Privacy Policy

Send privacy questions and requests to support@optimumregenpeptides.com.

2.1 Information you give us

• Checkout: your name, email address, phone number (optional) and shipping address. We also record whether you chose shipping or in-store pickup, any coupon code, and whether you used store credit.
• In-store and phone orders: when our staff enter an order for you, they record your name, email address and the items you bought, plus your shipping address and phone number if we ship the order.
• Your customer account: we create an account record for your email address automatically when you submit an order at checkout (even if the payment does not go through), when our staff enter an order for you, and when you sign up for our emails, enter a raffle, or complete our in-store intake form. You do not have to sign up, and we do not send a separate email when this happens. The record can include your name, how the account was created, and your rewards preference. If you set a password, for example when you apply to our affiliate program, our sign-in provider handles your login.
• Email sign-up: your email address, and your name if you give it.
• Raffles: your name, email address, a phone number and text-message consent if you choose to give them, and any referral code.
• Appointments: your name, email address, phone number (optional), the time you choose, the reason for the visit, and any notes you add.
• Back-in-stock alerts: your email address and the product you want to hear about.
• Contact and wholesale inquiries: your name, email address, phone number, business name, business type, expected volume and message. These forms are sent by email to our support inbox. They are not saved in our customer database.
• Affiliate program: your account email, your name or handle, how you plan to promote us, and your payout method (PayPal, Venmo, Cash App or Zelle) with the handle, phone number or email address for that method.
• Customer support and refund claims: anything you send us, such as order numbers and photos we ask for to check a claim.
• Past product reviews: we no longer take reviews on our website. For reviews sent in the past, we keep the name, rating, product, review text and email address that came with each review, and whether it was marked as a verified purchase.

2.2 In-store intake and waiver

In our store and at events, we may ask you to fill in an intake form and waiver on a tablet. It collects:

• your email address, full legal name, date of birth, age, phone number and address
• your ID type, ID number and ID expiration date
• an emergency contact (name, relationship and phone number)
• your answers to the certification checkboxes and agreements, your initials, printed name and signature
• where you signed and which staff member helped you

Our staff check your physical ID by eye. We do not take a photo or copy of your ID.

2.3 Your customer profile and business information

We keep a profile for each customer. Some of it you give us and some of it our staff enter. It may include:

• Customer type, assigned by our staff: Individual, Wholesale, Family & Friends, or Affiliate.
• Organization or business name.
• Wholesale status.
• Tax-exempt status: yes or no, which staff member checked it, and when. We do not keep a copy of your tax-exemption certificate in your profile.
• How you heard about us, and how you prefer to be contacted.
• Internal staff notes and tags, the staff member assigned to your account, and follow-up dates.
• A log of the changes staff make to your profile.

Staff can also add notes and tags to individual orders.

2.4 Information collected automatically

• Device and browser information:
  • your browser and operating system, device type, and screen and window size
  • your time zone, language setting and connection type
  • when you place an order, your browser's full user-agent string
• Approximate location: our hosting provider looks up your city, region, country and approximate map coordinates from your IP address. We record this with your activity on our site. On orders, we record the city, region and country.
• IP address:
  • We store your IP address with each order, to prevent fraud and handle payment disputes.
  • We store it with password-reset requests, to limit repeated attempts.
  • We store it with logins to our dropship partner portal.
  • For raffle entries, we store a hashed version of your IP address instead of the address itself.
  • We do not store your IP address with general browsing activity.
• Activity on our site:
  • the pages and products you view, items you add to your cart, searches and checkout steps
  • how far you scroll and how long you stay
  • the website that referred you, the page you arrived on, and campaign tags in the link
  • technical error reports and page-speed measurements
  • if you leave checkout without ordering, the name of the last checkout field you used (not what you typed in it)
• A browsing ID: we store a random ID in your browser that does not expire. It lets us connect visits from the same browser. We also store it with orders you place on our website, so that we can connect each order to the visits that led to it.
• Linking your browsing to you: we connect your browser's ID to your name and email address in any of these cases:
  • you enter your email address at checkout, or your browser fills it in for you. This happens before you place the order.
  • you submit an order at checkout, even if the payment does not go through. We link the browser you used to the name and email address on the order.
  • you sign up for our email list or our first-order discount
  • you ask for a back-in-stock alert
  • you are signed in

  Once connected, later activity from that browser is recorded with your name and email address, and activity it recorded earlier may also be linked to you.

