Privacy Policy

1. Who this covers

This policy covers personal information handled by BioSpring Peptides through this website, through orders placed on it, and through messages you send us. It does not cover any third-party site you reach from a link here.

2. Information you give us

When you order, register, or contact us we collect:

• Name, email address, and telephone number.
• Shipping address and billing address.
• The contents of your order, and the confirmations you tick at the age notice and at checkout.
• Account credentials, held as a one-way hash by our authentication provider, never as readable text.
• The content of messages you send us, including anything you choose to put in them.

3. Information collected automatically

When you browse the site we collect technical information: IP address, browser and device type, pages viewed, the page that referred you, and identifiers stored in cookies. This is used to run the site, to keep it secure, and, where you have agreed, to count traffic.

4. Card details

Card numbers are entered into fields controlled by our payment provider and are sent directly to that provider. Card numbers never reach our servers, our logs, or our database, and we cannot see them.

What we keep is the outcome of the charge, the card brand, and the last digits the provider returns, so that we can match a payment to an order and handle a refund.

5. Why we hold your information

We hold personal information only for stated purposes:

• To take, fulfill, and deliver your order, and to keep you informed about it.
• To take payment and to handle refunds and chargebacks.
• To answer your questions and to keep a record of what was asked and answered.
• To confirm eligibility to purchase, and to keep the compliance record that our category requires.
• To detect and prevent fraud, abuse, and unlawful ordering.
• To keep the accounting and tax records the law requires us to keep.
• To maintain, secure, and develop the site.
• To send marketing messages, where you have asked for them.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Who we share it with

We share what is needed, with providers who act for us under contract:

• The payment provider that processes your card.
• The carriers that deliver your parcel, which receive the shipping address and a contact detail.
• The provider that sends our order and account emails.
• Our hosting, database, and file storage providers.
• Our customer relationship system, which receives order-level records so that we can support you.

We also disclose information where the law requires it, where we must to protect our rights or someone else, or as part of a sale or reorganization of the business, in which case the recipient is bound by this policy.

7. Cookies

Necessary cookies keep your session, your cart, and the security of the site. They cannot be switched off, because the store cannot run without them. Your age confirmation is not a cookie: it is kept in your browser's own local or session storage and is never sent to us.

Analytics cookies count page and traffic figures. Marketing cookies let us see which campaign brought a visitor here. Neither category is switched on until you agree to it in the cookie banner, and you can change your choice at any time from that banner.

Clearing your browser storage for this site removes every cookie we set and your stored age confirmation, which the site will then ask for again.

8. How long we keep it

Order and payment records are kept for as long as tax and accounting law requires. Account details are kept while the account is open, and for a short period after it is closed so that a reopening or a dispute can be handled. Messages are kept while they are useful for support and then removed on a regular cycle.

Where information is no longer needed for any of the purposes above, it is deleted or made anonymous.

9. How we protect it

Traffic between your browser and this site is encrypted. Access to the database is limited by row level security, so a request can read only the rows it is entitled to read, and administrative access is restricted to named accounts.

No system is perfect, and we do not claim ours is. If a breach occurs that puts your information at risk, we will notify you and the relevant authority as the law requires.

10. Your choices and your rights

You may ask us to:

• Give you a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Delete information we no longer need to keep.
• Stop sending marketing messages, which you can also do from the unsubscribe link in any of them.
• Withdraw a consent you gave, including your cookie choices.

Send a request through the contact page. We will verify who you are before acting, because we cannot hand order records to the wrong person, and we will respond within the period the law sets. Depending on where you live you may have further rights under state privacy law, and we apply the rights listed above to everyone regardless of where they live.

11. Age

This site is not directed to anyone under 21 and nobody under 21 may buy from it. We do not knowingly collect personal information from anyone under 21. If we learn that we have, we delete it.

12. Changes to this policy

We may revise this policy. The version published on this page is the version that applies, and the date it was last updated is shown at the top of the page. Where a change is significant we will say so on the site.