Effective Date: August 20, 2026 Introduction This Privacy Policy describes how All-Access Peptides ("Company," "we," "us," or "our") collects, uses, and safeguards your personal information when you visit our website or purchase products. Our platform sells research peptides for laboratory research use only and is intended for use by U.S. residents age 21 and older. Users under the age of 21 are strictly prohibited from using the platform, and the site is not intended for children. We only ship products within the continental United States. By using our website, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree with our practices, please do not use the site. For any questions or concerns about this Policy or our data practices, please contact us using the information provided in the Contact Information section below. Information We Collect We collect several types of personal information in order to provide and improve our services. This includes information you provide directly to us (for example, when placing an order or creating an account) and information collected automatically when you use our site. We do not collect any sensitive health or medical data about you. Personal Identifiers: When you make a purchase or register on our site, we collect personal details such as your full name, email address, telephone number, and postal address (including billing and shipping address). We require this information to process your orders, deliver products, and communicate with you about your purchases. You will also create login credentials (a password) to access your account. Payment Information: If you make a purchase, you will provide payment details (e.g. credit or debit card information) at checkout. We do not store your full payment card details on our servers. Payment transactions are handled through Stripe, our certified third-party payment processor, and your sensitive payment information is transmitted directly to them for processing. No Health Data: We do not collect any health information or medical data about our users. Please do not submit any personal health details to us. Our products are sold for research purposes only, and our site is not designed to collect or handle medical or health-related information. Automatically Collected Data: When you interact with our website, we automatically collect basic technical and usage data about your visit, such as your IP address, device and browser type, operating system, pages viewed, and the dates/times of access. We use this information to operate the site securely (for example, detecting fraud or abuse) and to understand overall site usage. We describe our use of cookies in more detail in the Cookies and Similar Technologies section below. Cookies and Similar Technologies We use a small number of cookies that are strictly necessary for the website to function. We do not currently use any third-party analytics or advertising tracking cookies. Functional Cookies: These cookies are essential for the website's operation. They include a session cookie that keeps you logged into your account, a cookie that remembers you have passed our age and research-use acknowledgement gate, and — if you arrived via a referral link — a cookie that attributes your account to the researcher who referred you. These cookies do not track you across other websites and are not used for advertising. Payment Processor Cookies: Stripe, our payment processor, may set its own cookies during checkout for fraud prevention and security purposes. These are governed by Stripe's own privacy policy, not this one. Your Choices Regarding Cookies: You can control or delete cookies through your browser settings at any time. Please note that if you block the functional cookies described above, core features such as staying logged in or completing checkout may not work correctly. If we add any analytics, advertising, or other tracking technology to the site in the future, we will update this Policy to describe it before it goes into effect. Third-Party Services and Data Collection We share information with a small number of trusted service providers who help us operate the business. We do not share personal information with third parties for their own independent marketing purposes. Payment Processing: Stripe handles all payment transactions and tax calculation on our behalf. Stripe receives the payment and billing information necessary to process your order and is subject to its own privacy policy and PCI-DSS security standards. Shipping: We use Shippo to calculate live shipping rates and, where applicable, purchase shipping labels through carriers such as USPS, UPS, and FedEx. Shippo and the carrier receive your shipping name, address, and package information necessary to deliver your order. Email Delivery: We use a transactional email provider (such as Postmark) to send account, order, and — where you have not opted out — marketing emails. The provider receives your email address and the content of the email being sent. Hosting and Infrastructure: Our website, database, and file storage are hosted on Netlify's infrastructure. Netlify processes data as necessary to serve the site and store information securely; it does not use your data for its own marketing purposes. We may update this list of third-party services from time to time as our business needs change. If we add a significant new third-party integration that affects how your data is collected or used, we will reflect that change in this Privacy Policy. How We Use Your Information We use the personal information we collect for the following purposes: Order Processing and Fulfillment: We use your name, address, phone number, and email to process and fulfill your orders, provide order and shipping confirmations, update you on delivery status, and handle refunds as necessary. Account Creation and Maintenance: If you create an account, we use your email and password to set up and maintain it, allowing you to securely log in, view order history, and store your saved addresses. Rewards and Referrals: If you participate in our rewards points or referral program, we track your points balance, referral code, and any account you referred in order to award and redeem points correctly. Customer Service and Support: When you contact us with questions or issues, we use your contact information and the content of your message to respond and assist you. Communications: We use your contact information to send transactional emails, such as order confirmations, shipping notifications, and account-related messages. These are necessary to fulfill your order and are not promotional; they cannot be opted out of while you have an active account or order. Marketing Communications: With your consent, we may send you promotional emails, such as abandoned-cart reminders or product announcements. You can opt out of these at any time from your account settings, or by contacting us. Opting out does not affect transactional emails related to your orders or account. Security and Fraud Prevention: We use information such as IP address and order history to detect and prevent