• Your saved cart: when you add items to your cart, we save the items, sizes, quantities, prices and any coupon on our servers with your browser's ID, so that we can restore your cart from a link. If your browser is linked to your email address, your saved cart is linked to it too.
• Marketing attribution: if you arrived through a referral link, an affiliate link or one of our email campaigns, we record that. We also record the Google Analytics identifier in your browser, and whether you had opted out of targeted advertising (Section 6). We store these with your order.
• Email activity: our marketing and automated emails contain a small tracking image and tracked links. These tell us whether you opened an email and which links you clicked. Our email provider also tells us whether an email was delivered, bounced, or was marked as spam.

2.5 Information from partners and other sources

• Dropship partners: some partners sell our products to their own customers. For those orders, the partner sends us the customer's name, email address, phone number and shipping address so that we can ship the order.
• Partner mailing lists: we may receive your name and email address from partners whose opt-in lists you joined. We store only your name and email address, with a record of which list you came from, where you gave your consent, and when we added you.
• Payment processors: whether your payment was approved or declined, and related transaction details.
• Shipping: tracking status updates for your shipment.
• Public reviews: we show reviews that people posted publicly on Google, including the reviewer's name as it appears on Google.

Our peptide products are sold for research use only. They are not for human or animal consumption. We do not give medical advice.

We do not ask for health or medical information, and we ask that you not send it to us in messages, appointment notes or other forms.

• Orders: to take payment, ship your order or prepare it for pickup, and send order confirmations and other messages about your orders. Our order confirmation email includes a map image of the delivery address.
• Your account: to run your account and to track rewards, store credit, and referral and affiliate credit.
• Customer service: to answer questions, schedule and confirm appointments, handle refund and damage claims, and respond to wholesale and business inquiries.
• Business relationships: to manage wholesale, business and program accounts using your customer type, wholesale and tax-exempt status, staff notes and follow-ups.
• Marketing email (see Section 7):
  • newsletters and email campaigns
  • automated emails: back-in-stock alerts you asked for, reorder reminders, messages to past customers, requests to review us on Google, reminders about items you left in your cart, and reminders about orders you did not finish paying for or payments that were declined
  • we may choose who receives a campaign based on purchase history and whether they opened or clicked our recent emails
• Text-message sign-ups: to keep a record of your consent. We do not currently send text messages (see Section 7).
• Raffles: to record entries, pick winners and run the live draw page.
• Analytics and advertising measurement: to understand how visitors use our site and to measure the results of our marketing (see Section 5).
• Fraud prevention and security:
  • to review orders, using the IP address, browser, browsing ID and location recorded with them
  • to respond to payment disputes and chargebacks
  • to limit repeated password-reset attempts
  • to check age and identity at in-store intake
• Legal and business records: to keep records, comply with legal obligations, enforce our terms and handle disputes.

Cookies we set

orp_disclaimer_accepted

Remembers that you accepted our research-use-only notice

How long: 365 days

orp_ref

Remembers a referral code from a referral link

How long: 30 days

orp_aff

Remembers an affiliate code from an affiliate link

How long: 30 days

orp_ec

Remembers which of our email campaigns you clicked through from

How long: 30 days

orp_processor

Sends a retry to a different payment option after a declined payment

How long: 1 hour

orp_ad_optout

Remembers that you opted out of targeted advertising (Section 6)

How long: 365 days

Sign-in cookies

Set by our sign-in provider to keep you signed in

How long: Up to 400 days, or until you sign out

ds_partner

Dropship partner portal login (partners only)

How long: 7 days

ds_docs

Access to dropship partner documentation (partners only)

How long: 30 days

Information stored in your browser

• Local storage (stays until you clear it):
  • your browsing ID
  • your email address, and your name if you gave it, once you enter your email address at checkout, sign up for our email list or first-order discount, ask for a back-in-stock alert or sign in (Section 2.4)
  • your cart and coupon
  • offers and pop-ups you dismissed
  • details of a purchase in progress
  • on our in-store tablet only, its unlock state
• Session storage (cleared when you close the tab):
  • the page you arrived on, the referring website and campaign tags
  • checkout progress and technical reload markers

