Privacy Policy

This policy applies to information we handle through this website and through the order and support process. It does not cover third-party websites we link to, which have their own policies.

Information you give us

• Identity and contact details: name, email address, telephone number, and organization or institution.
• Order details: billing and shipping address, items purchased, and order history.
• Research-use attestations: the confirmations you make at checkout regarding age, researcher status, and intended use, together with the date they were made.
• Correspondence: the content of support requests, compliance questions, and documentation requests.

Information collected automatically

• Device and connection data such as IP address, browser type, operating system, and referring page.
• Usage data such as pages viewed, products viewed, and interactions with the site.

We use the information described above to:

• Process, fulfil, ship, and support your orders.
• Verify eligibility to purchase and record the research-use attestations required by our Terms of Sale.
• Provide certificates of analysis, storage guidance, and other documentation you request.
• Communicate about orders, shipping, and material changes to our policies.
• Detect, investigate, and prevent fraud, diversion, misuse, and security incidents.
• Meet legal, tax, accounting, recordkeeping, and regulatory obligations.
• Understand aggregate site usage so we can improve the catalogue and the website.

We do not use your information to make automated decisions that produce legal effects about you without human involvement.

Where data protection law requires a legal basis, we rely on: performance of our contract with you, to fulfil orders and provide support; compliance with legal obligations, to keep required records; our legitimate interests, to secure the site and prevent misuse; and your consent, where we ask for it — which you may withdraw at any time.

We share information only as needed, and only with parties bound to protect it:

• Service providers who host the site, process payments, deliver email, or provide analytics on our behalf.
• Shipping carriers and customs authorities, to deliver and clear your order.
• Professional advisers such as auditors and legal counsel, where necessary.
• Authorities and regulators, where we are legally required to respond, or where disclosure is necessary to investigate suspected misuse or diversion of research materials.
• An acquirer, in connection with a merger, financing, or sale of assets, subject to this policy continuing to apply.

We use a small number of cookies and browser storage mechanisms that are necessary for the site to work:

• Your shopping cart is kept in your browser local storage so it survives a page reload. It stays on your device until you clear it or clear your browser data.
• Administrative sessions use browser session storage and end when the tab closes.
• Where analytics are enabled, they help us understand aggregate traffic patterns.

You can clear this storage or block cookies in your browser settings, though doing so may reset your cart or prevent parts of the site from working. We honour Global Privacy Control signals where they are presented.

We keep information only as long as needed for the purpose it was collected, and then for any additional period required by law. Order records, including research-use attestations, are retained for the period applicable to commercial, tax, and product-traceability recordkeeping, because we may need them to demonstrate compliance or to trace a lot. When information is no longer needed we delete or anonymize it.

We use technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and limiting internal access to those who need it. No system is perfectly secure, however, and we cannot guarantee absolute security. Keep any account credentials confidential and tell us promptly if you suspect unauthorized access.

Depending on where you live, you may have the right to request access to the personal information we hold about you; correction of inaccurate information; deletion; a portable copy; restriction of or objection to certain processing; and withdrawal of consent. Residents of California and comparable jurisdictions may also request disclosure of the categories of information collected and the categories of recipients, and may opt out of any sale or sharing — which, as noted above, we do not engage in.

To exercise a right, contact compliance@nupeps.example. We will verify your request before acting on it and will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right. Note that we may need to retain certain order and attestation records even after a deletion request, where law requires it.

This website is intended for qualified researchers and is not directed to children. We do not knowingly collect personal information from anyone under 21 years of age. If we learn we have collected such information, we will delete it.

We operate from the United States, and our service providers may process information in other countries whose data protection laws differ from those where you live. Where required, we put appropriate safeguards in place — such as standard contractual clauses — before transferring personal information across borders.

We may update this policy to reflect changes in our practices or in the law. We will post the revised version with a new effective date, and where the change is material we will provide a more prominent notice.

For privacy questions or to exercise a right, contact NUPEPS Peptides at compliance@nupeps.example.