How we handle your data.

When you place an order or create an account we collect: name, shipping and billing address, email, phone number, and the institution or research entity you represent.

For payment, our processor (Rampex) receives your card data directly — we never see or store full card numbers on our servers. We only retain a tokenized reference and the last four digits of the card used.

We automatically log basic technical data when you browse the site (IP address, browser, referrer, pages visited) to detect fraud and improve performance.

To process your orders, ship products, send order updates and shipment tracking, respond to support requests, issue refunds where applicable, and send infrequent product updates if you opted in to our newsletter.

We use aggregated, non-identifying analytics to understand which products perform best and to improve the checkout experience.

We share only the data strictly necessary with: our payment processor (Rampex), our shipping carrier, our cloud infrastructure provider (Vercel), and email delivery service. Each is contractually bound to use the data only to provide their service.

We do not sell, rent or trade your personal information.

You can request a copy of the data we hold on you, ask us to correct it, or request its deletion. California residents have additional rights under the CCPA — to opt out of any data sharing classified as a sale (we do not engage in any), and to request disclosure of categories of data collected.

Email privacy@pepteed.com with any request — we respond within 30 days.

We do not use cookies.Cart contents and login state are kept in your browser's local storage on your device only — they are not transmitted to any third party and they are not used for tracking.

We use a privacy-first analytics service (Vercel Analytics) that does not set cookies, does not store IP addresses, and does not build a profile of you across sessions or sites. It records aggregate counts (page views, unique visits, country, referrer) and nothing personally identifying. No advertising pixels, no retargeting, no fingerprinting.

Order records are retained for 7 years to satisfy U.S. tax and accounting requirements. Account records are retained as long as your account is active; you can request deletion at any time after your last order has been fulfilled and the return window has closed.