Privacy Policy

Who we are

CC Peptides is a brand of Central Coast Peptides, a business operated in Santa Maria, California, United States. When we say “we,” “us,” or “CC Peptides” in this policy, we mean Central Coast Peptides doing business as CC Peptides. If you have any question about this policy or want to exercise any right described below, contact us at Support@centralcoastpeptides.com or (805) 259-2514.

Notice at Collection — categories of personal information we collect

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”), we are required to tell you, at or before the point of collection, what categories of personal information we collect, the business purposes we collect them for, and how long we keep them. The following is that notice.

• Identifiers — your name, shipping address, email address, and mobile phone number. Collected when you place an order, use our contact form, or sign up for our marketing program. Retained for up to 7 years after your last order to meet business, tax, and legal-record obligations.
• Commercial information — the products you looked at, added to cart, or ordered; order number; discount codes redeemed; payment method used; and notes you add to an order. Collected when you interact with the site or place an order. Retained for up to 7 years.
• Internet or other electronic network activity information — your IP address, browser type, device type, referring URL, and pages viewed on our site. Collected automatically when you use the site. Retained for up to 90 days in access logs; consent records that include an IP address are retained for as long as we retain the underlying consent.
• Geolocation information (coarse) — the approximate city and country derived from your IP address, and the shipping address you provide. We do not collect precise (GPS-level) location. Retained with the associated order or consent record.
• Marketing-consent records — if you opt in to our marketing program, we store your email, phone number, the exact wording of the consent language you agreed to, the page URL, the timestamp, and the IP address of your device at opt-in. Retained for as long as you remain opted in, plus at least 4 years after opt-out to defend against any Telephone Consumer Protection Act claim.
• Customer-communication content — the content of emails, texts, and phone calls you exchange with our support team. Retained for as long as needed to resolve your issue and generally not longer than 4 years.

We do not collect Social Security numbers, driver’s license numbers, financial account numbers, health information, biometric information, precise geolocation, race, religion, sexual orientation, or contents of your private communications with anyone other than us. We do not knowingly collect the personal information of anyone under 18.

Payment card information: when you pay by card, your card number, expiration date, and security code are entered directly into a secure form hosted by our payment processor, Stripe, Inc. That information never touches our servers. We receive only a payment confirmation and the last four digits of the card for reconciliation.

Sources of personal information

We collect personal information directly from you (when you fill out a form, place an order, or contact us), automatically from your device when you use the site (server logs, browser storage described below), and from our service providers (shipping status from carriers, payment confirmation from Stripe).

How we use your information (business purposes)

We use the categories of personal information above only for the business purposes described here:

• to process and fulfill your orders, including verifying payment, arranging shipping, and communicating with you about your order;
• to send you transactional SMS and email notifications about the orders you place with us;
• to send you marketing SMS and email, but only if you have expressly opted in to our marketing program (see “Marketing SMS and email” below);
• to respond to your questions, complaints, and refund inquiries;
• to detect and prevent fraud, abuse of our discount codes, and unauthorized access to your account or our systems;
• to operate, secure, monitor, and improve our website;
• to comply with our legal obligations, including tax, recordkeeping, and law-enforcement responses; and
• to establish, exercise, or defend legal claims.

Sale or sharing of personal information — we do not do either

We do not sell your personal information. We do not receive money or other valuable consideration in exchange for disclosing personal information about you to anyone.

We do not share your personal information for cross-context behavioral advertising. We do not run Facebook/Meta, Google, TikTok, or other third-party advertising pixels on this site. We do not disclose your information to third parties so they can target ads to you elsewhere on the internet.

Because we do not sell or share personal information (as those terms are defined by the CCPA), we do not display a “Do Not Sell or Share My Personal Information” link. If we ever change this practice, we will update this policy first and provide the opt-out mechanism the law requires.

We have not sold or shared the personal information of any consumer, including any minor under 16, in the preceding 12 months.

Marketing SMS and email

If you opt in through our website popup, at checkout, or elsewhere, we will send you marketing text messages and marketing emails from CC Peptides. The exact consent language shown at the point of opt-in, together with the timestamp, page URL, and your device’s IP address, is recorded and retained as described above so we can verify what you agreed to and when.

• Program name: CC Peptides Marketing.
• Message frequency: approximately 4–8 marketing messages per month across SMS and email combined. Frequency may vary.
• Message and data rates: may apply, depending on your carrier and plan. CC Peptides does not charge you for these messages.
• How to opt out of SMS: reply STOP to any marketing text at any time. We will send one final confirmation and no further marketing texts. Reply HELP for help, or email Support@centralcoastpeptides.com.
• How to opt out of marketing email: click the “unsubscribe” link in the footer of any marketing email, or email Support@centralcoastpeptides.com. We will process your request within 10 business days as required by the CAN-SPAM Act.
• Supported carriers: major U.S. carriers including AT&T, T-Mobile, Verizon, and their MVNOs. Carriers are not liable for delayed or undelivered messages.

Consent is not a condition of purchase. You may buy from CC Peptides without agreeing to receive marketing messages.

Opting out of marketing SMS does not stop the transactional order-status texts described below — those go to any customer who provides a phone number at checkout, unless you also ask us in writing to stop.

We do not share your mobile phone number, email address, or marketing opt-in with any third party or affiliate for that third party’s own marketing or promotional purposes. Mobile information is used only to send you the messages described here and is disclosed only to the service providers that help us send them (see “Service providers” below).

