By accessing or using the Services, you acknowledge this Privacy Policy. Where applicable law requires consent rather than notice, we will seek consent through an appropriate mechanism. This Privacy Policy is a notice of our practices and is not a substitute for separate consent or authorization where applicable law requires it.

1. Scope and Applicability

This Policy applies to Personal Information collected directly from you; automatically through the Services; from payment processors, fraud-prevention providers, analytics and advertising providers, shipping and fulfillment providers, customerservice tools, social-media platforms, business partners, public sources, and other third parties; and from information we lawfully derive, infer, or combine from those sources. Lab Tested Peptides LLC is a Missouri limited liability company. The Services are offered only within the United States and products are shipped only to domestic U.S. destinations.

This Policy does not govern the independent privacy practices of third parties that control their own processing. Those parties may maintain separate privacy notices and terms.

2. Definitions

• “Personal Information” or “Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identified or identifiable person or household, as defined by applicable law.
• “Sensitive Personal Information” includes information treated as sensitive under applicable law, which may include precise geolocation, government identifiers, account credentials, certain financial information, biometric information, racial or ethnic origin, religious or philosophical beliefs, sexual orientation, citizenship or immigration status, and certain health-related information or inferences.
• “Sell,” “Sale,” “Share,” and “Targeted Advertising” have the meanings assigned under applicable state privacy laws. Depending on the jurisdiction, a “sale” may include disclosure for monetary or other valuable consideration, and “sharing” may include disclosure for cross-context behavioral advertising even when no money changes hands.

3. Categories of Information We Collect

Depending on how you interact with us, we may collect the following categories of information:

• Identifiers and contact information: name, email address, telephone number, billing and shipping address, account or customer ID, usernames, and similar identifiers.
• Commercial and transaction information: products viewed or purchased, order history, shopping-cart activity, coupon or loyalty activity, transaction dates and amounts, returns, refunds, shipping status, customer-service history, and purchasing preferences.
• Payment and financial-related information: billing identity, payment method type, partial account details, transaction tokens, authorization status, fraud or risk indicators, chargeback information, and information provided to us by payment processors. Full payment-card numbers and security codes are generally processed by third-party payment processors and are not intentionally stored by us unless expressly made available to us and lawfully retained.
• Internet, device, and network activity: IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, links clicked, session activity, timestamps, cookie identifiers, pixels, SDK data, log files, approximate location derived from IP address, and similar technical information.
• Communications and user-provided content: emails, chat messages, support requests, survey responses, reviews, testimonials, form submissions, and other content you send or make available to us.
• Marketing, advertising, and preference information: email or SMS subscription status, marketing preferences, campaign interactions, ad impressions, clicks, conversions, source/attribution data, audience segments, and inferred interests.
• Social-media and third-party platform information: information made available when you interact with our social pages, advertisements, referral links, or integrations, subject to the platform’s settings and policies.
• Fraud, security, and compliance information: device-risk signals, identity-verification results, order-risk scores, blocked transactions, suspicious activity, dispute history, sanctions or legal-compliance screening where applicable, and records needed to protect the Company or comply with law.
• Inferences and profiles: preferences, likely interests, purchasing propensity, customer segments, marketing audiences, and other inferences created from the information described above.
• Other information: any other information you provide to us or that we lawfully receive from third parties in connection with the Services.

4. Sources of Information

We may collect information from:

• You directly, including through purchases, account creation, forms, customer support, reviews, promotions, surveys, and marketing sign-ups.
• Your browser, device, and use of the Services through cookies, pixels, tags, local storage, server logs, and similar technologies.
• Payment processors and payment gateways, including transaction status, billing verification, tokenized payment information, chargeback information, and fraud-prevention or risk data that the processor is permitted to provide to us.
• Advertising, analytics, social-media, affiliate, referral, and attribution partners.
• Shipping, fulfillment, customer-service, security, identity-verification, hosting, cloud, ecommerce, and other service providers.
• Publicly available sources and other lawful third-party sources.
• Information we create or infer from other information we possess.

