Privacy policy

Overview

Willow Peptides ("we", "our", "us") collects as little as an order needs and keeps it only as long as the order does. This policy explains what is collected when you visit the Website or place an order, what it is used for, who processes it, and the rights you have over it.

1. Information you give us

When you place an order, join the mailing list or contact support, you provide the following.

Contact details

Name, email address and shipping address.

Mailing list

If you subscribe, your email address and which page you subscribed from. Nothing else, and only if you ask — ordering does not subscribe you.

Order details

The products ordered, the order total, and the order's status and history.

Payment details

The Bitcoin invoice for the order: its address, the amount due, and the on-chain payment that settled it. We never see or store card numbers, bank details or wallet keys.

Correspondence

Emails and support requests you send us, and our replies.

2. Information collected automatically

When you visit the Website, our hosting and edge providers record the following in the ordinary course of serving it.

Connection data

IP address, browser type, device and operating system.

Usage data

Pages requested and the time of each request.

Cookies

Two cookies, both set by us and neither containing personal data: one recording that you affirmed the research-use statements at the gate, one holding the identifier of your cart. We do not run analytics or advertising trackers.

3. How we use it

Orders

To process, fulfil and ship your order and to send its confirmation, payment and tracking emails.

Mailing list

If you subscribed, to tell you about restocks, new compounds and newly published test reports. Every message carries a way out, and leaving is immediate.

Support

To answer your questions and resolve problems with an order.

Security

To prevent fraud and abuse and to keep the Website available.

Law

To comply with legal obligations and to establish, exercise or defend legal claims.

4. Who processes it

We do not sell personal information and we do not share it for marketing. It is shared only with the providers below, each acting on our instructions to run the store, and with authorities where the law requires.

Store platform and hosting

The order system and this Website run on hosted infrastructure in the United States; order and contact details are stored there.

Edge network and email routing

Traffic to the Website and email to our support address pass through a content delivery and email-routing provider.

Transactional email

Order, payment and shipping emails are sent through an email delivery provider, which receives your email address and the content of those messages.

Bitcoin invoicing

Invoices are created and monitored by a payment-processing server, which holds the invoice amount and the receiving address. It receives no name or shipping address.

Carriers

The carrier receives the name and address needed to deliver the parcel.

Business transfers

If the business is sold or merged, order records may transfer to the successor under this policy.

5. Retention

Order records are kept for as long as needed to fulfil and support the order and to meet tax and accounting obligations. A mailing list address is kept until you unsubscribe, and is deleted when you do. Cookies expire on their own: the attestation cookie after thirty days, the cart cookie when the cart is completed or abandoned. Support correspondence is kept for as long as the matter it concerns is open.

6. Security

All traffic to the Website is encrypted in transit. Order data is held on access-controlled infrastructure with encryption at rest. Payment happens on the Bitcoin network directly, so no payment credentials pass through us. No system is perfectly secure, and we cannot guarantee absolute security, but we limit what is collected so that little is at stake.

7. Your rights

You may ask us to access, correct or delete the personal information we hold about you, or to provide a copy of it. Write to [email protected] from the address used on the order. We may need to keep order records that the law requires us to retain.

8. California and other state privacy rights

Residents of California and of other states with consumer-privacy laws have rights to know what personal information is collected and how it is used, to delete it, to correct it, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of. To exercise any other right, contact us as above.

9. Age

The Website is for people aged 21 and over. We do not knowingly collect information from anyone younger, and if we learn that we have, we delete it.

10. Third-party links

The Website links to third-party sites, including the laboratory that issued our test reports and the guides for paying from Cash App and Venmo. Their privacy practices are their own; review their policies before providing information to them.

11. Changes

We may update this policy from time to time. Material changes are posted here with a new "last updated" date, and your continued use of the Website after that constitutes acceptance.

12. Contact

Questions about this policy or our privacy practices: [email protected].