Privacy
Policy

Pro Peptides Canada Inc. is a Canadian corporation registered in the Province of Ontario. We operate the website located at propeptides.ca and supply research-grade peptide compounds exclusively for laboratory and scientific research purposes.

For privacy-related inquiries, our designated Privacy Officer can be reached at the contact details listed in Section 13.

We collect information in the following ways:

Information You Provide Directly

• Account registration: name, email address, password (hashed)
• Order placement: billing name, shipping address, telephone number, email address
• Contact form: name, email address, message content, selected subject
• Newsletter sign-up: email address

Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, device identifiers
• Usage data: pages viewed, time on site, referral URLs, click paths
• Transaction data: order history, products purchased, order values (payment card data is handled entirely by our payment processor and is never stored on our servers)
• Cookies and similar technologies: see Section 6

Information from Third Parties

• Fraud detection signals from payment processors (e.g. Shopify Payments, Stripe)
• Analytics data aggregated by Google Analytics or equivalent services

We use the personal information we collect for the following purposes:

• Order fulfilment: processing, confirming, shipping, and tracking your orders
• Account management: creating and maintaining your customer account
• Customer support: responding to enquiries, complaints, and COA requests
• Marketing communications: sending promotional emails and newsletters where you have opted in (you may unsubscribe at any time)
• Site improvement: analysing usage patterns to improve our website, catalogue, and user experience
• Fraud prevention: detecting and preventing fraudulent transactions and abuse
• Legal compliance: meeting our obligations under applicable Canadian law, including tax record-keeping
• Personalisation: displaying relevant product recommendations based on your browsing and purchase history

We will not use your personal information for purposes that are incompatible with those listed above without first obtaining your consent or as otherwise required by law.

Under PIPEDA and applicable law, we rely on the following bases for processing your personal information:

• Consent: for marketing emails and non-essential cookies. You may withdraw consent at any time.
• Contractual necessity: to fulfil orders you place with us and manage your account.
• Legitimate interests: for fraud prevention, site security, and aggregate analytics — where these interests are not overridden by your rights.
• Legal obligation: where required to comply with Canadian federal or provincial law.

We do not sell your personal information. We share it only in the following limited circumstances:

• Service providers: third-party vendors who assist us in operating our business, including Shopify (e-commerce platform), shipping carriers (Canada Post, UPS, FedEx), payment processors (Shopify Payments / Stripe), and email service providers. These parties are contractually bound to use your data solely to provide services to us.
• Analytics providers: aggregated, anonymised usage data shared with analytics platforms (e.g. Google Analytics). We use IP anonymisation where available.
• Legal requirements: where required by court order, subpoena, or applicable law, or where necessary to protect the rights, property, or safety of Pro Peptides, our customers, or others.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to any such transfer.

All third-party service providers are required to maintain appropriate data security standards consistent with PIPEDA.

Our website uses cookies and similar technologies. These fall into the following categories:

• Strictly necessary cookies: required for the website to function (e.g. shopping cart, session management). These cannot be disabled.
• Functional cookies: remember your preferences (e.g. language, currency). You may disable these without affecting core functionality.
• Analytics cookies: used to understand how visitors interact with our site (e.g. Google Analytics). We use IP anonymisation. You may opt out via your browser settings or via the Google Analytics Opt-Out Browser Add-on.
• Marketing cookies: used to deliver relevant advertisements. These are only set with your explicit consent.

You can manage cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Order and transaction records: 7 years from the date of the transaction (as required by the Income Tax Act and CRA guidelines)
• Customer account data: retained while your account is active, and for up to 3 years following account closure
• Marketing consent records: retained for the duration of the marketing relationship plus 3 years
• Contact form submissions: up to 2 years from the date of submission
• Analytics data: retained in anonymised/aggregated form indefinitely; individually identifiable data retained for up to 26 months

When data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures.

Under PIPEDA, you have the following rights with respect to your personal information:

• Right of access: you may request a copy of the personal information we hold about you
• Right to correction: you may request that inaccurate or incomplete information be corrected
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to complain: you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca if you believe your rights have been violated

To exercise any of these rights, please contact our Privacy Officer using the details in Section 13. We will respond within 30 days of receiving your request. In some cases, we may need to verify your identity before processing your request.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include:

• TLS/SSL encryption for all data transmitted between your browser and our servers
• Payment card data handled exclusively by PCI-DSS compliant third-party processors — we never store card numbers
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments of our e-commerce platform

While we take these precautions, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by the Breach of Security Safeguards Regulations under PIPEDA.

Our website may contain links to third-party websites, including research databases (PubMed, ClinicalTrials.gov), social media platforms, and external resources. We are not responsible for the privacy practices of these websites. We encourage you to review the privacy policy of any third-party site you visit.

Our website and products are intended solely for adults engaged in scientific or laboratory research. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Post a notice on our website for at least 30 days
• Where required by law, seek renewed consent

We encourage you to review this policy periodically. Continued use of our website following notice of changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, please contact our Privacy Officer:

You also have the right to contact the Office of the Privacy Commissioner of Canada directly:

• Website: priv.gc.ca
• Toll-free: 1-800-282-1376