Privacy Policy

Last Updated: January 12, 2026

MAHA Peptides ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our research products.

By using our website, you consent to the data practices described in this policy.

1. Information We Collect

Personal Information You Provide:

When you create an account or place an order, we collect:

• Contact Information: Name, email address, phone number
• Shipping Address: Street address, city, state, zip code
• Billing Address: If different from shipping address
• Payment Information: Payment method details (processed securely, not stored on our servers)
• Account Credentials: Username, encrypted password
• Research Affiliation: Institution name or professional affiliation (if provided)

Compliance and Legal Information:

• Age Verification: Confirmation that you are 18 years or older
• Research Use Acknowledgment: Confirmation of compliance with research use policy
• Terms Acceptance: Date and time of terms acceptance, IP address

Automatically Collected Information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, links clicked, referring URLs
• Cookies: Session cookies, preference cookies (see Cookie Policy section below)
• Transaction Data: Order history, purchase amounts, product selections

2. How We Use Your Information

We use collected information for the following purposes:

Order Processing and Fulfillment:

• Process and ship your orders
• Send order confirmations, shipping notifications, and tracking information
• Handle payment processing and verification
• Manage returns, refunds, or customer service inquiries (within our policy limits)

Account Management:

• Create and maintain your account
• Authenticate your identity and prevent fraud
• Provide access to order history and account settings
• Send account-related notifications

Legal Compliance:

• Verify age and eligibility to purchase research chemicals
• Maintain records required by law
• Comply with legal obligations and regulatory requirements
• Respond to legal requests and prevent illegal activities
• Enforce our Terms of Service and Research Use Policy

Website Improvement:

• Analyze website usage and improve user experience
• Troubleshoot technical issues
• Optimize website performance and security

Communications:

• Send transactional emails (order confirmations, shipping updates)
• Respond to customer service inquiries
• Send important policy updates or security alerts
• Product availability notifications (if you opt-in)

3. Marketing Communications (Opt-In Only)

We do NOT send marketing emails unless you explicitly opt-in. If you choose to receive marketing communications, we may send:

• New product announcements
• Special promotions or discounts
• Research news and industry updates

Note: You cannot opt-out of transactional emails (order confirmations, shipping updates, account security alerts) as these are necessary for service delivery.

4. Information Sharing and Disclosure

We do NOT sell or rent your personal information to third parties.

We may share your information with:

Service Providers:

• Shipping Carriers: USPS, FedEx, UPS (name, address, phone for delivery)
• Payment Processors: Secure payment processing (payment information handled via encrypted channels)
• Email Service: Transactional email delivery (order confirmations, tracking notifications)
• Web Hosting: Secure server infrastructure and data storage

These service providers are bound by confidentiality agreements and may only use your information to perform services on our behalf.

Legal Requirements:

We may disclose your information when required by law or to:

• Comply with legal process (subpoenas, court orders, warrants)
• Respond to government or law enforcement requests
• Enforce our Terms of Service or protect our rights
• Investigate fraud, security issues, or illegal activities
• Protect the safety of our customers, staff, or the public

Business Transfers:

If MAHA Peptides is acquired, merged, or sells assets, your information may be transferred to the new entity. You will be notified of any such change via email and/or website notice.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted via HTTPS/TLS encryption
• Secure Storage: Encrypted databases with access controls
• Access Restrictions: Limited employee access on need-to-know basis
• Password Protection: Passwords are hashed and salted (not stored in plain text)
• Regular Security Audits: Ongoing monitoring for vulnerabilities

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and fulfill orders
• Comply with legal, tax, and accounting requirements (typically 7 years for transaction records)
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

Account Deletion: You may request account deletion by emailing privacy@mahapeps.fit. We will delete your account within 30 days, subject to legal retention requirements. Order history and transaction records will be retained as required by law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Essential Cookies (Required):

• Session Management: Keep you logged in during your visit
• Shopping Cart: Remember items in your cart
• Age Verification: Remember that you verified your age (session-only)
• Security: Prevent fraud and unauthorized access

Preference Cookies (Optional):

• Language/Region: Remember your preferences
• Display Settings: Theme, layout preferences

Analytics Cookies (Optional):

• Usage Analytics: Understand how visitors use our site (anonymous data)
• Performance Monitoring: Identify technical issues

Cookie Management:

You can control cookies through your browser settings. Note that disabling essential cookies may prevent website functionality.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

Access and Portability:

• Request a copy of your personal information
• Download your data in a portable format

Correction:

• Update inaccurate or incomplete information
• Edit your account details through account settings

Deletion:

• Request deletion of your account and data (subject to legal retention requirements)

Opt-Out:

• Unsubscribe from marketing emails
• Disable optional cookies

To Exercise Your Rights: Email privacy@mahapeps.fit with your request. We will respond within 30 days. Verification of identity may be required.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (with exceptions)
• Right to Opt-Out: Opt-out of sale of personal information (we do NOT sell personal information)
• Non-Discrimination: We will not discriminate against you for exercising your rights

To submit a CCPA request, email privacy@mahapeps.fit with "CCPA Request" in the subject line.

10. Children's Privacy

Parents or guardians who believe we have collected information from a minor should contact privacy@mahapeps.fit immediately.

11. Third-Party Links

Our website may contain links to third-party websites (payment processors, shipping carriers, research resources). We are NOT responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party sites you visit.

12. International Users

Our website is operated in the United States and intended for US customers only. If you access our website from outside the US:

• Your information will be transferred to and stored in the United States
• US data protection laws may differ from your local laws
• By using our website, you consent to transfer of your information to the US

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Material changes will be communicated via:

• Email notification to registered users
• Prominent notice on our website

Continued use of our website after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Privacy Officer
MAHA Peptides
Email: privacy@mahapeps.fit
Subject Line: "Privacy Inquiry"

We will respond to privacy inquiries within 30 days.