Privacy Policy

Privacy Policy

Last updated: May 15, 2026

Covalent Peptides (“Covalent Peptides,” “we,” “us,” or “our”) respects the privacy of visitors to covalentpeptides.com and customers who purchase products from us. This Privacy Policy explains what information we collect, why we collect it, how it is stored, and the choices you have regarding it.

Information we collect

We collect information you provide directly to us, including:

  • Order information — name, billing and shipping address, email address, phone number (if provided), order contents, payment method type (tokenized; we do not store full card numbers)
  • Account information — if you create an account: username, password (stored as a one-way hash), order history
  • Support correspondence — emails you send us, including any attachments or order references included
  • Researcher affirmation — your confirmation at checkout that you are at least 21 years of age and purchasing for research purposes

We also collect limited information automatically:

  • Usage data — pages visited, products viewed, time on site, referring source. Used for site analytics and to improve the catalog experience.
  • Device data — IP address, browser type, operating system. Used for fraud prevention and site security.
  • Cookies — session cookies (to keep you logged in and your cart populated) and analytics cookies. See “Cookies” below.

Why we collect it

  • To process and ship your orders
  • To respond to your support inquiries
  • To calculate sales tax and comply with tax law
  • To prevent fraud and protect the security of the site
  • To send transactional emails (order confirmations, shipping notifications, COA attachments)
  • To send occasional service announcements relevant to your account, such as policy updates

We do not use your information for advertising profiles, and we do not sell your personal information to any third party.

Third-party service providers

We share limited information with third-party service providers as needed to operate the business. These categories may include:

  • Payment processor — credit card and ACH transactions are handled by a third-party PCI-DSS-compliant payment processor. Full payment card numbers are never stored on our servers.
  • Cryptocurrency processor — if you choose to pay in cryptocurrency, transaction data is processed by a third-party crypto payment provider.
  • Sales tax automation — order line items and shipping address are transmitted to a sales-tax compliance provider to calculate accurate state and local sales tax.
  • Email infrastructure — a third-party email and calendaring provider handles our customer-facing email under standard security and data-protection terms.
  • Web hosting — site hosting and backup services. Your data resides on U.S.-based servers.
  • Carriers — shipping address and tracking-related information is shared with U.S. shipping carriers as needed to deliver your order.

Each provider is bound by its own privacy and security obligations and is given only the data necessary to perform its function.

How long we keep it

  • Order and tax records — retained for at least 7 years to comply with U.S. tax law and accounting requirements.
  • Account information — retained while your account is active and for a reasonable period after closure for fraud prevention and to honor any pending obligations.
  • Support correspondence — retained for a reasonable period sufficient to resolve and reference past inquiries.
  • Usage and device data — retained in aggregate or short-term as needed for analytics and security.

Cookies

This site uses cookies for two purposes: (1) functional cookies that keep you logged in and remember the contents of your cart, and (2) analytics cookies that help us understand how the site is used so we can improve it. You can disable cookies in your browser settings; doing so may prevent the cart and checkout from functioning correctly.

Your rights

Depending on your state of residence you may have certain rights regarding personal information we hold about you, including:

  • The right to request access to the personal information we hold about you
  • The right to request correction of inaccurate information
  • The right to request deletion of your information, subject to our legal retention obligations (such as tax records)
  • The right to opt out of any marketing communications you receive from us

To exercise any of these rights, email compliance@covalentpeptides.com from the address on your account. We will respond within 30 days.

Children

This site is not directed at, and we do not knowingly collect information from, anyone under the age of 21. Purchasers must affirm they are at least 21 years of age.

Security

The site runs over HTTPS with TLS encryption. We use industry-standard practices to protect information in transit and at rest. No internet transmission or storage system can be guaranteed perfectly secure; if you believe your account has been compromised, contact us immediately.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always posted on this page with an updated effective date. Material changes will be announced on this page at least 30 days before they take effect.

Contact

Questions about this Privacy Policy can be sent to compliance@covalentpeptides.com.