Privacy Policy
Effective date
Effective 31 August 2026. This replaces the policy published in November 2025.
Your privacy and data security matter to us. This policy explains what we collect, why, and what you can ask us to do about it. By using this website you agree to the practices described here.
What you give us directly
When you create an account, place an order, request a certificate or contact us, we collect the details you enter: your name, email address, shipping and billing address, telephone number where you supply one, your institution or company name, and the content of your message.
Payment card details are never seen or stored by this website. Card payments are entered directly into the payment provider's own hosted form, and we receive only the result of the transaction and the last four digits, which is what appears on your order.
What we collect automatically
When you visit the site we collect device type and operating system, pages visited and time spent, and the referring website or search source. We use cookies and analytics to understand how the site performs.
You can set your browser to refuse cookies. Some parts of the site, including your basket and your signed-in session, rely on them and will not work without them.
What we use it for
We use your information to take and fulfil your order, to send order and delivery notifications, to answer your questions, to send documentation you have asked for such as certificates of analysis, to keep the records that tax and compliance obligations require us to keep, and to develop and maintain the site.
We send marketing email or SMS only where you have opted in, and every message carries a way to stop. Withdrawing consent is recorded permanently, so a later mailing cannot reach you by accident.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
Who we share it with
We share what is necessary with the providers that run this business on our behalf: the payment provider that processes your payment, the carrier that delivers your parcel, the services that send our email and SMS, and our hosting and analytics providers. Each receives only what its job requires.
We also disclose information where the law requires it.
Keeping it safe
We use technical and organisational measures to guard against unauthorised access, alteration, disclosure or destruction, including encryption in transit, restricted administrative access, and an audit record of administrative actions.
No online platform can promise absolute security, and we do not.
How long we keep it
We keep personal information only as long as the purpose requires. Order and payment records are kept for the period tax and financial rules require. Records of consent and of opting out of marketing are kept for ten years, because being able to show when and how somebody opted out is the point of holding them at all.
Links to other sites
The site links to third-party services such as payment providers. We are not responsible for their privacy practices, and you should read their policies separately.
Your rights
Depending on where you live, you may have the right to see the personal data we hold about you, to have it corrected or deleted, to withdraw consent to processing, and to complain to a data protection authority.
To exercise any of these, contact us at info@nanopeptidelabs.com.
**Which laws apply to us.** We sell only within the United States, so the EU and UK GDPR do not apply to this store. The US state privacy laws now in force — including the California Consumer Privacy Act as amended by the CPRA, and the equivalent laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and Florida — each apply only to businesses above a revenue or volume threshold. We are below all of them, so none currently imposes statutory obligations on us.
We are telling you that plainly rather than claiming a compliance we do not have. It also does not change what we will do: **the rights above are offered to every customer regardless of where you live and regardless of whether a law compels us.** If we later cross a threshold, the statutory rights attach automatically and we will say so here.
**What we do not do.** We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use it for automated decision-making or profiling.
Age
This site and its products are for professional and research use only. We do not knowingly collect information from anyone under 21 years of age.
Changes
We may update this policy. Changes are posted on this page with a new effective date.
Contact
Questions about this policy or about your data: info@nanopeptidelabs.com.
Postal address: 1916 SE 14 CT, Homestead, FL, 33035, US.