5. How We Use Information

We may use Personal Information to:

• Provide, operate, maintain, personalize, and improve the Services and our business.
• Process and fulfill orders, payments, refunds, shipping, account activity, and customer-service requests.
• Authenticate users, prevent fraud, reduce chargebacks, maintain security, detect abuse, and protect the rights, property, safety, and integrity of the Company, users, service providers, and others.
• Communicate with you regarding transactions, service notices, policy changes, security matters, customer support, and other administrative matters.
• Market and promote our products, services, offers, content, and brand through email, SMS/text, online advertising, direct mail, social media, and other channels, where permitted by law.
• Create, maintain, and measure advertising audiences; conduct analytics, attribution, conversion measurement, A/B testing, campaign optimization, and cross-device or cross-context advertising where permitted by law.
• Create customer segments, profiles, models, and inferences for business analytics, personalization, marketing, fraud prevention, and product or service development.
• Combine information collected from different sources and devices to the extent permitted by law and applicable contractual restrictions.
• Conduct research, statistical analysis, forecasting, performance measurement, business intelligence, and internal reporting.
• Develop new products, services, features, promotions, and business opportunities.
• Enforce our agreements, policies, and rights; establish, exercise, or defend legal claims; respond to subpoenas, court orders, and lawful government requests; and comply with tax, accounting, recordkeeping, and other legal obligations.
• Facilitate financing, investment, due diligence, reorganization, merger, acquisition, sale of assets, bankruptcy, or other corporate transactions.
• Use information for any other purpose disclosed at the time of collection, with your consent when required, or as otherwise permitted by law.

6. Marketing Communications, Email, and SMS

We may use contact information and information about your interactions with us to send marketing and promotional communications where permitted by law. Marketing may include product announcements, promotions, abandoned-cart messages, educational or brand content, loyalty or referral communications, and personalized offers.

You may unsubscribe from marketing email by using the unsubscribe link in the message. For marketing text messages, follow the opt-out instructions in the message (for example, replying STOP) where applicable. Opting out of marketing does not prevent us from sending non-marketing communications necessary to complete transactions, provide requested services, or address legal or security matters.

Consent to receive marketing communications is not a condition of purchase where prohibited by law. Carrier message and data rates may apply to SMS communications. Nothing in this Privacy Policy itself constitutes consent to receive marketing calls or text messages where separate consent is required by law.

7. Cookies, Analytics, Advertising Technologies, and Universal Opt-Out Signals

We and third parties may use cookies, web beacons, pixels, tags, local storage, APIs, SDKs, session-replay or analytics technologies, and similar tools to operate the Services; remember preferences; understand usage; measure performance; prevent fraud; attribute conversions; personalize content; and deliver, measure, or optimize advertising.

Some of these activities may constitute “sale,” “sharing,” or “targeted advertising” under certain state privacy laws. Where required, we will provide a method to opt out and will honor legally recognized browser-based universal opt-out preference signals, such as Global Privacy Control, when applicable to our business and processing.

Browser settings may allow you to block or delete cookies, but doing so can affect functionality. Cookie controls and privacy-choice links presented on the Services may provide additional options.

8. Disclosure, Sharing, and Sale of Personal Information

Subject to applicable law, our contractual obligations, and the choices and rights described in this Policy, we may disclose Personal Information to the following categories of recipients:

• Service providers and processors that perform services on our behalf, including ecommerce hosting, web hosting, cloud storage, payment processing, fraud prevention, shipping, fulfillment, customer service, email/SMS delivery, analytics, security, accounting, legal, and IT services.
• Advertising, analytics, social-media, affiliate, referral, data, and marketing partners for measurement, attribution, audience creation, advertising, promotional, and related commercial purposes.
• Payment processors and financial institutions as necessary to authorize, settle, investigate, prevent, or reverse transactions and manage disputes or chargebacks.
• Business counterparties, investors, lenders, professional advisors, and transaction participants in connection with an actual or proposed financing, investment, acquisition, merger, reorganization, asset sale, bankruptcy, or similar transaction.
• Government agencies, regulators, courts, law enforcement, litigants, or other persons when we believe disclosure is required or permitted by law, necessary to protect rights or safety, or appropriate to prevent fraud or misuse.
• Other parties at your direction, with your consent where required, or for purposes disclosed when the information is collected.

Commercial Sale or Sharing. Subject to applicable law, contractual restrictions, and the exclusions below, we may sell, license, disclose, or share eligible categories of Personal Information that we lawfully possess, including identifiers and contact information, internet or device activity, approximate geolocation, marketing and advertising information, audience or preference information, and non-sensitive inferences, to advertising, marketing, analytics, data, affiliate, or other business partners for advertising, measurement, audience development, promotional, data-enrichment, market-research, business-intelligence, or other lawful commercial purposes. Where applicable law gives you the right to opt out of a sale, sharing, or targeted advertising, we will provide and honor the required opt-out method. Once a legally valid opt-out applies to you or your device, we will not thereafter sell or share the covered Personal Information unless you lawfully opt back in or an applicable statutory exception permits the processing.

