Privacy Policy

Last updated September 29, 2026

This policy explains what personal information ThePeptideProtocol collects when you use this website, why we collect it, and how we protect it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

• When you place an order: your name, email address, shipping address, the items you order, the payment method you choose (Interac e-Transfer or cryptocurrency) and any note you add. We never ask for or store credit card numbers or online banking passwords. When your payment arrives we may see the sender name, email or wallet address that comes with it.
• When you create an account: your name, email address and password. Passwords are stored only in scrambled (hashed) form, so no one, including us, can read them.
• When you contact support: your name, email address, order number (if given) and your message.
• Automatically: a cookie that keeps you signed in (for up to 30 days), and your cart and browsing position, which are stored in your own browser. Our hosting provider keeps standard technical logs (such as IP address and browser type) for security. We do not use advertising or analytics trackers.

How we use it

We use your information only to:

• process, ship and track your orders, and send you order and payment emails;
• run your account and keep your cart;
• answer your questions and resolve problems with an order;
• prevent fraud and keep the site secure; and
• meet our legal, tax and accounting obligations.

We do not sell or rent your personal information, and we will not send you marketing emails unless you ask to receive them.

Who we share it with

We share personal information only as needed to run the store:

• Service providers: our website host and database provider (Vercel), our email provider (Google), and shipping carriers, who receive your name and address to deliver your order.
• When required by law: for example, in response to a valid legal request.

Some of these providers store or process information outside Canada, including in the United States. While it is there, it is subject to the laws of that country and may be accessed by its authorities under those laws.

How long we keep it

We keep order records for as long as we need them to fulfil and support your order and to meet tax and accounting requirements, which in Canada is generally six years. Account information is kept until you ask us to delete your account. Support messages are kept only as long as needed to resolve your request.

How we protect it

The site is served over an encrypted (HTTPS) connection, passwords are hashed, and access to order and customer records is limited to the people who run the store.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it (except records we must keep by law). You can also withdraw your consent, although we may then be unable to complete an order. To make a request, contact us through our Support page. We will respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Age

This site is not intended for anyone under the age of majority in their province or country.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.