Privacy Policy

FOR LABORATORY RESEARCH USE ONLY

Unless expressly stated otherwise, products offered through Peptix Canada are intended exclusively for laboratory and in-vitro research purposes.

Products are not offered as drugs, natural health products, foods, cosmetics, medical devices, veterinary products, or products intended for personal consumption. Products are not represented as approved by Health Canada for human or veterinary use and are not intended to diagnose, treat, cure, prevent, or mitigate any disease or health condition.

Products must not be used for human or animal consumption.

This Privacy Policy governs how Peptix Canada handles personal information. It does not change or limit the research-use restrictions described in our Terms and Conditions, Product Disclaimer, or other policies.

1. Scope and Who We Are

This Privacy Policy describes how Peptix Canada (“Peptix Canada,” “we,” “us,” or “our”) collects, uses, discloses, stores, retains, and protects personal information when you:

• visit PeptixCanada.ca or any related page or service
• create or use a customer account
• browse or purchase products
• subscribe to marketing communications
• submit a form or privacy request
• communicate with customer support
• otherwise interact with Peptix Canada

Peptix Canada is headquartered in British Columbia, Canada.

This Privacy Policy forms part of our Terms and Conditions and should be read together with our Cookie Policy and other applicable website policies.

Peptix Canada has designated a Privacy Officer who is responsible for overseeing our privacy practices and responding to questions, complaints, access requests, and correction requests.

• Privacy Officer: Privacy Officer, Peptix Canada
• Email: Privacy@peptixCanada.com

2. Applicable Canadian Privacy Laws

Peptix Canada handles personal information in accordance with applicable Canadian privacy legislation, which may include:

• British Columbia’s Personal Information Protection Act
• the federal Personal Information Protection and Electronic Documents Act
• applicable provincial private-sector privacy legislation
• other Canadian laws governing electronic commerce, marketing communications, taxation, fraud prevention, recordkeeping, and consumer transactions

The particular law that applies may depend on where you live, where a transaction occurs, and whether personal information moves across provincial or national borders.

Where this Privacy Policy provides a higher level of protection than the minimum required by law, we intend to follow the commitments made in this Policy.

3. Key Definitions

Personal Information

“Personal Information” means information about an identifiable individual or information that can reasonably be linked to an identifiable individual.

Personal Information does not generally include anonymized information that cannot reasonably be associated with an identifiable person or business contact information used solely to communicate with an individual in their professional capacity where excluded by applicable law.

Processing

“Processing” means any activity involving Personal Information, including collecting, recording, organizing, storing, accessing, using, analyzing, communicating, disclosing, transferring, correcting, deleting, anonymizing, or destroying it.

Service Provider

“Service Provider” means an outside organization that performs services for Peptix Canada, such as website hosting, payment processing, account authentication, email delivery, shipping, analytics, fraud prevention, data storage, or customer support.

4. Personal Information We Collect

Depending on how you interact with Peptix Canada, we may collect the following categories of Personal Information.

A. Identity and Contact Information

This may include:

• first and last name
• email address
• telephone number
• billing address
• shipping address
• province or territory
• postal code
• account identifier
• username or customer account details

B. Account and Eligibility Information

This may include:

• encrypted password or authentication credentials managed by our authentication provider
• account creation date
• account activity
• login and session information
• age-confirmation status
• confirmation that you are at least 19 years old
• acceptance of our research-use conditions
• confirmation that purchases are for independent laboratory research purposes
• acknowledgment that products are not for human or animal consumption
• information reasonably required to investigate suspicious or prohibited account activity

We generally do not request government-issued identification unless it is reasonably necessary to verify identity, investigate fraud, comply with law, resolve a payment dispute, or respond to a privacy request.

C. Order and Commercial Information

This may include:

• products viewed
• products purchased
• product quantities
• order history
• cart contents
• wishlist information
• discount or promotional codes
• order value
• shipping selection
• delivery status
• refunds, returns, cancellations, and disputes
• customer-service communications
• records of compliance acknowledgements associated with an order

D. Payment and Transaction Information

Payments may be processed by third-party payment providers.

Peptix Canada does not intend to store complete payment-card numbers, card security codes, online banking credentials, or cryptocurrency private keys on its own servers.

Depending on the payment method, we may receive limited information such as:

• card brand
• the last four digits of a payment card
• payment token
• billing postal code
• payment status
• transaction amount
• transaction date
• payment processor reference number
• fraud-screening result
• chargeback or dispute information
• cryptocurrency wallet address or public transaction identifier where cryptocurrency payment is offered

Cryptocurrency transactions may be recorded permanently on a public blockchain. Peptix Canada cannot alter, erase, or control information independently recorded on a public blockchain.

