Privacy & Security

Privacy Policy

Last Updated: September 2026 • Effective Immediately

At Regenerative Health Peptides ("RHP," "we," "us," or "our"), accessible at rhpeptides.com, protecting your privacy and safeguarding your personal and organizational research data is of paramount importance. This Privacy Policy details how we collect, store, utilize, and protect your information when you access our website, create a customer account, verify research credentials, or purchase research materials.

OUR COMMITMENT: Regenerative Health Peptides never sells, rents, or monetizes your personal data or institutional research information to third-party data brokers or marketing aggregators.

1. Information We Collect

We collect information necessary to fulfill orders, verify laboratory researcher qualifications, comply with legal regulations, and ensure platform security:

  • Account & Contact Information: Name, professional title, institution or laboratory entity name, physical billing and shipping addresses, email address, and contact telephone number.
  • Order & Transaction Records: Purchase history, compound names, vial quantities, lot numbers, transaction timestamps, payment method type (e.g., credit card brand or crypto payment identifier), and order value. Note: Full payment card numbers are processed directly through certified PCI-DSS Level 1 compliant payment gateways and are never stored on our servers.
  • Researcher Identity & Age Verification Data: To adhere to strict age (21+) and regulatory standards, we may collect verification documents, business identifiers, and verification status results processed through third-party compliance verification partners (such as Token of Trust).
  • Technical & Log Data: Internet Protocol (IP) address, browser version, device operating system, referring URL, page response times, and navigation sequences collected automatically via standard secure server logs.

2. How We Use Your Information

Your information is used strictly for legitimate business, legal, and operational purposes:

  • Order Processing & Cold-Chain Delivery: Accurately packing, labeling, and shipping temperature-sensitive research compounds to your verified facility.
  • Age & Research Qualification Compliance: Verifying that buyers meet the mandatory 21+ age limit and research eligibility standards.
  • Customer Support & Order Tracking: Providing tracking numbers, delivery updates, and responding to technical support inquiries.
  • Fraud Detection & Security: Protecting against fraudulent payment attempts, chargeback abuse, unauthorized account access, and cyber attacks.
  • Regulatory Compliance & Recordkeeping: Maintaining accounting, tax, and chemical distributor compliance records as required by federal and state authorities.
  • Optional Research Updates: If you explicitly opt in, sending notices regarding new analytical compound batches or COA updates. You may opt out at any time with a single click.

3. Cookies & Local Storage

We use session cookies and local storage to provide essential website functionality:

  • Essential Functional Cookies: Maintaining your active session, securing the checkout workflow, remembering shopping cart contents, and logging age-gate confirmation tokens.
  • Security & Anti-Fraud Cookies: Identifying suspicious access patterns, preventing automated bot abuse, and protecting account login endpoints.
  • Managing Preferences: You can configure your browser to reject all cookies; however, essential cookies are required for user authentication, cart management, and order checkout.

4. Information Sharing & Third-Party Providers

We share information solely with trusted third-party service providers performing essential functions on our behalf:

  • Payment Gateways: Secure, encrypted payment processors certified under PCI-DSS Level 1.
  • Logistics & Shipping Carriers: Regulated freight and package carriers (such as USPS, FedEx, and UPS) to deliver orders to your destination address.
  • Identity Verification Services: Automated verification services (including Token of Trust) solely to confirm identity and age (21+) compliance.
  • Legal Requirements: We may disclose information if required by law, subpoena, court order, or when disclosure is necessary to investigate fraud, enforce our Terms & Conditions, or protect safety and property.

5. Data Security & Infrastructure Protection

We maintain comprehensive technical and organizational safeguards to ensure data integrity and confidentiality:

  • End-to-End Encryption: All web traffic is secured with 256-bit TLS/SSL encryption in transit.
  • Access Controls: Strict role-based administrative access controls, multi-factor authentication (MFA), and zero-trust internal network policies.
  • Secure Storage: Database records are encrypted at rest with regular automated backups and vulnerability audits.

6. Age Restriction Policy (21+)

Regenerative Health Peptides does not market to, solicit, or knowingly collect personal information from individuals under the age of 21. If we become aware that an account was created by or contains data from an individual under 21 years of age, that account and all associated records will be immediately purged from our active systems.

7. Your Rights & Data Choices

Depending on your jurisdiction, you possess specific rights regarding your personal data:

  • Right of Access: Request a summary copy of the personal information we maintain regarding your account.
  • Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal details.
  • Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to legal, tax, and compliance record retention obligations.
  • Marketing Opt-Out: Unsubscribe from marketing communications at any time via the "Unsubscribe" link in any promotional email or by contacting support.

8. California & State-Specific Disclosures (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific statutory rights:

  • We do not sell personal information or share personal information for cross-context behavioral advertising.
  • You have the right to request disclosure of categories of personal information collected, sources, and commercial purposes.
  • You have the right to non-discrimination for exercising your CCPA/CPRA rights.

9. Updates to This Policy

We reserve the right to revise this Privacy Policy periodically to reflect technological changes, legal requirements, or adjustments to our research catalog operations. Any modifications will be posted here with an updated "Last Updated" date. Continued use of the website following changes constitutes acceptance of the revised terms.

10. Contacting Our Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact our team: