Privacy Policy

Who we are

Central Coast Peptides is a business operated in Santa Maria, California, United States. When we say “we,” “us,” or “Central Coast Peptides” in this policy, we mean Central Coast Peptides. If you have any question about this policy or want to exercise any right described below, contact us at Support@centralcoastpeptides.com or (805) 259-2514.

Notice at Collection — categories of personal information we collect

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”), we are required to tell you, at or before the point of collection, what categories of personal information we collect, the business purposes we collect them for, and how long we keep them. The following is that notice.

• Identifiers — your name, shipping address, email address, and mobile phone number. Collected when you place an order, use our contact form, or sign up for our marketing program. Retained for up to 7 years after your last order to meet business, tax, and legal-record obligations.
• Commercial information — the products you looked at, added to cart, or ordered; order number; discount codes redeemed; payment method used; and notes you add to an order. Collected when you interact with the site or place an order. Retained for up to 7 years.
• Internet or other electronic network activity information — your IP address, browser type, device type, referring URL, and pages viewed on our site. Collected automatically when you use the site. Retained for up to 90 days in access logs; consent records that include an IP address are retained for as long as we retain the underlying consent.
• Geolocation information (coarse) — the approximate city and country derived from your IP address, and the shipping address you provide. We do not collect precise (GPS-level) location. Retained with the associated order or consent record.
• Marketing-consent records — if you opt in to our marketing program, we store your email, phone number, the exact wording of the consent language you agreed to, the page URL, the timestamp, and the IP address of your device at opt-in. Retained for as long as you remain opted in, plus at least 4 years after opt-out to defend against any Telephone Consumer Protection Act claim.
• Customer-communication content — the content of emails, texts, and phone calls you exchange with our support team. Retained for as long as needed to resolve your issue and generally not longer than 4 years.

We do not collect Social Security numbers, driver’s license numbers, financial account numbers, health information, biometric information, precise geolocation, race, religion, sexual orientation, or contents of your private communications with anyone other than us. We do not knowingly collect the personal information of anyone under 18.

Payment card information: when you pay by card, your card number, expiration date, and security code are entered directly into a secure form hosted by our payment processor, a PCI DSS Level 1 certified provider, on a dedicated payment page. That information never touches our servers. We receive only a payment confirmation and the last four digits of the card for reconciliation.

Sources of personal information

We collect personal information directly from you (when you fill out a form, place an order, or contact us), automatically from your device when you use the site (server logs, browser storage described below), and from our service providers (shipping status from carriers, payment confirmation from our payment processor).

How we use your information (business purposes)

We use the categories of personal information above only for the business purposes described here:

• to process and fulfill your orders, including verifying payment, arranging shipping, and communicating with you about your order;
• to send you transactional SMS and email notifications about the orders you place with us;
• to save a checkout you started and email you a reminder about it, or tell you when a product you asked about becomes available (see “Saved checkouts and reminders” below);
• to send you marketing SMS and email, but only if you have expressly opted in to our marketing program (see “Marketing SMS and email” below);
• to respond to your questions, complaints, and refund inquiries;
• to detect and prevent fraud, abuse of our discount codes, and unauthorized access to your account or our systems;
• to operate, secure, monitor, and improve our website;
• to comply with our legal obligations, including tax, recordkeeping, and law-enforcement responses; and
• to establish, exercise, or defend legal claims.

Sale or sharing of personal information — we do not do either

We do not sell your personal information. We do not receive money or other valuable consideration in exchange for disclosing personal information about you to anyone.

We do not share your personal information for cross-context behavioral advertising. We do not run Facebook/Meta, Google, TikTok, or other third-party advertising pixels on this site. We do not disclose your information to third parties so they can target ads to you elsewhere on the internet.

Because we do not sell or share personal information (as those terms are defined by the CCPA), we do not display a “Do Not Sell or Share My Personal Information” link. If we ever change this practice, we will update this policy first and provide the opt-out mechanism the law requires.

We have not sold or shared the personal information of any consumer, including any minor under 16, in the preceding 12 months.

