Privacy Policy.

PeptideX is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you access our website, place orders, or interact with our services.

We take a privacy-first approach and collect only the information necessary to operate our services responsibly.

We may collect the following categories of information:

We use collected information to:

• Process, verify, and fulfil orders
• Dispatch orders via Australia Post Express
• Send transactional emails (order confirmation, payment status, shipping updates)
• Respond to enquiries and support requests
• Verify that purchases are for legitimate research purposes
• Maintain site security and prevent fraud
• Comply with legal and regulatory obligations
• Deliver relevant marketing and improve advertising performance — including through advertising services provided by Google LLC. You can opt out at any time (see “Your Rights” below).

Information may be shared only with:

• Shipping providers (Australia Post Express) for delivery
• Email delivery providers used for transactional communications
• Service providers supporting website infrastructure and security
• Overseas transfers — Some of our service providers, including Google LLC (advertising) and our email delivery providers, are located in the United States. When we share information with these providers, that information is transferred outside Australia. We share personal identifiers only in irreversibly hashed form (see below), and we rely on our existing customer relationship with you as the basis for these transfers underAustralian Privacy Principle 8.
• Advertising platforms — specifically Google LLC — for the purpose of audience matching and measuring the performance of our advertising. We include customers in these audiences based on their existing purchase relationship with us.Any personal identifiers shared with these platforms are irreversibly hashed (SHA‑256) before transmission; raw email addresses, names, phone numbers, or postal addresses are never shared for advertising purposes.
• Regulatory or law enforcement authorities, where legally required

Information is shared only to the extent necessary to perform these services.

We implement reasonable technical and organisational safeguards to protect personal information against unauthorised access, loss, misuse, or disclosure.

Personal information is retained only for as long as necessary to:

Cryptocurrency transaction data is retained solely for payment verification and audit purposes.

We use cookies and similar technologies for essential site functions, analytics, and advertising. Analytics and advertising services — including Google Analytics and Google Ads, with conversion measurement and, unless you opt out, ad personalisation — are active by default. Essential and analytics cookies help us:

• Enable core website functionality
• Understand site usage patterns
• Improve performance and reliability

You may control cookies through your browser settings (disabling cookies may affect website functionality). You can also opt out of ad personalisation at Google Ads Settings (adssettings.google.com) and install the Google Analytics Opt-out Browser Add-on.

Separately, we may share hashed customer identifiers — such as SHA‑256 hashes of email addresses — with Google’s advertising services, so that our existing customers can be matched to their Google accounts for the purposes of delivering more relevant advertising and measuring campaign performance. This is not a cookie-based activity: no raw email addresses, names, or contact details are shared. You can opt out at any time — see “Your Rights” below.

Depending on your location, you may have rights to:

• Access personal information we hold about you
• Request correction of inaccurate information
• Request deletion of personal information (subject to legal obligations)
• Object to certain data processing activities
• Opt out of the marketing use of your data, including the sharing of hashed identifiers with advertising platforms such as Google. To opt out, email us using the address at the bottom of this page — we’ll remove your details from our marketing audiences within 7 business days.

Requests can be made by contacting us using the details in Section 13.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites and encourage you to review their privacy policies separately.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

PeptideX complies with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Complaints regarding privacy practices may be lodged with the Office of the Australian Information Commissioner (OAIC).

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last Updated" date. Continued use of the website constitutes acceptance of the updated policy.