E. Internet, Device, and Technical Information

When you use the Site, we or our Service Providers may automatically collect:

• Internet Protocol address
• browser type and version
• device type
• operating system
• device or session identifiers
• referring website
• pages viewed
• links clicked
• date and time of access
• session duration
• cookie identifiers
• login history
• error records
• security logs
• general interaction data

F. Approximate Location

We may infer an approximate location from an Internet Protocol address, such as country, province, city, or general postal-code area.

We do not intentionally collect precise GPS-level location through the Site unless a specific feature clearly asks for your permission.

G. Communications

We may collect information you provide when you:

• contact customer support
• send us an email
• submit a contact form
• make a privacy request
• report a security concern
• participate in a survey
• submit a review
• communicate with us through social media

H. Reviews and User-Submitted Content

When you submit a product review or other content, we may collect:

• your display name
• rating
• review text
• product purchased
• date of submission
• verification that the review relates to a purchase
• photographs or other information you voluntarily provide

Reviews intended for publication may become publicly visible. Do not include sensitive Personal Information in a public review.

I. Inferences and Fraud Signals

We may generate limited inferences from the information described above, such as:

• likely product interests
• whether an order may be fraudulent
• whether multiple accounts may be connected
• whether an account may have been compromised
• whether an order should be manually reviewed
• whether activity may violate our Terms and Conditions

Automated indicators may be used to flag activity for review. Where appropriate, material account or order decisions may be reviewed by an authorized individual.

5. Information We Do Not Request

Peptix Canada is a research-product supplier and is not a healthcare provider, pharmacy, medical clinic, or telehealth provider.

We do not ask customers to provide medical records or detailed information about:

• diagnoses
• symptoms
• medications
• treatment plans
• prescriptions
• genetic information
• biometric information
• provincial health-card numbers
• Social Insurance Numbers
• precise GPS location
• racial or ethnic origin
• religious beliefs
• sexual orientation
• political opinions
• other highly sensitive information unrelated to an ordinary commercial transaction

Do not send medical information, prescriptions, treatment requests, injection instructions, dosage information, or other health information through our contact forms, reviews, or customer-support channels.

If you voluntarily provide information that we did not request, we may delete it, restrict access to it, or retain it only where reasonably necessary to respond to your communication or comply with law.

6. Sources of Personal Information

We may collect Personal Information:

Directly From You

For example, when you:

• register an account
• place an order
• contact customer support
• request a refund
• subscribe to communications
• submit a review
• make a privacy request

Automatically From Your Device

We may collect technical and usage information through cookies, server logs, local storage, pixels, and similar technologies.

From Service Providers

We may receive limited information from providers involved in:

• authentication
• website hosting
• payment processing
• order management
• shipping and delivery
• email delivery
• fraud prevention
• analytics
• error monitoring
• customer support

From Public or Lawful Sources

Where permitted by law, we may collect information from publicly available sources or fraud-prevention databases to investigate suspected fraud, chargebacks, security threats, identity misuse, or violations of our Terms and Conditions.

7. How We Use Personal Information

Peptix Canada may use Personal Information to:

• create and maintain customer accounts
• authenticate users and manage login sessions
• confirm age and record research-use acknowledgements
• process and fulfill orders
• arrange shipping and delivery within Canada
• provide order confirmations, receipts, and tracking information
• process payments, refunds, and cancellations
• respond to customer questions and support requests
• administer returns or order disputes
• maintain inventory and transaction records
• detect and prevent fraud, account takeover, abuse, chargebacks, and prohibited transactions
• protect the security and integrity of the Site
• investigate suspected violations of our policies
• enforce our Terms and Conditions
• verify that an order meets our purchasing requirements
• operate, maintain, test, troubleshoot, and improve the Site
• understand how customers use the Site
• identify technical errors and performance issues
• maintain accounting, tax, and business records
• communicate important changes to our services or policies
• send marketing communications where we have the consent or other lawful authority required to do so
• establish, exercise, or defend legal claims
• respond to lawful court orders, warrants, subpoenas, regulatory requests, or law-enforcement requests
• comply with Canadian federal, provincial, territorial, and municipal laws
• carry out another purpose that is disclosed when information is collected or to which you consent

We will not use Personal Information for a new purpose that is materially different from the purpose originally disclosed unless we obtain additional consent or the use is otherwise permitted or required by law.