Third-party tools on our site

• Google Analytics and TikTok. As of October 11, 2026, we have disabled Google Analytics and TikTok tracking on our website, including browser tags and server-side purchase conversions. We no longer send page views, product views, cart activity, checkout activity or purchase records through these integrations, including hashed customer email. This does not remove information already received by these companies before tracking was disabled.
• Mapbox. The map image on our homepage loads from Mapbox, so Mapbox receives your IP address and browser information.
• Google Maps. Our appointment booking page shows an embedded Google Map, so Google receives your IP address and browser information.

Depending on their own settings, these providers may collect more information than we describe here.

The map tools load automatically on the pages where they are used. Google Analytics and TikTok tracking are disabled for all visitors, regardless of their opt-out setting. We do not currently show a cookie consent banner.

Our emails. Our emails load fonts from Google, and some of our marketing emails load a map image directly from Mapbox. When your email app displays these emails, Google and Mapbox may receive your IP address and device information.

Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of your personal information for targeted advertising (Section 6). Our site does not respond to Do Not Track signals.

Tracking across other websites. Third-party tools that remain in use, such as the map tools described above, may collect information under their own privacy policies. Our Google Analytics and TikTok tracking integrations are disabled.

Your choices.

• You can opt out of targeted advertising on our Your privacy choices page (Section 6).
• You can block or delete cookies in your browser settings.
• Clearing this site's stored data in your browser removes your browsing ID and the name and email saved there.
• Google offers a browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout).

Blocking cookies may stop parts of the site, such as sign-in and your cart, from working.

• Payment processors. You enter your card or other payment details on the payment company's own page or payment window, and we do not receive your full card number.
  • CentryOS: we send your shipping address, a summary of the products in your order, the amount and the order number.
  • EasyProcess (IDEM): we send your name, a per-order version of your email address, your phone number, address, the amount and the order number.
  • Arcana Payments: we send your name, email address, phone number, shipping address (for shipped orders) and the amount. Arcana Payments keeps these details for its own payment records and does not pass them to its card processor.
  • ByteNFT: used, for example, when you choose a different way to pay after a declined payment. We send your name, email address, IP address, billing address, the amount and the order number.
• Email provider (Resend).
  • Resend sends our emails, so it receives your email address and the full content of every email we send you. For orders, that includes your name, items and shipping address.
  • When you sign up for our emails or enter a raffle with our online free entry form, your name and email address are added to a mailing list held by Resend.
  • Contact and wholesale inquiry forms reach our inbox through Resend.
• Website hosting and database.
  • Vercel hosts our website and processes every visit, including your IP address and browser information.
  • Supabase stores our customer, order and activity records and runs account sign-in.
• Shipping.
  • Shippo buys our shipping labels, so it receives your name, shipping address, email address and phone number (if you gave one). It also receives tracking numbers and carrier names so that we can update shipment status.
  • The carrier that delivers your order receives your name and shipping address, and may receive your phone number or email address for delivery updates.
• Maps.
  • When you use address search at checkout, we send the address text you type to Mapbox for suggestions. You can enter your address manually instead. We also send your shipping address to Mapbox to draw the map in your order confirmation email.
  • Mapbox and Google also receive information from visitors to our site and from people who open our emails, as described in Section 5.
• Analytics and advertising. Google Analytics and TikTok tracking are disabled as of October 11, 2026 (Section 5). ORP continues to use its own website activity and order records.
• Notifications to our staff. Alerts about new orders and pickups go to our staff's devices. They include the customer's name, the order total and the items. They are delivered through the notification service built into each staff member's web browser.
• Dropship partners. For orders a partner sends us, we send the partner back the order number, the partner's own reference and the tracking number.
• Affiliate payout services. If you are an affiliate, the service you chose (PayPal, Venmo, Cash App or Zelle) receives your handle and the payout amount.
• Legal and disputes. We may disclose information when the law requires it. We may also give order details, and the IP address and device information recorded with an order, to a payment processor to respond to a payment dispute or chargeback.

