Privacy Policy

Last updated: 2026-04-16

Capital Peptides ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your information when you use https://peptidessacramento.com.

1. Information We Collect

• Account and order information: email address, shipping address, billing address, name, and order history when you create an account or place an order.
• Payment information: processed by our payment processor. We do not store full payment card numbers on our servers.
• Browsing data: pages visited, referrer, approximate location (derived from IP), device and browser type, and interaction events, collected via Google Analytics 4 (GA4).
• Chat logs: messages you send to our on-site chat assistant, along with timestamps and session identifiers. Chat transcripts may be reviewed to improve service and to investigate abuse.
• Age-gate confirmation: a cookie or localStorage entry recording that you confirmed you are 21 or older and accepted the research-use-only terms.
• Cookies and similar technologies: see Section 5.

2. How We Use Your Information

• To process and fulfill orders, including shipping and customer support.
• To operate, maintain, and secure the site.
• To analyze site usage and improve content, products, and user experience.
• To comply with legal obligations, including age-gating and research-use-only representations.
• To prevent fraud, abuse, and unauthorized use of the site.
• To communicate with you about your orders, account, or substantive changes to our policies.

3. Third-Party Services

We share limited information with the following categories of service providers, each bound by their own privacy terms:

• Cloudflare — hosting, DNS, CDN, and security (bot mitigation, DDoS protection). Cloudflare processes request metadata including IP addresses.
• Google Analytics 4 — anonymous/pseudonymous usage analytics. You can opt out via browser settings or the Google Analytics opt-out add-on.
• Anthropic — powers our on-site chat assistant. Messages you send to the chat are transmitted to Anthropic's API for processing. See Anthropic's privacy terms for details.
• Payment processor — handles card payments and fraud screening.
• Shipping carriers (e.g. USPS, UPS) — receive the name and address needed to deliver your order.
• Email provider — sends transactional emails (order confirmations, shipping notifications).

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

4. Data Retention

We retain account and order records for as long as your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations (typically up to 7 years). Chat logs are retained for up to 24 months for quality and abuse-prevention purposes. Analytics data is retained per GA4 defaults (14 months unless changed).

5. Cookies

We use two categories of cookies / local storage:

• Essential — required for the site to function, including the age-gate confirmation, shopping cart, session handling, and theme preference. These cannot be disabled.
• Analytics — Google Analytics 4 cookies (e.g. _ga, _ga_*) that help us understand aggregate site usage. You can block or delete these through your browser.

6. Your Rights

California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you and how we use it.
• Request a copy of your personal information.
• Request deletion of your personal information, subject to legal exceptions.
• Request correction of inaccurate information.
• Opt out of the "sale" or "sharing" of personal information. (We do not sell or share personal information.)
• Not be discriminated against for exercising your rights.

EEA / UK residents (GDPR / UK GDPR)

If the GDPR or UK GDPR applies to you, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Our lawful bases include performance of a contract (order fulfillment), legitimate interests (site security and analytics), legal obligation, and consent where required.

To exercise any of these rights, contact amgmpro@gmail.com. We will respond within the timeframe required by applicable law.

7. Children's Privacy

This site is intended for adults aged 21 and older. We do not knowingly collect personal information from anyone under 21, and we do not direct the site to minors. If you believe a minor has provided us information, contact us and we will delete it.

8. Security

We use industry-standard security measures, including TLS in transit and access controls, to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

9. International Transfers

Our infrastructure is primarily located in the United States. If you access the site from outside the US, your information will be transferred to and processed in the US, which may have different data-protection laws than your jurisdiction.

10. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

11. Contact

Privacy requests and questions: amgmpro@gmail.com.