Saved checkouts and reminders

When you type your email address into our checkout, or when you open the checkout on a device where you previously gave us your email (by placing an order or signing up for our discount), we save your cart and the details you have entered so far (name, phone number, delivery address, delivery method, and any discount code) so you can finish your order later. A saved checkout is closed when you place an order and is deleted if it sits unused for 30 days; closed records are deleted after 180 days.

If you do not finish an order, we may send you a reminder email about that cart, usually within a day or two, with a link back to your saved cart, and a member of our team may follow up by email or phone call to help you complete it. These cart reminders are separate from the marketing program below and are sent whether or not you opted in to marketing. Every reminder includes an unsubscribe link; once you use it (or email Support@centralcoastpeptides.com), we will not send you another cart or availability reminder.

If you ask to be told when a product becomes available, we use the email address you give only to send you that one notice.

Marketing SMS and email

If you opt in through our website popup, at checkout, or elsewhere, we will send you marketing text messages and marketing emails from Central Coast Peptides. The exact consent language shown at the point of opt-in, together with the timestamp, page URL, and your device’s IP address, is recorded and retained as described above so we can verify what you agreed to and when.

• Program name: Central Coast Peptides Marketing.
• Message frequency: approximately 4–8 marketing messages per month across SMS and email combined. Frequency may vary.
• Message and data rates: may apply, depending on your carrier and plan. Central Coast Peptides does not charge you for these messages.
• How to opt out of SMS: reply STOP to any marketing text at any time. We will send one final confirmation and no further marketing texts. Reply HELP for help, or email Support@centralcoastpeptides.com.
• How to opt out of marketing email: click the “unsubscribe” link in the footer of any marketing email, or email Support@centralcoastpeptides.com. We will process your request within 10 business days as required by the CAN-SPAM Act.
• Supported carriers: major U.S. carriers including AT&T, T-Mobile, Verizon, and their MVNOs. Carriers are not liable for delayed or undelivered messages.

Consent is not a condition of purchase. You may buy from Central Coast Peptides without agreeing to receive marketing messages.

Opting out of marketing SMS does not stop the transactional order-status texts described below — those go to any customer who provides a phone number at checkout, unless you also ask us in writing to stop.

We do not share your mobile phone number, email address, or marketing opt-in with any third party or affiliate for that third party’s own marketing or promotional purposes. Mobile information is used only to send you the messages described here and is disclosed only to the service providers that help us send them (see “Service providers” below).

Transactional SMS — order-status notifications

When you place an order, we may also send you transactional text messages to the mobile phone number you provided at checkout. These messages relate only to your order and include:

• an order received confirmation,
• a payment confirmed notification, and
• a shipping notification with tracking information.

Message frequency is approximately three (3) messages per order. Message and data rates may apply depending on your mobile carrier and plan.

You can stop transactional SMS by replying STOP to any message. Reply HELP for help. Opting out of SMS will not affect the processing or shipping of an order you have already placed; we will use email instead.

Cookies and browser storage

We do not use tracking cookies, analytics cookies, or advertising cookies. No third-party payment script runs on this site; card details are entered on a dedicated payment page instead.

We measure site traffic ourselves, without any third-party analytics service. Our own server counts page views, link clicks, and checkout visits in aggregate. This uses no cookies and stores no IP addresses; a short, anonymous identifier derived from your connection is rotated daily and cannot be used to identify you.

We do use your browser’s local storage on your device to remember useful information so the site works well for you. Nothing in browser storage is sent to any third party; it is transmitted to us only when you submit an order or a signup form. Specifically, we store on your device:

• your acknowledgement of our age & research-use verification (retained on your device for 30 days so you are not re-prompted on every page load);
• the contents of your shopping cart, so it is still there when you come back;
• if you have entered them, your name, phone number, email address, and shipping address, so we can pre-fill the checkout form for you next time;
• any discount code you have unlocked, so it applies automatically at checkout;
• a flag noting that our marketing sign-up popup has been shown to you, so it does not re-appear on every visit; and
• if you have visited /no-track, a flag asking us not to include this device in our own traffic counts.

