PeptideAnalysis.co

Privacy Policy

Draft prepared 4 July 2026 · pending final legal review before public launch.

This document is a pre-launch draft. Bracketed items — the data controller entity and its transfer basis — are placeholders to be confirmed by counsel before public launch.

1. Who we are

This policy explains how [Operating Entity] (“we”, “us”, “our”), the operator of PeptideAnalysis.co, handles personal information. It covers the Site and the testing service. For questions, contact support@peptideanalysis.co.

2. What we collect

  • Account and contact details — such as your email address and password hash if you create an account.
  • Order details — the package, testing region, and the sample and peptide information you enter (peptide name, claimed amount, batch, and any notes).
  • Payment reference — the cryptocurrency transaction hash you submit. We do not collect card numbers or bank details.
  • Sample records — receipt photos and custody timestamps created when we handle your sample.
  • Communications — messages you send us.
  • Technical data — standard server logs (such as IP address and request metadata) needed to operate and secure the Site.

3. How we use it

We use this information to provide the Service: to process orders, route and track samples, coordinate testing, produce and publish certificates, communicate with you, take payment, and prevent fraud and abuse. We also use it to meet legal obligations and to operate and improve the Site.

4. How your information is shared — and minimized

We keep identity and sample deliberately separate. Our partner laboratories receive your sample under a blind ID and do not receive your name, contact details, or the seller's identity. Beyond that, we share information only with:

  • Service providers that host the Site, store files, and send our email, acting on our instructions.
  • Public blockchains — note that cryptocurrency payments are recorded on a public ledger outside our control.
  • Authorities, where we are legally required to disclose information.

We do not sell your personal information or use third-party advertising trackers.

5. What appears on public certificates

When you choose a public result, the published certificate shows testing information — such as the verification code, peptide name, batch, methods, and result. It does not show your name, account, contact details, or our internal blind sample ID. If you choose a private result, it is not listed in the public archive at all. Because published certificates are immutable, treat the decision to publish as permanent.

6. Cookies and analytics

We use only essential cookies required for the Site to function, such as session and security (CSRF) tokens. We do not use advertising cookies. If we add analytics, we will use a privacy-respecting, cookieless approach and update this policy before doing so.

7. Retention

Published certificates and their underlying records are retained indefinitely as part of a permanent, immutable verification archive. Other information is kept for as long as needed to provide the Service, resolve disputes, and meet legal obligations, and then deleted or anonymized.

8. Security

We protect information in transit with encryption, restrict access to sample and order records, and store evidence files (such as receipt photos) with access controls. No system is perfectly secure, but we work to protect your information appropriately.

9. International transfers

Operating an international testing service means information may be processed in countries other than yours, including the testing region you select. Where required, we rely on appropriate safeguards for such transfers [transfer mechanism to be confirmed].

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may object to or restrict certain processing. Note that published certificates are part of a permanent public record and generally cannot be altered or withdrawn, though the personal information linked to your account can be handled separately. To make a request, email support@peptideanalysis.co.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their information.

12. Changes

We may update this policy from time to time. Material changes will be posted here with a new date.