Information We Do Not Sell. We do not sell or commercially disclose a customer’s specific product purchase history, order history, product-specific shopping-cart history, or product-specific browsing history. We also do not sell consumer health data, medical records, medical history, information supplied to us for diagnosis or treatment, precise geolocation, government identifiers, account passwords or authentication credentials, full payment-card numbers or security codes, payment-processor security or fraud-authentication data, biometric identifiers, or other information for which applicable law requires separate affirmative authorization to sell unless such sale is expressly authorized by law and, where required, by the consumer. Nothing in this Policy characterizes the purchase or viewing of a research product as evidence of human or veterinary use or as medical history.

Independent Third-Party Recipients. When eligible Personal Information is lawfully transferred to a third party that acts as an independent business or controller rather than as our service provider or processor, that third party’s subsequent processing may be governed by its own privacy notice, contracts, and legal obligations. Except to the extent applicable law provides otherwise, we do not control an independent recipient’s processing after a lawful transfer. This provision does not limit our responsibility for the lawfulness of our original disclosure or any non-waivable consumer right.

9. Payment Processors and Third-Party Transaction Data

Payments may be processed by third-party payment processors or gateways. Those processors may independently collect and process payment-card data, bank or wallet information, device information, fraud signals, identity or billing information, and transaction data under their own terms and privacy practices.

We may receive from payment processors information they are contractually and legally permitted to provide to us, such as transaction identifiers, payment status, billing details, partial or tokenized payment details, refunds, disputes, and chargebacks. We may use that information for order fulfillment, customer service, fraud prevention, analytics, legal compliance, marketing attribution, and other purposes described in this Policy, subject to applicable law and the processor’s contractual restrictions. We do not sell full payment-card credentials, security codes, account-access credentials, processor authentication information, processor fraud or risk data, or other payment information where sale is prohibited by law, card-network requirements, or processor contractual restrictions. This Policy does not expand our rights to data that a processor is prohibited from sharing with us.

10. De-Identified, Aggregated, and Derived Information

We may create, use, disclose, license, and commercialize information that has been aggregated or de-identified so that it is not reasonably linkable to an identified or identifiable individual, subject to applicable law. Where required, we will maintain de-identified information in de-identified form, use reasonable safeguards against re-identification, publicly commit not to attempt to re-identify it except as legally permitted, and contractually require recipients to comply with applicable restrictions on re-identification.

11. Data Retention

We retain Personal Information only for as long as reasonably necessary and proportionate to accomplish the purposes described in this Policy, including to maintain accounts; complete transactions; comply with tax, accounting, regulatory, and legal obligations; prevent fraud; resolve disputes; enforce agreements; maintain security; support analytics; and preserve business records. Retention periods vary based on the category of information, the purpose for which it was collected, legal or contractual requirements, sensitivity, and legitimate business needs. We may retain aggregated or de-identified information for longer periods where permitted by law.

12. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, destruction, loss, alteration, or disclosure. No security method or transmission system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of credentials associated with your account, if any.

13. Your Privacy Choices and Rights

Depending on your state of residence and applicable law, you may have some or all of the following rights, subject to verification, statutory exceptions, and limitations:

• Right to know or access the Personal Information we collect, use, disclose, sell, or share about you.
• Right to request correction of inaccurate Personal Information.
• Right to request deletion of Personal Information, subject to exceptions.
• Right to data portability or to obtain a copy of certain Personal Information in a usable format.
• Right to opt out of the sale of Personal Information, sharing for cross-context behavioral advertising, or processing for targeted advertising.
• Right to opt out of certain profiling in furtherance of decisions producing legal or similarly significant effects, where applicable.
• Right to limit certain uses or disclosures of Sensitive Personal Information, where applicable.
• Right to withdraw consent for processing that is based on consent, where applicable.
• Right to appeal our refusal of a privacy request in jurisdictions that provide an appeal right.
• Right not to receive unlawful discriminatory treatment for exercising privacy rights.

To exercise applicable privacy rights, use the “Privacy Choices” or similar privacy-rights mechanism made available through the Services. We may request information reasonably necessary to verify your identity and request. Authorized agents may submit requests where permitted by law, subject to verification and proof of authority.

Do Not Sell or Share / Targeted Advertising. If our practices are considered a sale, sharing, or targeted advertising under applicable law, eligible residents may opt out through the “Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar mechanism provided on the Services. Where required, we will also process legally recognized universal opt-out preference signals, including Global Privacy Control. We will not use a consumer’s exercise of a legally protected privacy right as a basis for unlawful discrimination.

