Privacy Policy

peplix.bio · support@peplix.bio
Effective Date: March 11, 2026 · Last Updated: March 11, 2026

Peplix Research Supply (“Peplix”, “Company”, “we”, “us”) operates the website peplix.bio as a B2B platform serving licensed research institutions, universities, government agencies, and qualified independent researchers. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit our website, create an account, or place an order.

By accessing peplix.bio or submitting any personal data to Peplix, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when interacting with our website, including:

Account registration: Name, email address, password, and optional institutional affiliation
Order placement: Full name, shipping address, billing address, phone number, email address, and institutional/laboratory information
Payment data: Credit card number, expiration date, and billing details — processed securely by our third-party payment processor (see Section 4). Peplix does not store full payment card numbers on our servers.
Newsletter signup: Email address, first name, and optional institution name
CoA access requests: Name, email address, and institution
Bulk quote requests: Name, email, institution, phone number, account type, credential references, and compound requirements
Customer support communications: Any information you include in emails or messages to support@peplix.bio

1.2 Information Collected Automatically

When you visit peplix.bio, we automatically collect certain technical data, including:

IP address and approximate geographic location
Browser type, version, and operating system
Device type (desktop, mobile, tablet)
Pages visited, time spent on pages, and navigation paths
Referring URL (how you arrived at our site)
Date and time of access

This data is collected through server logs and analytics tools and is used in aggregate to improve website performance and user experience.

1.3 Cookies & Tracking Technologies

Peplix uses the following cookies and tracking technologies:

Essential cookies: Required for website functionality, shopping cart, and checkout process. Cannot be disabled.
Analytics cookies: Used to understand website traffic patterns and improve user experience. Data is aggregated and anonymised where possible.
Marketing cookies (Klaviyo): Used to deliver relevant email communications about new compounds, CoA releases, and research updates to subscribers who have opted in.

You may disable non-essential cookies through your browser settings. Disabling essential cookies may prevent the website from functioning correctly.

2. How We Use Your Information

Peplix uses collected personal information for the following purposes:

Order fulfilment: Processing, shipping, and delivering your research compound orders
Account management: Creating and maintaining your customer account, order history, and saved preferences
B2B verification: Verifying institutional affiliation and purchaser eligibility as required by our Terms of Service
Customer support: Responding to enquiries, resolving order issues, and processing refund claims
Research communications: Sending email updates about new compounds, batch CoA releases, purity reports, and bulk pricing — only to subscribers who have opted in
Legal compliance: Maintaining records as required by applicable federal, state, and international laws governing the sale of research chemical compounds
Security: Detecting and preventing fraud, unauthorised access, and abuse of our platform
Service improvement: Analysing website usage patterns and customer feedback to improve our products, website, and customer experience

3. Data Sharing & Third Parties

Peplix does not sell, rent, or trade your personal information to third parties.

We share personal data only with the following categories of service providers, solely for the purposes described above:

Payment processor: Stripe processes all payment transactions. Peplix does not store full credit card numbers. Stripe’s privacy policy governs payment data handling.
Shipping carrier: USPS receives your shipping address and contact information for delivery purposes only.
Email marketing (Klaviyo): Subscriber email addresses, names, and optional institution data are stored in Klaviyo for email communication delivery. Klaviyo does not share this data with other parties.
Website hosting (GoDaddy): Our website is hosted on GoDaddy’s managed WordPress platform. Server access logs may contain IP addresses and technical data.
Analytics: Aggregated, anonymised website traffic data may be processed by analytics tools to understand usage patterns.

We may also disclose personal information if required to do so by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, safety, or property of Peplix, our customers, or the public.

4. Payment Data Security

All payment transactions are processed by Stripe, a PCI DSS Level 1 certified payment processor. When you enter payment information at checkout:

Your card details are transmitted directly to Stripe over an encrypted TLS connection
Peplix does not receive, process, or store your full credit card number
Peplix stores only a transaction reference ID and the last four digits of your card for order identification purposes
Stripe’s security and privacy practices are governed by their own policies at stripe.com/privacy

5. Data Retention

Peplix retains personal data for the following periods:

Account data: Retained for the lifetime of your account plus 12 months after account deletion request
Order records: Retained for a minimum of 7 years as required by U.S. tax and commerce regulations
Email subscriber data: Retained until you unsubscribe or request deletion
Support communications: Retained for 3 years from the date of last communication
Website analytics data: Retained in aggregate form for up to 26 months

After the applicable retention period, personal data is securely deleted or anonymised.

6. Data Security

Peplix implements the following measures to protect your personal information:

SSL/TLS encryption on all website pages and data transmissions
PCI DSS compliant payment processing through Stripe
Secure, access-controlled hosting environment with GoDaddy managed WordPress
Password hashing for all customer accounts (passwords are never stored in plain text)
Limited employee access to personal data on a need-to-know basis
Regular security monitoring and software updates

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of data transmitted to or stored on our systems.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete personal data
Deletion: Request deletion of your personal data, subject to legal retention requirements
Portability: Request a machine-readable copy of your data
Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email, or by contacting support@peplix.bio
Withdraw consent: Where processing is based on consent, you may withdraw consent at any time

To exercise any of these rights, email support@peplix.bio with the subject line: “Privacy Request – [Your Name]”. We will respond within 30 days.

7.1 California Residents (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale of personal information — note that Peplix does not sell personal information; and (d) not be discriminated against for exercising your privacy rights.

7.2 European Economic Area Residents (GDPR)

If you are located in the EEA, our legal bases for processing your data include: performance of a contract (order fulfilment), legitimate interest (security, service improvement), consent (marketing communications), and legal obligation (tax and commerce record-keeping). You have the right to lodge a complaint with your local data protection authority.

8. Children’s Privacy

Peplix does not knowingly collect personal information from individuals under the age of 18. Our products are sold exclusively to qualified researchers and research institutions. If we become aware that we have collected data from a minor, we will delete it promptly.

9. International Data Transfers

Peplix is based in the United States. If you access our website or place an order from outside the United States, your personal data will be transferred to and processed in the United States. By using our website, you consent to this transfer. We ensure that all data transfers comply with applicable data protection laws.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., FreedomDiagnosticsTesting.com, Stripe, USPS). Peplix is not responsible for the privacy practices or content of these external websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

Peplix reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, contact:

Email: support@peplix.bio
Subject Line: Privacy Request – [Your Name]
Phone: +1 (307) 533-3570
Business Hours: Monday – Friday, 9am – 5pm EST
Address: Peplix Research Supply, 30 N Gould St, Ste R, Sheridan, WY 82801, US
Website: peplix.bio

Peplix Research Supply is committed to protecting the privacy and data security of our research customers and website visitors.