Transactional SMS — order-status notifications

When you place an order, we may also send you transactional text messages to the mobile phone number you provided at checkout. These messages relate only to your order and include:

• an order received confirmation,
• a payment confirmed notification, and
• a shipping notification with tracking information.

Message frequency is approximately three (3) messages per order. Message and data rates may apply depending on your mobile carrier and plan.

You can stop transactional SMS by replying STOP to any message. Reply HELP for help. Opting out of SMS will not affect the processing or shipping of an order you have already placed; we will use email instead.

Cookies and browser storage

We do not use tracking cookies, analytics cookies, or advertising cookies. The only third-party script loaded on our site is the Stripe.js library on the checkout page, which is required to process card payments.

We do use your browser’s local storage on your device to remember useful information so the site works well for you. Nothing in browser storage is sent to any third party; it is transmitted to us only when you submit an order or a signup form. Specifically, we store on your device:

• your acknowledgement of our age & research-use verification (retained on your device for 30 days so you are not re-prompted on every page load);
• the contents of your shopping cart, so it is still there when you come back;
• if you have entered them, your name, phone number, email address, and shipping address, so we can pre-fill the checkout form for you next time;
• any discount code you have unlocked, so it applies automatically at checkout; and
• a flag noting that our marketing sign-up popup has been shown to you, so it does not re-appear on every visit.

You can clear this information at any time in your browser’s privacy settings. Clearing it will not delete anything we hold on our servers; to have us delete server-side records, use the “Your privacy rights” process below.

Service providers

We share personal information with a small number of service providers only to the extent necessary for them to perform services on our behalf. Each provider is bound by contract or by its own published terms to use the information only to provide the service and not for its own marketing:

• Cloudflare, Inc. — website hosting, DNS, and edge security.
• Fly.io — hosting for our order-management back end.
• Stripe, Inc. — card payment processing.
• Resend, Inc. — transactional and marketing email delivery.
• Our SMS provider — for transactional and marketing text messages.
• Pirate Ship and our shipping carriers (USPS, UPS, etc.) — for label generation and package delivery.
• GitHub, Inc. — source-code hosting for the website and back-end.

Legal disclosures

We may disclose personal information when we believe in good faith it is required by law, court order, or subpoena, or is necessary to protect the rights, property, or safety of CC Peptides, our customers, or others.

Your privacy rights (California and other U.S. states)

If you are a California resident (or a resident of another U.S. state with a comparable privacy law such as Colorado, Connecticut, Virginia, Utah, or Texas), you have the following rights over your personal information. We honor all of them regardless of which state you live in.

• Right to know what personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of third parties (service providers) we disclosed it to.
• Right to a copy (data portability) of the specific pieces of personal information we hold about you.
• Right to correct inaccurate personal information we hold about you.
• Right to delete personal information we hold about you, subject to legal exceptions (for example, we may need to keep certain order and tax records).
• Right to opt out of sale or sharing of your personal information. As explained above, we do not sell or share personal information, so there is nothing to opt out of, but if that ever changes we will provide the required opt-out.
• Right to limit the use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA, so there is nothing to limit.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or give you a lower level of service because you exercised any of these rights.
• Right to withdraw consent to marketing SMS or marketing email at any time, using the opt-out methods described above.

How to exercise a right. Email Support@centralcoastpeptides.com or call (805) 259-2514. Please include enough information for us to verify your identity (for example, the email address or phone number you used at CC Peptides, and an order number if you have one). We will respond within 45 days as required by law, or tell you why we need up to 45 additional days.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require the agent’s written permission from you and may still contact you directly to confirm the request.

Metrics. In the preceding 12 months we received fewer than 20 requests to know, correct, or delete personal information; the median response time was under 10 business days.

European Economic Area, United Kingdom, and Switzerland

CC Peptides is based in the United States and does not target customers in the European Economic Area, the United Kingdom, or Switzerland. If you nevertheless provide us your personal information from one of those regions, we will process it only for the purposes described in this policy, and you may exercise the rights described under “Your privacy rights” above (which mirror the core rights under the EU / UK GDPR). Contact Support@centralcoastpeptides.com.

Data security

We use industry-standard technical safeguards to protect your personal information, including TLS/HTTPS for all traffic to the site, HTTP Strict Transport Security, strict content-security controls, encrypted storage in our hosting providers, and access controls that limit who inside CC Peptides can see order data. Card payments are handled entirely by Stripe in a PCI DSS Level 1 environment; card numbers, expiration dates, and security codes never touch our servers. No system is perfectly secure, but we work hard to protect the information you give us.

Data retention

We keep each category of personal information only as long as we need it, as described in “Notice at Collection” above. When we no longer need a record, we delete or de-identify it. Marketing-consent records are intentionally retained for at least 4 years after opt-out because U.S. law (in particular the Telephone Consumer Protection Act) has a 4-year statute of limitations and we need to be able to prove what you agreed to and when.

Children

Our site and products are intended for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always posted at /privacy-policy and applies from the effective date shown at the top. If we make a material change — for example, if we begin selling or sharing personal information, or begin using third-party advertising trackers — we will provide additional notice before the change takes effect.

Contact us

Questions about this policy, or want to exercise any right described above? Email Support@centralcoastpeptides.com or call (805) 259-2514. Written correspondence: CC Peptides, Santa Maria, California, United States.