PeptiMed — Privacy Policy

Effective Date: July 21, 2026

Last Updated: October 13, 2026

This Privacy Policy describes how PeptiMed ("PeptiMed," "we," "us," or "our") collects, uses, and discloses your personal information when you visit or use our services, make a purchase from peptimed.com (the "Site"), or otherwise communicate with us regarding the Site (collectively, the "Services"). "You" and "your" means you as a user of the Services, whether a customer, website visitor, or another individual whose information we collect under this Privacy Policy.

Please read this Privacy Policy carefully. By using or accessing the Services, you agree to the collection, use, and disclosure of your information as described here. If you do not agree, please do not use or access the Services.

1. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on the Site and update the "Last Updated" date above. For material changes that affect how we use previously collected personal information, we will provide additional notice (such as a prominent Site notice or direct email) before the change takes effect, where required by law. Continued use of the Services after a revised policy takes effect constitutes acceptance of it.

2. How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from the sources described below. What we collect depends on how you interact with us. We may use this information to communicate with you, provide and improve the Services, comply with legal obligations, enforce our terms, and protect the Services, our rights, and the rights of our users and others.

3. What Personal Information We Collect

"Personal information" means information that identifies, relates to, describes, or can reasonably be associated with you.

3.1 Information You Provide Directly

Contact details — name, address, phone number, email address.

Order information — name, billing/shipping address, payment confirmation, email, phone number.

Account information — username, password, security questions, and other account-security information.

Shopping information — items viewed, carted, or saved (loyalty points, reviews, referrals, gift cards) and purchase history.

Customer-support information — anything you include in communications with us.

Some features require certain information; you may decline to provide it, but doing so may prevent you from using those features.

3.2 Information We Collect Automatically

We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar technologies. Usage Data may include device and browser information, network connection information, IP address, and other interaction data. See Section 6 (Cookies).

3.3 Information We Obtain from Third Parties

We may obtain information from:

• Vendors and service providers who support our Site and Services;
• Payment processors, who collect payment information to process transactions; and
• Analytics and advertising partners, who may collect information automatically via pixels, web beacons, SDKs, and cookies.

Information obtained from third parties is treated in accordance with this Privacy Policy. See also Section 10.

4. Categories of Personal Information, Sources, and Purposes

The following describes, for the preceding 12 months, the categories of personal information we have collected, their sources, our purposes, and the categories of third parties to whom we disclose them.

We collect and use sensitive personal information (including health-related information you voluntarily provide, and payment/financial account information) only as reasonably necessary to provide the Services, and do not use it to infer characteristics about you. See Sections 8 and 14 for more detail.

5. How We Use Your Personal Information

Providing products and services — processing payments, fulfilling orders, sending transaction- and account-related notifications, managing your account, arranging shipping, and handling returns/exchanges.

Marketing and advertising — sending marketing communications by email, text, or mail (subject to your choices) and tailoring advertising on our Site and elsewhere. See Sections 6 and 8 for opt-out rights.

Security and fraud prevention — detecting, investigating, and addressing fraudulent, illegal, or malicious activity. Keep your account credentials confidential; contact us immediately if you suspect compromise.

Communicating with you and improving the Services — customer support, responding to inquiries, and Service improvement.

Legal and compliance — complying with legal obligations, enforcing our terms, and protecting our rights and the rights of others.

6. Cookies

Our Site (powered by WooCommerce) uses cookies, pixels, and similar technologies to operate and improve the Site, run analytics, and understand user interaction. We may permit third parties and service providers to use cookies to tailor content and advertising on our Site and elsewhere.

Most browsers accept cookies by default; you can adjust browser settings to remove or reject them, though this may affect Site functionality.

Global Privacy Control (GPC): Our Site recognizes the GPC signal. If you send a GPC signal, we treat it as a valid opt-out request for the sale/sharing of information and targeted advertising for that browser or device, and will apply it to your account where we can associate the device with an account. Learn more at globalprivacycontrol.org. We do not currently respond to "Do Not Track" browser signals other than GPC.

7. How We Disclose Personal Information

We may disclose personal information to:

• Vendors and service providers performing services on our behalf (IT management, payment processing, analytics, customer support, cloud storage, fulfillment/shipping);
• Business and marketing partners, subject to your opt-out rights — these partners use your information under their own privacy notices;
• Parties you direct us to share with, or with your consent (e.g., shipping carriers, social-media integrations);
• Our affiliates and corporate group; and
• Parties involved in legal or business matters, including mergers, acquisitions, financing, or bankruptcy; to comply with legal obligations (subpoenas, warrants, similar requests); to enforce our terms; and to protect the Services and the rights of others.

We may also disclose aggregated or de-identified information that cannot reasonably identify you.

8. Sale or Sharing of Personal Information; Sensitive Personal Information

We do not sell personal information for money. Some state laws, however, define "sale" or "sharing" broadly enough to include certain online advertising and analytics activities even without a monetary exchange. To the extent our use of such technologies qualifies as a "sale" or "sharing" under applicable law, you may opt out — see Section 11 and Section 6 (GPC).

