Privacy Policy

Midwestern Peptides LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

1. Information We Collect

Information You Provide

• Account information: Name, email address, password (hashed)
• Order information: Shipping address, billing address, order history
• Payment information: We never see or store card numbers. Card payments, where enabled, are processed by Stripe; cryptocurrency payments are processed by NOWPayments. We retain only the payment reference and the amount.
• Communications: Messages you send to our support team

Automatically Collected Information

• IP address, browser type, operating system
• Pages visited, time on site, referring URLs — only if you accept analytics cookies
• Cart and session data (via secure cookies)
• Abuse-prevention records: we store your IP address for a short period against sign-in, sign-up, password-reset, newsletter and payment attempts, so that automated attacks can be rate-limited

2. How We Use Your Information

• Process and fulfill your orders
• Send order confirmations and shipping notifications
• Respond to customer support inquiries
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Remind you about items left in your cart, unless you have opted out
• Send you product news, only if you explicitly opted in
• Understand how the site is used, only if you accept analytics cookies

We do not sell your personal information to third parties. We do not use your data for advertising profiling, and we run no advertising or retargeting pixels.

3. Service Providers

We do not sell or rent your data. We do rely on the following providers to run the store, and each processes only what its function requires:

• Supabase — hosts our database and accounts. Your account, addresses and order history are stored here.
• Vercel — hosts and serves the website. Processes your IP address and request logs.
• NOWPayments — processes cryptocurrency payments.
• Stripe — processes card payments where card checkout is enabled.
• Porkbun — delivers our email: order confirmations, shipping updates and password resets.
• Resend — alternative email delivery provider, used when configured.
• Google Analytics — site usage statistics. Loaded only if you accept analytics cookies.
• Shipping carriers — receive your name and address to deliver your order.
• Law enforcement — only where required by valid legal process.

4. Cookies

When you first visit, we ask whether you accept analytics cookies. Nothing optional is set until you answer, and declining means the analytics scripts are never loaded at all. You can change your answer at any time using the Cookie settingslink in the footer.

The three required cookies are strictly necessary to sign in and check out, and are exempt from consent requirements. Without them the store cannot function.

5. Data Retention

• Order records — 7 years, for tax and legal compliance
• Account information — while your account is active
• Abandoned cart records — deleted with the cart once it expires
• Newsletter subscriptions — until you unsubscribe
• Abuse-prevention IP records — cleared automatically once the rate-limit window passes, at most a few hours
• Payment webhook records — retained with the order, to prevent duplicate processing

You may request deletion of your account and associated data at any time. We may have to keep order records that tax law requires us to retain.

6. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Opt out of marketing communications at any time
• Data portability (GDPR / CCPA)

To exercise any of these rights, email: support@midwesternpeptides.com

7. Security

We implement industry-standard security measures including HTTPS/TLS encryption, hashed passwords, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our website is not directed to individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last updated" date above. Continued use of our site constitutes acceptance of the updated policy.

10. Contact Us

Midwestern Peptides LLC
North Dakota, USA
Email: support@midwesternpeptides.com