Privacy Policy

What this site collects today

You can submit an order request. We save your name, email, optional phone number, selected products and quantities, fulfillment details, preferred payment method, optional note, accepted policy versions, and a private status credential in access-controlled order storage. A request is not a paid or accepted order.

Order-related texts are optional and separate from accepting the sale terms. If you check the text permission, we keep its wording, version and submission time with your request so Effect can follow up about that request, invoice and fulfillment. A phone number alone is not permission for texts. This does not enroll you in marketing. Reply STOP to stop texts or HELP for help, or email the address on our contact page. Message frequency varies; message and data rates may apply. Phone numbers and text permission are not sent to usage counters or Clarity, or sold or shared for marketing.

We use first-party usage counts to compare checkout layouts and understand the path from a public-page arrival to a non-empty cart, checkout, and a saved request, including direct product-page arrivals. A random visit code lasts up to 30 minutes in your tab's session storage. Our counter stores its day-specific hash, day, checkout-layout group, a broad cart-entry category, a broad landing-page category, screen-size group, and binary interaction and stage flags, not names, emails, addresses, IP addresses, form values, products, or payment details. We do not join these counters to customer or order records. Counter rows older than 30 days are removed when the counter next runs. Each stage or interaction counts at most once per visit. A saved request is not counted as a paid sale.

Global Privacy Control and Do Not Track signals disable usage measurement. You can also turn it off below; that preference stays in this browser's local storage.

Optional Microsoft Clarity heatmaps and session recordings load only after you choose Allow heatmaps, and only on public homepage, catalog, product and vial-set pages at effectpeptides.com. Clarity may receive page URLs, technical device/network data and interactions such as clicks and scrolling, and use analytics cookies to connect public-page visits. We mask page text and do not record the cart, checkout forms, private status pages or Ops. We do not send customer or order identifiers as custom analytics tags. Advertising-storage consent stays denied. Microsoft processes this data under its Privacy Statement. GPC, Do Not Track, QA links and the all-measurement opt-out prevent loading. There is no Google Analytics, tag manager or advertising pixel. Optional heatmaps are off until you allow them.

Resend sends order-request acknowledgements and private status links; save the private status link shown after submitting and contact support if it is lost.

Your browser stores the research-use notice flag and your cart's SKU and quantity choices in local storage. These are not cookies. The notice flag stays on your device; if you request a quote, the cart and chosen fulfillment details are sent to our server for that calculation. Clearing your site data removes the local copies.

The two typefaces are served directly from this site. Loading a page does not contact Google Fonts or another font provider.

Cloudflare Pages hosts the site and keeps standard request and security records, which may include IP addresses. We do not use those records for marketing or join them to an advertising profile.

What changes when an order is accepted

To accept payment, ship, and support an order we also need to keep:

Contact details - name, email address and any optional phone number, to confirm the order and reach you about it.
Delivery address - to ship to, and shared with the carrier for that purpose only.
Order contents and history - what you bought, when, and which lot you received, so a certificate query can be answered years later.
Payment evidence - the selected method, status, amount, currency, and the minimum external reference needed to reconcile cleared funds. Screenshots and private account credentials are not stored as proof.

We will not collect date of birth, government identifiers, health information, or anything about your research. If a future form asks you for something that is not on the list above, that is a mistake and we want to hear about it.

Why we are allowed to hold it

To perform the contract - taking, shipping and supporting your order.
To meet legal obligations - keeping sale and tax records for the period the law requires.
Legitimate interests - preventing fraud and abuse, and keeping the site secure.

We will not send marketing email unless you ask for it, and asking is a separate action from ordering. There is no pre-ticked box anywhere on this site and there will not be one.

Who else sees it

The approved payment service, where one is used for the selected method.
The carrier, which sees the delivery address.
The approved transactional email provider, which processes the recipient address and message needed to deliver an order notice.
Our web host, which necessarily processes requests to the site.
Microsoft Clarity, for optional public-page heatmaps when you choose to allow them.
Authorities, where we are legally required to disclose.

We do not sell order data or send it to advertising pixels or data brokers. No payment provider receives an order request merely because you selected it as a preference.

How long we keep it

Order, payment and tax records: for the period required by applicable law, then deleted or anonymized as that law requires.
Lot-to-order mapping: retained with the private test record so a query about what you received can be answered.
Support correspondence: retained as needed to answer requests and meet legal obligations; no fixed public period is promised.
Server logs: rotated on the host's standard schedule.

Your rights

You can ask us to show you what we hold about you, correct it, delete it, or export it. You can object to processing based on legitimate interests. Where a request conflicts with a record we are legally required to keep, we will say which record and why.

Send requests to the address on our contact page. Response timing and any identity check follow applicable law.

Security

The site is served over HTTPS. Public status access requires an unguessable token, operator tools remain behind access control, and payment destinations and credentials will remain outside public source. Effect will retain only the minimum payment evidence needed for reconciliation, audit, disputes, refunds, and legal records.

Children

This site is not intended for anyone under 21 and we do not knowingly collect anything from them.

Changes to this policy

Material changes are dated on this page. The version that applied when you ordered is the one that governs that order.

Questions about anything on this page go to contact. If something here is wrong or unclear, telling us is useful and we will date the correction.