fraud, abuse, and unauthorized access to accounts. Legal Compliance: We use and disclose personal information where required to comply with applicable laws, regulations, legal process, or governmental requests, and to enforce our Terms & Conditions. We will only use your personal information for the purposes described above and will not use it in incompatible ways without your consent. We do not sell your personal information to third parties. Sharing and Disclosure of Information We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing use. We only share your information in the following circumstances: Service Providers: As described in the Third-Party Services section above, we share information with our payment processor, shipping/carrier partners, email delivery provider, and hosting infrastructure, each limited to what they need to perform their function for us. Legal Requirements and Protection of Rights: We may disclose personal information if required by law or legal process, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights or safety of our customers or others, investigate fraud or abuse, or defend against legal claims. Business Transfers: If we are involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will ensure any successor honors the commitments made in this Privacy Policy, or will notify you if that is not the case. Data Retention We retain personal information for only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Customer and Order Data: We retain your account information for as long as your account remains active, and order records for as long as needed to comply with tax, accounting, and warranty obligations. Marketing Data: If you opt out of marketing communications, we stop sending them and retain a record of your opt-out so we continue to honor it. Legal Retention: We retain information as needed to comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer have a legitimate need to retain your information, we will securely delete or anonymize it. Data Security We take reasonable, industry-standard measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including: Encryption: Our website is served over HTTPS, encrypting information in transit. Passwords are stored as one-way cryptographic hashes, never in plain text. Access Controls: Access to personal data is limited to personnel who need it to perform their role, and administrative access requires authentication. Payment Security: Payment processing is handled by Stripe, a PCI-DSS compliant provider. We do not store full card numbers or security codes on our own servers. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Please avoid sending sensitive information (such as full card numbers or passwords) to us via email. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law. Your Rights and Choices Access and Correction: You can review and update most of your personal information directly from your account page, or by contacting us to request a copy or correction of the information we hold about you. Deletion: You can request that we delete your account and associated personal information by contacting us. We may need to retain certain records (such as order/tax records) as required by law, and will let you know if that applies to your request. Opt-Out of Marketing: You can opt out of marketing emails at any time from your account settings or by contacting us. This will not affect transactional emails related to your orders or account. California Privacy Rights: If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to request disclosure of the categories of personal information we collect, the right to request deletion, and the right to opt out of the "sale" or "sharing" of personal information (as defined under California law) — though as noted, we do not sell your personal information. Contact us to exercise these rights. Other State Privacy Rights: If you reside in a state with its own privacy law (such as Virginia or Colorado), you may have similar rights to access or delete your data. Contact us to exercise any rights available under your state's law, and we will verify your identity and respond within the timeframe required by law. Complaints: If you have concerns about how we handle your personal information, please contact us so we can address them. You may also contact the Federal Trade Commission or your state Attorney General's office. We will not discriminate against you for exercising any of these rights. Users Under 21 (Age Restriction) Our platform is intended for adults 21 and older only. We do not knowingly permit anyone under 21 to use our website, register an account, or purchase our products, and we do not intentionally collect personal information from anyone under 21. Registration requires an affirmative age certification, and every visitor must acknowledge our age and research-use gate before browsing the site. If we learn that we have inadvertently collected personal information from someone under 21, we will take steps to delete that information and close the associated account. Parents or guardians who believe their minor has provided information to us, or otherwise accessed the site, should contact us immediately. Our site is not directed at, and does not knowingly collect information from, children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). Email Marketing Communications With your consent, we may send you promotional emails, such as reminders about items left in your cart or announcements about new products. You can opt out of these emails at any time from your account settings, or by contacting us. Opting out of marketing emails will not affect your receipt of transactional emails about your orders or account, which we send regardless of your marketing preference because they are necessary to fulfill your purchase. We comply with the CAN-SPAM Act: our marketing emails identify the sender, provide a way to unsubscribe, and we will promptly honor all opt-out requests. International Users Our website and services are intended for customers within the United States. If you access the site from outside the United States, your information will be transferred to and processed in the United States, where our servers and database are located. By using our site, you acknowledge that your information will be handled as described in this Privacy Policy. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. If we make material changes, we will post the updated Policy on our website with a new effective date. Your continued use of the site after changes become effective constitutes acceptance of the revised Policy. Contact Information If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us: Email: support@all-accesspeptides.com Mail: Privacy Officer – All-Access Peptides 8605 Santa Monica Blvd PMB 515803 West Hollywood, California 90069-4109 Please include your name, contact information, and a detailed description of your request. If you are exercising a specific privacy right (such as access or deletion), please state that clearly. We may need to verify your identity before acting on certain requests.