Privacy Policy

Wholesale Peptide Supply, of 185 Paularino Ave, Costa Mesa, CA 92626, United States, is responsible for the information described here and is the business that determines why and how it is used. Contact admin@wholesalepeptidesupply.com with any question about it.

This policy covers this website and the quotes, orders and correspondence that follow from it. It does not cover any other company’s site that we link to.

A summary of everything below, so you do not have to read the rest to know where you stand.

• What we collect — your business and contact details, the ship-to address, what you ordered, your consent record, and standard server logs. Analytics only if you accept the cookie banner
• Why — to quote, invoice and fulfil; to verify that a buyer is a business and the use is research; to keep records the law requires; and to send marketing only if you asked for it
• Where it goes — our Zoho CRM, our payment processor, the carrier, and our accountants. Nothing is stored on this website
• How long — business records for the life of the company; analytics for 14 months
• We do not sell personal information and we do not share it for cross-context behavioural advertising. We never have, and this policy would have to change before we could
• Sensitive personal information — we do not collect it and do not want it. Please do not send it to us

This is a business-to-business site, so most of what we hold is work contact information. California law stopped exempting business contact data in 2023, so we treat it as personal information and give you the rights in clause 11 over it.

When you submit an order or quote request:

• business name, contact name, work email and phone number
• EIN or resale certificate details, if you give them
• the ship-to address you enter
• the sizes and quantities you selected, and any notes you write
• your consent record — which boxes you ticked, the exact wording, the policy version and the time

Automatically, when you visit: IP address, browser and device type, pages requested and referring page, in standard server logs kept by our host.

When you pay: the invoice, the amount, and confirmation from our processor. We never see or store a full card number — our records show the last four digits, the card brand and whether the payment succeeded.

We do not collect bank credentials on this site, because no payment happens here. We do not knowingly collect information about individuals acting as consumers — we sell to businesses. Anything you type into a free-text notes field is up to you; please keep it to the order.

We use Google Analytics 4 to see which pages are useful. It is not loaded until you accept — decline, or simply ignore the banner, and no request is made to Google and no analytics cookie is set.

The only cookie we set before you choose is the one recording that choice. It contains the word granted or denied and nothing else. There is no advertising pixel on this site, no remarketing tag, and no social tracker.

If you accept, Google Analytics sets its own cookies and receives your truncated IP address, the pages you view and general device information. We have advertising and personalisation signals switched off, and we do not use it to build advertising audiences.

Changing your mind: clear cookies for this site and the banner returns. We also honour Global Privacy Control — if your browser or extension sends a GPC signal, we treat it as a decline and do not load analytics, whether or not you have touched the banner.

• to quote, invoice and fulfil your order — performing our contract
• to verify that a purchaser is a business and that the intended use is research — our legal and compliance obligation
• to keep records of sale, lot traceability and consent — our legal obligation and our legitimate interest in being able to trace a lot
• to send you marketing email — only if you ticked the optional box
• to protect the site against fraud and abuse

We do not use your information to make any decision about you by automated means, and we do not profile you.

The marketing box is optional, never pre-ticked, and separate from the agreement boxes. Leaving it unticked does not affect your order or your quote.

If you tick it we may email you about pricing, stock and new lots. Every such email has an unsubscribe link, and you can also email admin@wholesalepeptidesupply.com to be removed. Unsubscribing does not stop transactional email about an order you have placed — a quote, an invoice, a dispatch note or a lot notice is not marketing.

We use a small number of service providers, each for one purpose:

• Zoho CRM — every submission is forwarded into it, and it is operated by the Wholesale Peptide Supply team
• Vercel — hosting and server logs
• Our payment processor — takes the card payment and holds the card data. We do not
• Carriers — given the ship-to address in order to deliver
• Our bank and accountants — for invoicing and records
• Google — Analytics, only if you accept the cookie banner, and Search Console, which reports on search queries rather than on identified people

Each is bound to use the information only to provide its service to us. We disclose information beyond that list only when the law requires it, to respond to a lawful request, to establish or defend a legal claim, or to a buyer of the business if it is ever sold — in which case this policy travels with the information.

We store nothing on this website. There is no database here and no local copy of anything you submit. Your submission is passed straight to Zoho CRM and the site keeps no record of it.

• Zoho CRM — enquiries, orders, invoices and the consent record are kept for the life of the company. They are our business records and our lot-traceability trail, and tax rules require us to keep the sales among them
• Marketing consent — kept while you are subscribed, and the record of an unsubscribe is kept afterwards so we do not email you again by mistake
• Google Analytics — user and event data expires after 14 months, which is the longest retention Google Analytics 4 offers. Aggregate reporting continues afterwards without the underlying records
• Google Search Console — search performance data is retained by Google for 16 months on a rolling basis. It concerns search queries, not identified people
• Server logs — held by our host, Vercel, under its own retention schedule, not ours

If you want your enquiry removed from the CRM, ask — see clause 11. Where we must keep a record the law requires, we tell you which one and delete the rest.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by California law. We have never done either, and we do not have a “Do Not Sell or Share My Personal Information” link because there is nothing for it to switch off.

We do not disclose personal information to anyone for their own marketing purposes, and we do not sell or disclose the personal information of anyone we know to be under 16.

The site is served over TLS. Submissions are transmitted directly to the providers listed in clause 7 and are not stored on this website, and access in the CRM is limited to people who need it to fill an order.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your information and the law requires us to tell you, we will, without unreasonable delay.

Depending on where you are, you may have the right to know what we hold, to get a copy in a portable form, to correct it, to delete it, to limit how we use it, to opt out of any sale or sharing, and not to be discriminated against for asking.

We extend all of these rights to everyone who deals with us, whether or not a particular statute applies to us or to you. We would rather answer the request than argue about whether we have to. Because this is a business-to-business site, that includes rights over your work contact details.

To exercise any of them, email admin@wholesalepeptidesupply.com from the address on the account, saying what you want. We acknowledge within 10 business days and respond within 45 days, the period the California Consumer Privacy Act allows, extendable once by a further 45 days if the request is complex — we will tell you if it is.

We may need to verify who you are first, and we may have to keep records the law requires us to keep. Exercising a right costs nothing, and we will not give you a worse price or a worse service for it.

If you think we have got this wrong, tell us first — admin@wholesalepeptidesupply.com — and we will look at it again. You can also complain to the California Privacy Protection Agency or the California Attorney General.

You may use an authorised agent to make a request for you. We will ask for written permission signed by you, and we may still ask you to confirm directly that the agent is acting on your behalf.

This is a business-to-business site and it is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email admin@wholesalepeptidesupply.com and we will delete it.

We operate from California and our providers process information in the United States. If you contact us from outside the United States, your information is transferred here and handled under United States law, which may not give the same protections as your own.

We may update this policy. The version stamp at the top of the page changes when we do, and we record which version applied to each submission, so what you agreed to is always identifiable afterwards.

Material changes are posted here before they take effect. We do not apply a new policy retrospectively to information you gave us under an older one.

admin@wholesalepeptidesupply.com · (714) 625-9215 · Wholesale Peptide Supply, 185 Paularino Ave, Costa Mesa, CA 92626, United States. Or use the contact form.