invoice (your name, email address and the invoice amount, handled under PayPal's privacy policy), and a card payment provider if that option is enabled.

We may also disclose information where the law requires or permits it, for example to a regulator, court or law-enforcement agency, or to protect our rights or the safety of others.

We do not sell personal information and do not share it with advertising networks for their own use.

Overseas disclosure

Some of our providers store or process data outside Australia, including in the United States and the European Union (for example Google, Cloudflare and Supabase). We take reasonable steps to ensure those providers protect your information, including choosing providers that commit to recognised security standards. By using the site you acknowledge that your information may be handled overseas in this way.

Marketing communications

We only send marketing emails if you have asked to receive them, and every marketing email includes an unsubscribe link, in line with the Spam Act 2003 (Cth). Transactional emails about your orders, account or applications are sent regardless because they are part of providing the service. We do not send marketing SMS.

Security and retention

Data is encrypted in transit, access is restricted to those who need it, and our providers apply industry-standard safeguards. No system is perfectly secure; if a data breach is likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner as the law requires.

We keep order and payment records for at least 5 years to meet Australian tax and record-keeping obligations. Account information is kept until you delete your account. Contact-form messages and affiliate applications are kept for up to 12 months after we last correspond with you, unless you become an affiliate. Analytics data is retained according to Google's settings, which we limit to the shortest available period.

Access, correction and deletion

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data. Email research@peptasticlabs.info and we will respond within 30 days. We may need to keep some records where the law requires (for example, tax records of completed orders).

Complaints

If you believe we have mishandled your personal information, contact us first at research@peptasticlabs.info and we will investigate and respond in writing. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes and contact

We may update this policy from time to time; the date above shows the current version and material changes will be highlighted on this page. Questions or requests: research@peptasticlabs.info, Peptastic Labs, Melbourne, Australia.