8. Consent and Withdrawal of Consent

Depending on the circumstances and sensitivity of the information, consent may be express, implied, or otherwise permitted under applicable Canadian law.

By voluntarily providing Personal Information for an obvious purpose, such as supplying a shipping address to receive an order, you consent to our reasonable use and disclosure of that information for that purpose.

You may withdraw consent to certain collections, uses, or disclosures by contacting our Privacy Officer. Withdrawal will not affect processing that occurred before consent was withdrawn.

In some circumstances, withdrawing consent may prevent us from:

• maintaining your account
• processing an order
• delivering products
• providing customer support
• issuing a refund
• complying with legal requirements
• continuing to provide a requested service

Consent cannot always be withdrawn where retaining or using information is required by law, reasonably necessary to complete a transaction, required to investigate fraud, or necessary to establish or defend a legal claim.

9. How We Disclose Personal Information

Peptix Canada does not sell or rent Personal Information for monetary compensation.

We may disclose Personal Information in the following circumstances.

A. Service Providers

We may provide Personal Information to Service Providers that perform work on our behalf, including providers of:

• website and cloud hosting
• data storage
• customer authentication
• ecommerce and order management
• payment processing
• fraud prevention
• shipping and delivery
• transactional email
• marketing communications
• customer support
• website analytics
• security monitoring
• accounting
• legal services
• technical support

Service Providers receive only the information reasonably necessary to perform their assigned services. We expect them to protect Personal Information and use it only for authorized purposes, subject to their legal obligations.

B. Shipping and Delivery Partners

We may disclose your name, delivery address, email address, telephone number, and order-shipping details to Canada Post, couriers, fulfilment partners, or other delivery providers as reasonably necessary to deliver an order, provide tracking, investigate a delivery issue, or process a claim.

C. Payment and Fraud-Prevention Providers

We may disclose transaction, account, device, billing, and order information to payment processors, financial institutions, fraud-prevention providers, cryptocurrency payment providers, and chargeback-management providers.

D. Professional Advisers

We may disclose information to lawyers, accountants, insurers, auditors, consultants, or other professional advisers where reasonably necessary to obtain advice, comply with law, manage risk, or protect our legal interests.

E. Legal Compliance and Protection

We may disclose Personal Information where we reasonably believe disclosure is necessary to:

• comply with applicable law
• respond to a valid subpoena, warrant, court order, or regulatory demand
• cooperate with a lawful investigation
• prevent or investigate fraud or criminal activity
• protect the safety, rights, property, or security of Peptix Canada, our customers, or others
• enforce our agreements and policies
• establish, exercise, or defend legal claims

F. Business Transactions

Personal Information may be disclosed as part of a proposed or completed financing, merger, acquisition, sale, restructuring, insolvency, transfer of assets, or similar business transaction.

Where required, parties receiving information for a proposed transaction will be required to protect it, use it only for purposes related to the transaction, and return or destroy it if the transaction does not proceed.

G. With Your Direction or Consent

We may disclose information to another person or organization when you direct us to do so or provide valid consent.

10. No Sale of Personal Information

Peptix Canada does not sell customer Personal Information.

We do not provide customer names, email addresses, telephone numbers, order histories, or account information to unrelated third parties for them to independently market their products or services.

We may use advertising or analytics technology only as disclosed through this Privacy Policy and our Cookie Policy. Where consent is required for a non-essential cookie or similar technology, we will request it through an appropriate consent mechanism.

11. Cookies and Similar Technologies

The Site may use cookies, pixels, local storage, server logs, and similar technologies.

Strictly Necessary Technologies

These technologies may be required to:

• keep the Site functioning
• maintain login sessions
• remember cart contents
• secure forms
• prevent cross-site request forgery
• protect accounts
• process checkout
• detect fraudulent or malicious activity

These technologies cannot always be disabled without affecting Site functionality.

Preference Technologies

These may remember selections such as language, region, account settings, or cookie preferences.

Analytics Technologies

With consent where required, analytics technologies may help us understand:

• how visitors find the Site
• which pages are viewed
• how long users remain on the Site
• whether errors occur
• how Site performance can be improved

Marketing Technologies

Where used, marketing technologies will be disclosed through our cookie banner or Cookie Policy and will be activated only where we have the consent or lawful authority required under applicable law.

You can manage cookies through our cookie controls and browser settings. Disabling cookies may prevent some portions of the Site from working correctly.

