Privacy Policy
Last updated 10 September 2026
This policy explains how Peprise handles personal information when you browse, create an account, place an order, request a refund, or contact us.
1. Who is responsible
Peprise is responsible for the information described here. Contact support@pepriseusa.com or +1 (201) 478-1333 for privacy questions or requests.
2. Information we collect
- Account information: name, email address, research role and affiliation, and a password stored as a cryptographic hash rather than plaintext.
- Research confirmations: the age and research-use declarations you accept, their dates, and a copy of the confirmation attached to each order.
- Orders and payments: billing and shipping details, phone number, products, prices, order numbers, payment method, payment status, transaction references, and wallet addresses or transaction IDs you provide.
- Support and refund requests: correspondence, photos, product and lot details, and laboratory reports you submit. A COA may contain information about its submitter.
- Submissions: reviews, the name and affiliation you choose to submit with them, affiliate applications, and marketing preferences.
- Technical information: IP address, browser and device information, requested pages, timestamps, security logs, and referral or campaign information associated with a visit and order.
We do not ask for health information, a Social Security number, a government ID, or your date of birth. Please do not include sensitive personal information in an order note, review, support message, or laboratory report unless it is needed to resolve your request. We may request proportionate information to verify a privacy or refund request.
3. Payments
Checkout currently uses manual payments completed through the payment app, bank, or cryptocurrency wallet you select. We record the order and reconcile the payment. We do not collect full payment-card numbers or card security codes through our checkout. Your chosen payment service handles its own account and payment information under its own privacy policy.
Cryptocurrency transactions, including addresses and amounts, are recorded on public blockchains. Anyone may be able to view that transaction history. We cannot erase or change public blockchain records.
4. Cookies and browser storage
WordPress and WooCommerce use cookies to maintain login sessions, shopping carts, checkout, and security. Their lifetimes depend on the cookie, your login choices, and your browser settings; logging out or clearing cookies ends relevant sessions.
WooCommerce order attribution is enabled. It uses browser cookies to record referral sources, campaign parameters, landing pages, and visit information and can attach that information to an order. This helps us understand how orders originate. It is separate from advertising pixels.
Your browser also stores your light or dark theme preference, the first-visit age confirmation, and temporary interface state. The first-visit confirmation is reused for 12 months; the stored value may remain until you clear it. The account research confirmation is a separate record kept by us.
You can clear or block cookies and site storage in your browser. Blocking essential storage may prevent login, cart, or checkout features from working. We do not sell personal information or use it for cross-context behavioral advertising. We will update this notice and obtain any legally required consent before introducing a new use that requires it.
5. How we use information
- Manage accounts, assess research-use eligibility, fulfill orders, reconcile payments, and process refunds.
- Answer support questions and verify claims with the issuing laboratory where necessary.
- Check submitted reviews against orders and publish accepted reviews with the submitted public name and affiliation.
- Protect accounts and the site, prevent fraud, and investigate delivery or payment problems.
- Understand order referral sources and maintain site functionality.
- Send order, account, and service emails. If you separately opt in to marketing, send that marketing until you unsubscribe.
- Maintain records needed for accounting, legal obligations, and resolving disputes.
6. Who receives information
- WordPress.com and Jetpack, provided by Automattic, host and protect the website and provide site statistics. Jetpack Stats processes technical visit information, including IP address, pages visited, referring pages, browser information, timestamps, and country. If you are signed into WordPress.com, it may also process your WordPress.com user ID and username. See Automattic’s privacy policy and Jetpack Stats privacy information.
- Microsoft 365 processes our business email, including order summaries, account messages, and support correspondence. The website’s email delivery logs can include recipients, subjects, message content, and delivery status.
- Payment providers and shipping carriers receive the information needed to process your payment, refund, or delivery.
- Testing laboratories may receive the report, order/product details, and sample information needed to verify a refund claim. We limit disclosure to information relevant to that verification.
- Gravatar, provided by Automattic, may process a hash derived from your email to retrieve an avatar. When an avatar or profile is loaded, the service may also receive technical request information. See Automattic’s privacy policy.
- Professional advisers and authorities receive information when needed for advice, legal obligations, or lawful requests.
In a business transfer, information may pass to a successor subject to applicable law and this notice. We will provide notice of a material change in how it will be used. Providers may process information in the United States or other countries where they operate.
7. Retention
We retain account information while an account is active and as needed for support, security, or legal obligations afterwards. Order and research-confirmation records are retained for accounting, dispute handling, and compliance. Retention is not a blanket exception to deletion rights: when you request deletion, we assess which records must be retained, explain applicable exceptions, and remove or de-identify information that is no longer needed.
Website email delivery logs are configured for automatic removal after 14 days. Copies in our Microsoft mailbox, backups, and support records are separate and are not erased by that log cleanup. Support correspondence, server logs, and backups are retained according to their operational purpose and any applicable legal requirements. Marketing suppression records may be retained to respect an unsubscribe request.
8. Privacy choices and requests
You may contact support@pepriseusa.com to request access, a copy of your information, correction, or deletion. We verify requests using information proportionate to the request and will explain any lawful reason for declining or limiting a request. You may unsubscribe from marketing without stopping essential order or account messages.
Depending on your location and which laws apply, you may also have rights to data portability, to opt out of sale, targeted advertising or certain profiling, to limit certain uses of sensitive information, or to use an authorized agent. We do not sell personal information or use it for cross-context behavioral advertising. We do not use profiling to make decisions with legal or similarly significant effects.
We aim to respond within 30 days and will comply with any applicable response deadline, including explaining a permitted extension. If we decline a request, reply to appeal. We will explain the outcome and any further complaint route available under applicable law, including contacting your state Attorney General. We will not discriminate against you for exercising a privacy right.
9. Security and age restrictions
We use access controls and password hashing to protect accounts. No security measure can guarantee that information will never be accessed without authorization. Use a unique password and do not send passwords, card details, or wallet recovery phrases to us. Where required by law, we will notify affected people and authorities of a data breach.
The site is intended for adults aged 21 or older. If you believe a minor has provided personal information, contact support@pepriseusa.com so we can investigate and delete information as required.
10. Changes and contact
The date at the top shows when this notice was last updated. We will provide notice of material changes and obtain consent where required before using information for a new incompatible purpose.
Peprise
support@pepriseusa.com
+1 (201) 478-1333
Monday–Friday, 9:00AM–5:00PM Eastern