1. What we collect
| Identity & contact | Name, email, phone number, institution or research entity. |
|---|---|
| Delivery | Shipping and billing addresses. |
| Order | Products ordered, quantities, order history, correspondence with our team. |
| Eligibility | Any documentation you provide to verify your research entity or professional status. |
| Technical | IP address, browser type, device type, and pages visited. |
| Payment | Handled entirely by our payment provider. We never see, receive or store full card numbers. |
2. Why we collect it
- To fulfil your order — process payment, verify eligibility, pack, ship and provide support. Legal basis: performance of a contract.
- To meet legal obligations — retain records for tax, customs and regulatory purposes, and verify that supply is lawful. Legal basis: legal obligation.
- To operate and secure the site — prevent fraud, diagnose faults, and understand aggregate usage. Legal basis: legitimate interests.
- To send batch and product notices — only if you have opted in, and you can withdraw at any time. Legal basis: consent.
We do not sell personal data, and we do not share it with advertisers or data brokers.
3. Who we share it with
- Payment processors — to take payment. They act as independent controllers for card data.
- Couriers — name, address and phone number, to deliver your order.
- Customs authorities — the declarations required by law for international shipments.
- Professional advisers and regulators — where we are legally required to disclose, or must do so to establish or defend a legal claim.
Processors act on our instructions under contract and may not use your data for their own purposes.
4. Cookies
This site uses the minimum practical set. Strictly necessary storage keeps your cart contents in your browser's localStorage and your in-progress order in sessionStorage — neither is transmitted to us, and both can be cleared at any time through your browser settings.
We do not use advertising or cross-site tracking cookies. Where optional analytics are enabled, they are loaded only after consent and can be declined without affecting your ability to use the site.
5. How long we keep it
| Order and transaction records | 7 years, as required by tax and customs law. |
|---|---|
| Eligibility documentation | Duration of the account relationship plus 2 years. |
| Support correspondence | 3 years from last contact. |
| Marketing consent records | Until you withdraw consent, plus 2 years as proof it was given. |
| Technical logs | 12 months. |
6. Your rights
Depending on where you live you may have the right to: access the data we hold about you; correct inaccurate data; request erasure; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time.
To exercise any of these, email research@gladiatorpeptides.com. We respond within 30 days. Note that we cannot delete records we are legally required to retain — order and transaction records in particular — but we will restrict their use to that legal purpose.
If you are in the EU or UK you may also lodge a complaint with your national data protection authority. If you are a California resident you have rights under the CCPA including the right to know, delete and opt out of sale — we do not sell personal information.
7. Security
Data is transmitted over TLS and stored on access-controlled systems with encryption at rest. Access is limited to staff who need it for their role. Payment card data never reaches our systems. We hold eligibility documentation separately from general order records.
No system is perfectly secure. Where a breach is likely to result in a risk to your rights, we notify affected individuals and the relevant supervisory authority within the periods the law requires.
8. International transfers
We operate from the United States. If you order from outside the US, your data is transferred there and to the courier and customs authorities involved in your shipment. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.
9. Children
This site is not directed at anyone under 21, and no product may be sold to anyone under that age. We do not knowingly collect data from minors and delete any such data on discovery.
10. Changes
We may update this policy. Material changes are announced on this page with a revised effective date, and where the change is significant we notify account holders by email.
11. Contact
Privacy enquiries: research@gladiatorpeptides.com
Postal: 4180 Research Park Drive, Suite 220, Wilmington, DE 19801, USA
This policy forms part of a demonstration website and is provided as a structural example, not as legal advice. Anyone operating a real business should have a privacy policy prepared against the specific jurisdictions, processors and data flows involved.