12. Marketing Communications and Canada’s Anti-Spam Legislation

Peptix Canada may send promotional email or electronic messages where:

• you have provided consent
• consent may lawfully be implied
• the message is otherwise permitted by law
• the communication is transactional rather than promotional

Promotional messages will include the identification and unsubscribe information required by applicable Canadian law.

You can unsubscribe by:

• selecting the unsubscribe link in a promotional email
• following the opt-out instructions in the message
• contacting Support@peptixCanada.com

We will process valid unsubscribe requests within the period required by law.

Unsubscribing from promotional communications will not prevent us from sending necessary transactional or service messages, including:

• order confirmations
• payment receipts
• shipping notifications
• account-security alerts
• responses to customer-support requests
• product-safety or recall notices
• policy updates
• legally required communications

We may retain limited suppression information after an unsubscribe request to ensure that the address is not added back to a marketing list without valid consent.

13. Processing Outside Your Province or Canada

Peptix Canada is based in British Columbia, but some Service Providers may store or process Personal Information in another Canadian province, the United States, or another country.

When Personal Information is processed outside your province or outside Canada, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, national-security authorities, or regulators in accordance with local law.

Peptix Canada remains responsible for Personal Information under its control and takes reasonable steps to select reputable Service Providers and require appropriate contractual, technical, and organizational protections.

Contact our Privacy Officer for additional information about how Service Providers process Personal Information outside Canada.

14. Data Retention

We retain Personal Information only for as long as reasonably necessary to:

• fulfill the purposes for which it was collected
• provide products and services
• maintain accurate business and transaction records
• comply with tax, accounting, and legal requirements
• administer refunds, disputes, and chargebacks
• detect and prevent fraud
• resolve complaints
• enforce our agreements
• establish, exercise, or defend legal claims

Retention periods vary depending on the information and purpose.

Our general retention approach includes:

Account Information

Account information is normally retained while an account remains active and for a reasonable period after closure where needed for security, fraud prevention, dispute resolution, or legal compliance.

Order and Transaction Records

Invoices, order records, payment records, shipping records, and related accounting information may generally be retained for at least six years from the end of the relevant tax year or for a longer period where required by law, an audit, dispute, investigation, or legal proceeding.

Customer-Support Records

Support communications may be retained for a reasonable period after the issue is resolved to maintain service history, manage disputes, train personnel, prevent abuse, and comply with legal obligations.

Security and Technical Logs

Technical, login, fraud, and security records may be retained for as long as reasonably necessary to investigate incidents, protect the Site, identify recurring threats, and maintain system integrity.

Marketing Records

Marketing-consent records may be retained for as long as reasonably necessary to demonstrate consent and comply with Canadian anti-spam requirements. Suppression records may be kept after an unsubscribe request to ensure the request continues to be honoured.

Reviews

Published reviews may remain available until removed by Peptix Canada or at the reviewer’s valid request, subject to our legitimate need to maintain accurate records, prevent review manipulation, or comply with law.

When Personal Information is no longer required, we will take reasonable steps to securely destroy, erase, or anonymize it.

15. Security Safeguards

Peptix Canada uses reasonable administrative, technical, contractual, and physical safeguards appropriate to the sensitivity and volume of the Personal Information under our control.

These safeguards may include:

• encrypted transmission using TLS or similar technology
• encryption at rest where supported by our providers
• password hashing
• managed authentication systems
• role-based access controls
• least-privilege access
• multi-factor authentication for administrative systems where available
• restricted access to customer and order records
• security monitoring and logging
• software updates and vulnerability management
• fraud and account-takeover detection
• secure backups
• employee and contractor confidentiality obligations
• Service Provider security requirements
• incident-response procedures

No website, database, payment system, or electronic transmission is completely secure. We cannot guarantee that unauthorized access, loss, misuse, alteration, or disclosure will never occur.

You are responsible for maintaining the confidentiality of your password and account credentials. Do not reuse your Peptix Canada password on another website, and notify us promptly if you suspect unauthorized access.

16. Privacy and Security Incidents

Peptix Canada maintains procedures for identifying, assessing, containing, documenting, and responding to suspected privacy and security incidents.

