Privacy Policy

Privacy Policy Effective: [SET AT LAUNCH]

1. Scope. This policy explains how Protocol Labs, LLC d/b/a Protocol Peptides ("we," "us") collects, uses, and shares personal information when you use our site or place an order.

2. Information we collect.

You provide: name, shipping address, email address, order contents, account

credentials if you create an account, and the research-use attestation you submit at checkout (text version, timestamp).

Automatically: IP address, device and browser information, and general location

(used for region routing and to enforce shipping restrictions), plus the cookies and local storage described in §7.

Payments: cryptocurrency payments are processed by our third-party payment

processor. We receive and retain the payment status, the amount, the asset used, and transaction identifiers. We never receive or store your wallet private keys. Note that blockchain transactions are public by design; we do not control what third parties can infer from on-chain data.

3. How we use it. To process and ship orders, enforce age and geographic restrictions, retain the research-use attestation, provide support, prevent fraud and abuse, and comply with law. We do not use your information for third-party advertising.

4. Sharing. We share personal information only with service providers needed to run the store — shipping carriers, our cryptocurrency payment processor, hosting and infrastructure providers, and error-monitoring services — and with authorities where legally required. We do not sell or share personal information for advertising purposes.

5. Retention. We retain order records and research-use attestations for 7 years to meet legal, tax, and audit obligations. Server and diagnostic logs are retained for approximately 90 days. Account data is retained until you ask us to delete it, subject to the order-record retention above.

6. Your rights. Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of sale or sharing (we do neither). To exercise any right, email hello@protocolpeps.com from the address associated with your order. We will verify and respond as applicable law requires. We do not discriminate against you for exercising your rights.

7. Cookies & local storage. We use strictly necessary cookies and local storage only: cart and session identifiers, region selection, and your age-gate acknowledgment. We do not use marketing or third-party advertising cookies. If that changes, this policy and a consent mechanism will be updated first.

8. Security. We use reasonable technical and organizational measures to protect your information, including encryption in transit. No method of storage or transmission is 100% secure.

9. Where data is stored. Our infrastructure is hosted in Iceland (within the EEA) and may be accessed from the United States for operations and support.

10. EU/UK visitors. If you are in the EU, EEA, or UK, we process your personal data to perform our contract with you (orders), to comply with legal obligations (records, tax), and for our legitimate interests (fraud prevention, security). You additionally have the rights to data portability, restriction of processing, objection, and to lodge a complaint with your supervisory authority. Contact hello@protocolpeps.com to exercise these rights.

11. Children. The site is not directed to anyone under 21; we do not knowingly collect information from minors.

12. Changes. We may update this policy; the effective date reflects the current version. Material changes will be noted on this page.

13. Contact. hello@protocolpeps.com