We do not knowingly sell or share the personal information of individuals under 16. We do not use or disclose sensitive personal information (including health-related information, precise geolocation, or account credentials) for purposes beyond what is necessary to provide the Services, and we do not use it to infer characteristics about you.

9. Notice of Financial Incentive (Loyalty Program)

If we offer a loyalty, rewards, or referral program, participation may involve the collection of personal information (such as purchase history and contact information) in exchange for benefits like points, discounts, or gift cards. This exchange may be considered a "financial incentive" under some state laws. Participation is voluntary, you may withdraw at any time by contacting us (Section 18), and the value of the personal information exchanged is reasonably related to the value we provide through the program's benefits. Details specific to any active program are provided at enrollment.

10. Third-Party Websites and Links

Our Site may link to third-party websites or platforms. We are not responsible for, and do not guarantee, the privacy or security practices or content of third-party sites — review their policies directly. Information you post on public or semi-public venues, including third-party social platforms, may be viewable by others without restriction. Inclusion of a link does not imply our endorsement.

11. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may be subject to exceptions; we will not discriminate against you for exercising them.

Right to access/know — request details about the personal information we hold and how we use/share it.

Right to delete — request deletion of personal information we maintain about you.

Right to correct — request correction of inaccurate personal information.

Right to portability — receive a copy of your personal information, and in some cases request transfer to a third party.

Right to opt out — of "sale" or "sharing," targeted advertising, and certain profiling.

Right to limit sensitive personal information — where applicable.

Right to restrict processing.

Right to withdraw consent, where we rely on it.

Right to appeal a decision if we decline a request.

Right to manage communication preferences — opt out of promotional emails via the unsubscribe link; you may still receive non-promotional account/order messages.

11.1 How to Exercise Your Rights

Submit requests through the methods listed on our Site, by emailing support@peptimed.com, or by calling (877) 314-1101. We will verify your identity before responding (e.g., via your email or account information) and will not require you to create an account to submit a request. You may designate an authorized agent; we will require proof of authorization and may verify your identity directly. We will respond within the time required by applicable law (generally 45 days, subject to permitted extensions).

11.2 California Residents

California residents have rights under the CCPA as described above, including the right to know, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information. See Sections 3, 4, 5, and 7 for the categories, sources, purposes, and disclosure recipients. To opt out of sale/sharing, use the "Do Not Sell or Share My Personal Information" link (if applicable), enable GPC, or contact us per Section 11.1.

11.3 Residents of Other States

Residents of states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Texas, Washington, and others) may have the rights above, including the right to appeal a denied request. To appeal, reply to our decision or contact us (Section 18). If your appeal is denied, you may contact your state attorney general.

12. Complaints

Contact us (Section 18) with complaints about our data practices. If unsatisfied with our response, you may have the right to appeal (Section 11.3) or lodge a complaint with your local data-protection authority.

13. Children's Data

The Services are not directed to children, and we do not knowingly collect personal information from children under 13. Parents or guardians who believe their child has provided us information may contact us to request deletion. We do not have actual knowledge that we sell or share the personal information of individuals under 16.

14. Health Information

Because some of our products relate to health and wellness, you may choose to share health-related information with us — for example, in product reviews, customer-support messages, or account notes. This information is not collected through a healthcare provider and is not governed by HIPAA. Depending on your state of residence, this information may qualify as "consumer health data" or similar under state law (for example, in Washington, Nevada, or Connecticut), which may provide additional rights, such as the right to a specific authorization before certain disclosures and the right to withdraw consent.

We do not use health-related information you share with us for advertising purposes, and we do not disclose it to third parties except as necessary to provide the Services (e.g., to a service provider under a confidentiality obligation) or as required by law. If applicable state law requires a separate consumer health data notice or authorization, we will provide it at the point of collection.

15. Security, Retention, and International Users

Security. We use commercially reasonable measures designed to protect your personal information. No method of transmission or storage is completely secure, and we cannot guarantee "perfect security." Avoid sending sensitive information through insecure channels.

Retention. We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to maintain your account, provide the Services, comply with legal obligations (such as tax and accounting requirements), resolve disputes, and enforce our agreements. As a general matter:

• Order and transaction records are retained for as long as required by applicable tax and accounting laws.
• Account information is retained for as long as your account remains active, plus a reasonable period thereafter.
• Marketing contact information is retained until you unsubscribe or opt out, plus a reasonable period to process that request.

When information is no longer needed, we delete, de-identify, or securely archive it.

International users. We may transfer, store, and process personal information outside your country of residence, including by staff and service providers. For transfers out of the European Economic Area or United Kingdom, we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses (or the UK equivalent), unless the destination country is deemed to provide an adequate level of protection.

16. Data Breach Notification

In the event of a security incident involving unauthorized access to your personal information that triggers a notification obligation under applicable law, we will notify affected individuals and any required regulators without unreasonable delay and in accordance with applicable legal requirements.

17. Accessibility

If you use a screen reader or other assistive technology and have difficulty accessing this Privacy Policy, please contact us (Section 18) and we will provide the information in an alternative format.

18. Contact

PeptiMed LLC

10055 Yamato Road

Boca Raton, FL 33498

Email: support@peptimed.com