Targeted advertising and how to opt out

We have disabled our Google Analytics and TikTok browser tags and server-side purchase conversions for all visitors. You do not need to opt out to receive this protection. We continue to save your targeted-advertising privacy choice and honor Global Privacy Control. We do not sell personal information for money.

• To opt out, turn on “Do not sell or share my personal information for targeted advertising” on our Your privacy choices page. It is linked in our site footer.
• We also treat a Global Privacy Control signal from your browser as an opt-out, with no further steps.
• Google Analytics and TikTok tracking remain disabled whether your opt-out setting is on or off. We do not send purchase conversions to either service.
• We save your choice in a cookie in your browser. If you use another browser or device, or clear your cookies, you need to opt out again, unless your browser sends Global Privacy Control.
• Your opt-out choice does not change ORP's own website analytics, order processing or the other service-provider sharing described in this section.

Email

• Our newsletters, campaigns and automated promotional emails include an unsubscribe link. These include reorder reminders, messages to past customers, review requests and back-in-stock alerts.
• Our campaign emails also support one-click unsubscribe in email apps that offer it.
• After you unsubscribe, our systems leave your address out of future marketing emails and out of reminders about unpaid orders and declined payments.
• We also stop these emails if your address bounces or you mark one of our emails as spam.
• You can also email support@optimumregenpeptides.com to unsubscribe.
• You will still receive emails about your orders.

Text messages

• We do not currently send text messages.
• If you opt in to text messages, for example on a raffle entry, we record your phone number, your email address if you give it, the consent wording you agreed to, where you agreed, and when.
• If we start sending text messages, they will be recurring automated marketing messages, and message frequency will vary. Consent is not a condition of any purchase. Message and data rates may apply.
• You can withdraw your consent at any time by emailing support@optimumregenpeptides.com. Once we send text messages, you will also be able to reply STOP to opt out. We record when you opt out.
• If we start sending text messages, our text-messaging provider will receive your phone number and the message content.

• Raffles. Our live draw page shows entrants' and winners' email addresses in masked form (the first two characters and the domain, for example ab••@example.com). Anyone can see this page.
• Affiliate leaderboard. Signed-in users of our site can see the first name and last initial (or one-word name or handle) and earnings of our top-earning affiliates.
• Affiliates. Affiliates can see the total, status and date of orders credited to them. They cannot see who the buyer is.
• Our staff.
  • Our staff can see customer records, orders, appointments and in-store intake records, including ID numbers and signatures.
  • Staff can see affiliate names and codes. Affiliate earnings, payout details and raffle entries are limited to our managers.

We have not set fixed deletion dates for most of the information we hold. We keep customer, order, intake and site activity records until we delete them or you ask us to (Section 11). In particular:

• We keep signed in-store waivers even if the related customer account is removed.
• We keep unsubscribe, bounce and spam-complaint records so that we keep honoring them.
• If an order is refunded, we remove the raffle entries that order earned.
• We keep back-in-stock requests after we send the alert.

• Our website uses encrypted (HTTPS) connections.
• You enter card details on our payment processors' pages or payment windows. We do not receive or store your full card number.
• Our admin tools require a staff sign-in.
• Customers can view their own orders when signed in, or by entering an order number together with the email address on that order.
• The companies that host our website and database, and the people who maintain and develop our systems for us, can also access these records.

No website or storage system is completely secure, and we cannot guarantee the security of your information.

You can email support@optimumregenpeptides.com to ask us to:

• give you a copy of the personal information we have about you
• correct information that is wrong
• delete your information
• stop sending you marketing messages

We do not offer self-service deletion on the website, so please email us. We may ask for information to confirm your identity before we act on a request. We may keep some records after a deletion request where we need them for business records, legal obligations or disputes, for example orders and signed waivers.

Depending on where you live, your state's law may give you more rights, such as the right to opt out of targeted advertising or the sale or sharing of personal information, and to appeal our decision on a request. You can opt out of targeted advertising at any time on our Your privacy choices page or with Global Privacy Control (Section 6).

To make a request under your state's law, including an appeal of our decision, email support@optimumregenpeptides.com.

You must be 21 or older to use our website or buy from us online. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us information, contact us at support@optimumregenpeptides.com.

We may update this policy. When we do, we will post the new version on this page and change the effective date at the top.