You can clear this information at any time in your browser’s privacy settings. Clearing it will not delete anything we hold on our servers; to have us delete server-side records, use the “Your privacy rights” process below.

Service providers

We share personal information with a small number of service providers only to the extent necessary for them to perform services on our behalf. Each provider is bound by contract or by its own published terms to use the information only to provide the service and not for its own marketing:

• Cloudflare, Inc. — website hosting, DNS, and edge security.
• Fly.io — hosting for our order-management back end.
• Our payment processor — a PCI DSS Level 1 certified provider that captures and charges card details.
• Resend, Inc. — transactional and marketing email delivery.
• Our SMS provider — for transactional and marketing text messages.
• Pirate Ship and UPS — for label generation and package delivery.
• GitHub, Inc. — source-code hosting for the website and back-end.

Legal disclosures

We may disclose personal information when we believe in good faith it is required by law, court order, or subpoena, or is necessary to protect the rights, property, or safety of Central Coast Peptides, our customers, or others.

Your privacy rights (California and other U.S. states)

If you are a California resident (or a resident of another U.S. state with a comparable privacy law such as Colorado, Connecticut, Virginia, Utah, or Texas), you have the following rights over your personal information. We honor all of them regardless of which state you live in.

• Right to know what personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of third parties (service providers) we disclosed it to.
• Right to a copy (data portability) of the specific pieces of personal information we hold about you.
• Right to correct inaccurate personal information we hold about you.
• Right to delete personal information we hold about you, subject to legal exceptions (for example, we may need to keep certain order and tax records).
• Right to opt out of sale or sharing of your personal information. As explained above, we do not sell or share personal information, so there is nothing to opt out of, but if that ever changes we will provide the required opt-out.
• Right to limit the use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA, so there is nothing to limit.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or give you a lower level of service because you exercised any of these rights.
• Right to withdraw consent to marketing SMS or marketing email at any time, using the opt-out methods described above.

How to exercise a right. Email Support@centralcoastpeptides.com or call (805) 259-2514. Please include enough information for us to verify your identity (for example, the email address or phone number you used at Central Coast Peptides, and an order number if you have one). We will respond within 45 days as required by law, or tell you why we need up to 45 additional days.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require the agent’s written permission from you and may still contact you directly to confirm the request.

Metrics. In the preceding 12 months we received fewer than 20 requests to know, correct, or delete personal information; the median response time was under 10 business days.

European Economic Area, United Kingdom, and Switzerland

Central Coast Peptides is based in the United States and does not target customers in the European Economic Area, the United Kingdom, or Switzerland. If you nevertheless provide us your personal information from one of those regions, we will process it only for the purposes described in this policy, and you may exercise the rights described under “Your privacy rights” above (which mirror the core rights under the EU / UK GDPR). Contact Support@centralcoastpeptides.com.

Data security

We use industry-standard technical safeguards to protect your personal information, including TLS/HTTPS for all traffic to the site, HTTP Strict Transport Security, strict content-security controls, encrypted storage in our hosting providers, and access controls that limit who inside Central Coast Peptides can see order data. Card payments are handled entirely by our payment processor in a PCI DSS Level 1 environment; card numbers, expiration dates, and security codes never touch our servers. No system is perfectly secure, but we work hard to protect the information you give us.

Data retention

We keep each category of personal information only as long as we need it, as described in “Notice at Collection” above. When we no longer need a record, we delete or de-identify it. Marketing-consent records are intentionally retained for at least 4 years after opt-out because U.S. law (in particular the Telephone Consumer Protection Act) has a 4-year statute of limitations and we need to be able to prove what you agreed to and when.

Children

Our site and products are intended for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always posted at /privacy-policy and applies from the effective date shown at the top. If we make a material change — for example, if we begin selling or sharing personal information, or begin using third-party advertising trackers — we will provide additional notice before the change takes effect.

Contact us

Questions about this policy, or want to exercise any right described above? Email Support@centralcoastpeptides.com or call (805) 259-2514. Written correspondence: Central Coast Peptides, Santa Maria, California, United States.