Where required by applicable Canadian law, we will:

• investigate the incident
• take reasonable steps to contain it
• assess the sensitivity of the information involved
• evaluate the likelihood of misuse and potential harm
• notify affected individuals
• report the incident to the appropriate privacy regulator
• notify another organization that may be able to reduce the risk of harm

If you believe your Peptix Canada account or Personal Information has been compromised, contact:

• Support@peptixCanada.com

17. Your Privacy Rights

Subject to applicable law and limited exceptions, you may have the right to:

• request access to Personal Information under our control
• ask how your Personal Information has been used
• ask to whom your Personal Information has been disclosed
• request correction of inaccurate or incomplete information
• withdraw consent to certain processing
• request deletion or anonymization where retention is no longer necessary
• object to or opt out of certain marketing communications
• ask questions about our privacy practices
• make a complaint about our handling of Personal Information

Deletion is not an absolute right. We may retain information where reasonably necessary or required for:

• transaction completion
• tax and accounting obligations
• fraud prevention
• security investigations
• dispute resolution
• chargeback management
• legal compliance
• enforcement of our agreements
• legal claims

18. How to Make a Privacy Request

Submit a written request to:

• Privacy Officer
• Peptix Canada
• Privacy@peptixCanada.com

Use a subject line such as:

• “Privacy Access Request”
• “Privacy Correction Request”
• “Consent Withdrawal”
• “Privacy Complaint”

Your request should provide enough detail for us to identify:

• who you are
• the information involved
• the account or order concerned
• what action you are requesting

We may need to verify your identity before providing access, correcting information, or deleting account records. We will request only the information reasonably necessary for verification.

We will respond within the period required by applicable law. For requests governed by British Columbia’s Personal Information Protection Act, this will generally be no later than 30 days after receiving a sufficiently detailed request, subject to lawful extensions.

Access may be limited where disclosure would:

• reveal Personal Information about another person
• threaten another person’s safety
• reveal confidential commercial information
• interfere with an investigation
• disclose information protected by solicitor-client privilege
• otherwise be prohibited or restricted by law

Where we refuse all or part of a request, we will provide an explanation where legally permitted.

19. Authorized Representatives

You may authorize another person to make a privacy request on your behalf.

Before processing the request, we may require:

• written authorization signed by you
• proof of the representative’s identity
• proof of your identity
• enough information to confirm the scope of the representative’s authority

We may communicate directly with you where reasonably necessary to prevent fraud or confirm your instructions.

20. Privacy Complaints

We encourage you to contact our Privacy Officer first so that we can investigate and respond to your concern.

• Email: Privacy@peptixCanada.com

Please describe:

• the privacy concern
• the Personal Information involved
• relevant dates
• any related account or order
• previous communications with Peptix Canada
• the resolution you are seeking

If you are not satisfied with our response, you may have the right to contact the privacy regulator with jurisdiction over the matter, such as:

• the Office of the Information and Privacy Commissioner for British Columbia
• the Office of the Privacy Commissioner of Canada

Other provincial privacy authorities may have jurisdiction depending on your province and the circumstances.

We will not deny service, retaliate, or treat you unfairly merely because you made a good-faith privacy complaint or exercised a privacy right.

21. Children and Persons Under 19

The Site and its products are intended only for persons who are at least 19 years old.

Peptix Canada does not knowingly permit persons under 19 to create an account or purchase products.

If we learn that we have collected Personal Information from a person under 19 contrary to our requirements, we may:

• close the account
• cancel pending orders
• delete the information where legally permitted
• retain limited records where necessary to prevent repeated registration, process a refund, investigate fraud, or comply with law

A parent or legal guardian who believes that a minor has provided Personal Information to Peptix Canada may contact Privacy@peptixCanada.com.

22. Third-Party Websites and Services

The Site may contain links to third-party websites, social-media platforms, payment services, shipping providers, laboratories, or other resources.

Peptix Canada does not control the privacy, security, or content practices of independent third parties. This Privacy Policy does not apply to a third party’s collection or use of Personal Information.

Review the third party’s privacy policy before providing information or using its service.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• changes to our operations
• new website functionality
• changes to Service Providers
• changes to legal requirements
• updated security practices
• changes to how we collect, use, or disclose Personal Information

The updated version will be posted on PeptixCanada.ca with a revised “Last Updated” date.

Where a change is material, we may provide additional notice through:

• an email
• an account notification
• a checkout notice
• a cookie banner
• a prominent notice on the Site

Where additional consent is legally required, continued use of the Site alone will not replace that consent.

24. Contact Us

Questions about this Privacy Policy or Peptix Canada’s handling of Personal Information should be directed to:

• Peptix Canada — Privacy Officer, British Columbia, Canada
• Privacy Email: Privacy@peptixCanada.com
• General Support: Support@peptixCanada.com
• Website: PeptixCanada.ca