Privacy policy

Who we are

Pure Peptide Co. ("we", "us", "our") supplies research peptides and laboratory consumables to researchers and institutions in Australia. This policy explains how we handle personal information, and applies to this website and to every order, enquiry and email that follows from it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If any part of this policy is unclear, contact us and we will explain it in plain terms.

What we collect

We only collect personal information we actually need to sell to you, ship to you and support you. Depending on how you use the site, that includes:

• Identity and contact details — your name, email address, phone number and delivery address, collected at checkout.
• Order information — what you bought, the batch numbers supplied, order value, and the delivery method and tracking reference.
• Enquiry information — anything you type into the contact form or an order-tracking lookup, including your message and any institution or order number you give us.
• Marketing preferences — whether you have opted in to batch-report and restock email, and whether you have since unsubscribed.
• Technical information — your IP address, browser and device type, pages visited and referring page, collected automatically by our hosting provider for security, fraud prevention and aggregate traffic reporting.

We do not collect sensitive information as that term is defined in the Privacy Act — we do not ask about your health, and you should not send us health information. We do not knowingly collect information from anyone under 18; the products we sell are not offered to minors.

Payment information

We never see or store your full card number. Card details are captured and processed by our PCI DSS compliant payment provider, and are transmitted directly to them. What we receive back is limited to the outcome of the transaction, the card brand and the last four digits, which we retain so we can identify a payment against an order and process refunds.

If you pay by bank transfer we will see the account name and reference that your bank includes with the payment.

How we use your information

We use personal information for the purpose you gave it to us for, and for directly related purposes you would reasonably expect. Specifically:

• To take, process, fulfil and ship your order, and to send the transactional email that goes with it — confirmation, dispatch and tracking.
• To publish and supply the independent lab report matching the batch you received.
• To answer your enquiries and provide support, including order tracking.
• To process returns, replacements and refunds.
• To send marketing email about new batch reports, restocks and products, where you have opted in.
• To detect and prevent fraud, misuse and security incidents, and to keep the site working.
• To meet our legal, tax and record-keeping obligations.

We do not sell your personal information, and we do not trade or rent it to anyone for their own marketing.

Who we share it with

We disclose personal information only to the service providers who help us run the business, and only so much as they need to do their job. These are:

• Payment processors, to take payment and process refunds.
• Couriers and freight partners, to deliver your order and provide tracking.
• Hosting, email and analytics providers, to run this website and send transactional and marketing email.
• Professional advisers — accountants, auditors and lawyers — where they need it to advise us.

We may also disclose personal information where we are required or authorised by law to do so, including to a court, regulator or law-enforcement agency, or where disclosure is necessary to prevent a serious threat to life, health or safety.

If our business is sold or restructured, customer records may transfer to the buyer as part of that transaction. We would notify you before your information became subject to a different privacy policy.

Overseas disclosure

Some of the providers above host data outside Australia — commonly in the United States and the European Union. Before disclosing personal information to an overseas recipient we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including through the contractual terms we hold with each provider.

If you would like to know where a specific category of your information is stored, ask us and we will tell you.

Marketing and how to opt out

We only send marketing email to people who have opted in — by ticking the batch-report checkbox at checkout, or subscribing in the footer. We do not add customers to marketing lists automatically because they placed an order.

Every marketing email carries a working unsubscribe link, and we action unsubscribes promptly. You can also reply to any marketing email, or write to us, and we will remove you. Unsubscribing from marketing does not stop transactional email — you will still receive order confirmations, dispatch notices and anything we are required to send about an order you placed.

Cookies and analytics

This site uses a small number of cookies and equivalent browser storage. Some are strictly necessary — they remember the contents of your cart and keep a checkout session together, and the site cannot work without them. Others support aggregate analytics, which tell us how many people visited a page rather than who they were.

You can block or delete cookies through your browser settings. If you block the strictly necessary ones, the cart and checkout will not work correctly.

How we protect it

The site is served over TLS, payment details go directly to our payment provider rather than through our systems, and access to order records is restricted to the people who need it to fulfil and support orders.

No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet. If we become aware of an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

How long we keep it

We keep order and transaction records for at least seven years, because Australian tax and business records law requires it. Enquiry correspondence is kept while it is useful for support and then deleted. Marketing records are kept until you unsubscribe, plus a suppression record so we do not email you again by mistake.

When personal information is no longer needed for any purpose for which it may lawfully be used, we destroy it or de-identify it.

Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong, out of date or incomplete. Email us and we will respond within 30 days.

We will need to verify your identity before releasing information. In rare cases we may refuse access — for example where it would unreasonably affect another person's privacy, or where we are required by law to withhold it. If we refuse, we will tell you why in writing and explain how to complain.

There is no fee to make a request. If a request is complex enough that we would need to charge for our time, we will tell you the cost before doing the work.

Complaints

If you think we have mishandled your personal information, contact us first. Tell us what happened and what you would like us to do. We will acknowledge your complaint within five business days and give you a written response within 30 days.

If you are not satisfied with our response, you can refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au, or by phone on 1300 363 992.

Changes to this policy

We update this policy when our practices change or the law does. The current version always lives at this address, and the date at the top of the page tells you when it last changed. If a change materially affects how we handle information you have already given us, we will tell you directly rather than rely on you re-reading this page.