Last updated: May 12, 2026
This Privacy Policy describes how Bastion Peptides (“we,” “us,” “our”) collects, uses, and protects information you provide when using bastionpeptides.com (“the Site”).
1. Information We Collect
Information you provide directly:
- Account/order information: Name, email, shipping address, phone number (optional)
- Payment information: Payment is processed through PayPal — we do not collect or store credit card numbers, expiry dates, or CVV codes. PayPal handles payment data with industry-standard PCI-DSS encryption. We receive only the transaction ID, the amount paid, and your shipping address.
- Communications: Messages you send via contact forms, support email, or live chat
- Researcher attestation: Your confirmation that you are a qualified researcher 21 or older
Information collected automatically:
- IP address (for fraud prevention and analytics)
- Browser type, device type, operating system
- Pages visited, time spent, referring URL
- Cookies and similar tracking technologies (see Cookies section)
2. How We Use Your Information
- Process and fulfill orders
- Send order confirmations, shipping notifications, and account-related communications
- Verify your researcher attestation and age
- Provide customer support
- Detect and prevent fraud, abuse, or violations of our Terms
- Comply with legal obligations
- With your explicit consent: send newsletters, product updates, and lab result notifications
3. How We Share Information
We do not sell your personal information. We share information only as follows:
- Service providers: NOWPayments (payment processing), shipping carriers (fulfillment), Hostinger (email + hosting), Klaviyo or Mailchimp (email marketing — only if you opt in)
- Manufacturing/fulfillment partners: To the extent necessary to fulfill orders (shipping address only — not payment or account details)
- Legal compliance: If required by law, court order, or government request (US, Canada, or jurisdictions where we operate)
- Business transfer: In connection with a merger, acquisition, or sale of assets, subject to notice and continued protection
4. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your shopping cart and login session (strictly necessary)
- Remember your preferences
- Analyze Site usage (Google Analytics or similar)
- Detect fraud and improve security
You can manage cookie preferences via your browser settings or our cookie consent banner. Disabling certain cookies may affect Site functionality.
5. Data Retention
We retain personal information only as long as necessary for the purposes for which it was collected:
- Order records: 7 years (for tax and regulatory purposes)
- Account information: Until you request deletion or account is closed for 24 months
- Marketing data: Until you unsubscribe
- Support communications: 2 years
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal retention obligations)
- Withdraw consent for marketing
- Lodge a complaint with a data protection authority (e.g., Privacy Commissioner of Canada under PIPEDA, California Attorney General under CCPA)
To exercise these rights: [email protected]
7. Security
We implement reasonable technical and organizational measures to protect your information, including SSL/TLS encryption for all data in transit, encrypted storage of sensitive data, access controls limiting employee access to personal information, and regular security review. No internet transmission is 100% secure, however, and we cannot guarantee absolute security.
8. International Data Transfers
Information may be processed outside your country of residence (including in the United States and Hong Kong via our manufacturing partners). By using the Site, you consent to such transfers, subject to appropriate safeguards under applicable law.
9. Children’s Privacy
This Site is not directed to anyone under 21. We do not knowingly collect information from children. If you believe a child has provided us information, contact us for prompt removal.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via Site notice or email. Continued use of the Site after changes constitutes acceptance.
11. Contact
Privacy questions: [email protected]