14. California Privacy Notice

If the California Consumer Privacy Act, as amended (CCPA), applies to our processing, California residents may have rights to know/access, correct, delete, and obtain certain information, and to opt out of the sale or sharing of Personal Information. California law may also provide a right to limit certain uses or disclosures of Sensitive Personal Information and prohibits unlawful discrimination for exercising CCPA rights.

For CCPA purposes, the categories of Personal Information we may collect are described in Section 3; the sources are described in Section 4; business and commercial purposes are described in Section 5; and categories of recipients are described in Section 8. If we sell or share Personal Information as those terms are defined by the CCPA, we will provide the required opt-out mechanisms and honor applicable opt-out preference signals. We do not knowingly sell or share the Personal Information of consumers under 16 without the affirmative authorization required by law.

California “Shine the Light” Where applicable, California residents may request certain information regarding disclosure of personal information to third parties for their own direct-marketing purposes. Statutory exceptions may apply.

15. Additional U.S. State Privacy Rights

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws may have rights that include access, correction, deletion, portability, and opt-out rights for targeted advertising, sale, and certain profiling, depending on the jurisdiction and whether the law applies to us. We will honor applicable rights and universal opt-out requirements and provide an appeal process where legally required.

State privacy laws change frequently. If a new or amended law applies to us, we may update our notices, request procedures, consent flows, or privacy controls accordingly.

16. Consumer Health Data and Other Specially Regulated Data

Lab Tested Peptides LLC is a research-products company. Products offered through the Services are sold solely for lawful laboratory, analytical, and research use. They are not intended for human consumption, human use, veterinary consumption, veterinary use, diagnosis, treatment, mitigation, cure, or prevention of any disease or condition. The Services are not intended to collect medical records, medical history, diagnostic information, treatment information, or information for the provision of healthcare or veterinary services. Nothing about a customer’s purchase of or interaction with a research product is intended by the Company to represent or imply human or veterinary use.

We do not sell consumer health data, medical history, medical records, or product purchase history. Certain jurisdictions nevertheless define “consumer health data” broadly and may regulate information that identifies or could reasonably be used to infer a consumer’s physical or mental health status. If particular information is deemed consumer health data or similarly protected information under applicable law notwithstanding our research-only business model, we will process that information only as permitted by law, provide any separately required notice, obtain affirmative consent or separate authorization when required, and honor applicable access, deletion, withdrawal, or other rights. We will not rely on this general Privacy Policy as authorization for a sale of consumer health data where a separate authorization is legally required.

17. Children and Minors

The Services are not directed to children under 13, and our products and ecommerce Services are intended for adults. We do not knowingly collect Personal Information online from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected such information without legally sufficient authorization, we will take reasonable steps to delete it.

We do not knowingly sell or share Personal Information of minors where applicable law requires opt-in authorization without first obtaining the required authorization.

18. Third-Party Websites, Services, and Social Platforms

The Services may link to or integrate with websites, payment services, social platforms, analytics tools, advertising networks, or other third-party services. We do not control the independent privacy practices of those parties. Your interactions with them are governed by their own terms, policies, and settings.

19. Research-Use Products and Privacy

All products offered through the Services are sold solely for lawful laboratory, analytical, and research purposes and are expressly not intended for human consumption, human use, veterinary consumption, veterinary use, diagnosis, treatment, mitigation, cure, or prevention of any disease or condition. Nothing in this Privacy Policy changes the intended use of any product, constitutes medical or veterinary advice, or authorizes use inconsistent with product labeling, our Terms and Conditions, or applicable law. Our privacy practices and data classifications should not be interpreted as an acknowledgment or representation that any research product is intended for human or veterinary use.

20. Business Transfers and Corporate Transactions

Personal Information and other business records may be disclosed, transferred, assigned, licensed, or sold as part of an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, receivership, sale of company assets, sale of a business line, or similar corporate transaction, subject to applicable law. A successor or transferee may continue to process Personal Information as described in this Policy or as otherwise permitted by law, subject to any legally required notice or choice. This corporate-transaction provision does not authorize an independent commercial sale of categories of information that this Policy expressly states we do not sell.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, vendors, business practices, or the Services. We will post the updated Policy with a revised effective date and provide additional notice or obtain consent where required by law. Material changes will apply prospectively to the extent required by applicable law.