Privacy Policy

Last updated: 29 September 2026

This Privacy Policy describes how Aura Peptide ("we," "us," or "our") collects, uses, and discloses information when you visit our website or use our services. We are committed to protecting your privacy and handling your data transparently. We do not sell your personal information, and we never have.

1. Personal information we collect

We collect the following categories of information:

  • Information you provide directly — name, email address, phone number (if you choose to provide it), shipping and billing address, payment information, and the contents of any messages you send us through the contact form.
  • Account and order information — order history, quoted products, batch records, and verification code lookups tied to your orders.
  • Automatically collected information — IP address (hashed before storage), browser type and version, device information, pages visited, referring URL, and timestamps. We use Cloudflare's network logs to capture the country of origin for each request.
  • Communications — any messages you exchange with our support team.

2. Sources of information

We collect information directly from you (when you submit a form, place an order, or contact us), automatically through your use of our website, and from our service providers (such as payment processors and shipping carriers) when needed to fulfill your requests.

3. How we use your personal information

We use the information we collect to:

  • Provide, operate, and maintain our website and services.
  • Process orders, verify products, and prevent fraud.
  • Respond to your inquiries and provide customer support.
  • Send transactional communications related to your orders (order confirmations, verification receipts, shipping notifications). These are essential to the service and are not opt-in marketing.
  • With your consent, send occasional product or research updates. You can unsubscribe at any time using the link in any marketing email.
  • Comply with applicable legal obligations and enforce our Terms of Service.
  • Generate aggregate, de-identified analytics about how our site is used.

4. How we disclose your personal information

We do not sell, rent, or trade your personal information. We disclose information only to the following categories of recipients, and only as needed:

  • Service providers — Cloudflare (hosting, edge network, security), payment processors, email delivery providers, and shipping carriers. Each provider is contractually obligated to protect your data.
  • Legal authorities — when required by law, court order, or to protect our legal rights.
  • Business transfers — if Aura Peptide is acquired or merged, your information may be transferred as part of that transaction, with the same protections applying.

5. Cookies and tracking

We use a minimal set of cookies and similar technologies:

  • Strictly necessary cookies — for the admin session (when you are logged in) and Cloudflare's security cookies (used to detect abuse and protect the site).
  • Analytics — we may use privacy-respecting analytics in the future. If enabled, it will be aggregated and not tied to individual users without consent.

You can block cookies through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to the admin panel and may break Cloudflare's abuse-prevention checks on the public forms.

6. Children's data

Our site is not directed at children. All purchasers must be at least 21 years of age. We do not knowingly collect personal information from anyone under 21. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

7. Data retention

We retain personal information only as long as needed for the purposes described in this policy, including:

  • Order records — for accounting, tax, and warranty purposes (typically 7 years).
  • Marketing contacts — until you unsubscribe.
  • Support correspondence — while your account is active and for a reasonable period after.
  • Validation logs — IP addresses are hashed immediately and retained in aggregated, de-identified form for fraud-prevention analytics.

8. Your rights and choices

Depending on where you live, you may have some or all of the following rights:

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — ask us to delete your personal information, subject to legal retention obligations.
  • Restriction or objection — limit or object to certain processing.
  • Portability — receive your data in a structured, commonly used format.
  • Withdraw consent — for any processing based on consent.

Under the California Consumer Privacy Act (CCPA), California residents have the rights to know, delete, and opt out of sale. We extend these rights to all customers regardless of location. To exercise any of these rights, contact us at the address below. We may verify your identity before acting on a request.

9. International transfers

Aura Peptide operates in the United States. If you are visiting from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from your home jurisdiction. By using our services you acknowledge this transfer.

10. Security

We take reasonable measures to protect your information, including HTTPS encryption in transit, hashed storage of IP addresses, hashed passwords (bcrypt), and signed session tokens. No system is perfectly secure, but we work continuously to minimize risk.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Material changes will be communicated through the website or via email where appropriate.

12. Contact

For any privacy-related questions, to exercise your rights, or to file a complaint, contact us at:

Aura Peptide — Privacy
Email: privacy@aurapeptide.example

← Back to home