Skip to content
Vestrand Bioscience

Legal & policies

Privacy Policy

This policy explains what personal information we collect, how we use and share it, how long we keep it, how we protect it, and the choices you have.

Last updated July 23, 2026

1. Who we are

This Privacy Policy describes how Vestrand Bioscience (“we,” “us,” “our”) handles personal information collected through vestrandpeptides.com and in the course of fulfilling orders. We are the party responsible for that information. If you have any question about this policy or your information, contact us at vestrandpeptides@gmail.com.

2. Information we collect

We collect only what we need to operate the site and fulfill your orders:

  • Account information — your name, email address, and a password (which we store only as a salted hash, never in plain text).
  • Order and shipping information — the products you order, your shipping and billing address, and an optional phone number for delivery.
  • Payment information — processed by our payment processor, Square. Your card number is entered directly into Square’s secure fields and is never received or stored by us; we retain only a transaction reference and confirmation of payment.
  • Compliance records — your age and research-use attestations and the policy versions you accepted, kept as a record of the confirmations made at purchase.
  • Communications — the content of messages you send us, such as support or contact inquiries.
  • Technical information — limited log and device data and cookies necessary to operate the site (see Section 6).

We do not ask for information we do not need, such as your full date of birth, government identifiers, or any health or medical information, and we do not knowingly collect information from anyone under 21 (see Section 9).

3. How we use your information

We use personal information to:

  • process, fulfill, and provide support for your orders and manage your account;
  • take payment and detect and prevent fraud and abuse;
  • meet our legal, tax, and record-keeping obligations, including retaining your research-use and age attestations;
  • operate, secure, maintain, and improve the site; and
  • send you service messages about your orders and account, and — only if you have opted in — occasional marketing messages, which you can stop at any time.

4. When we share information

We do not sell your personal information, and we do not share your purchase history with advertising platforms. We share information only with the service providers that help us run the business, and only as needed for them to perform their work for us:

  • Payment processing — Square, to take and confirm payment.
  • Shipping — the parcel carriers that deliver your order, which receive your shipping details.
  • Email and communications — the providers that deliver our transactional and support email.
  • Hosting and infrastructure — the providers that host the site and store its data.
  • Analytics — privacy-preserving, first-party analytics used to understand and improve the site, configured without cross-site advertising identifiers.

We may also disclose information when we reasonably believe it is necessary to comply with the law or a valid legal request, to enforce our terms, or to protect the rights, property, or safety of our customers, the public, or us. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, and we will require the recipient to honor this policy or notify you of any material change.

5. How long we keep information

We keep personal information only for as long as we need it for the purposes described here, after which we delete it or remove its connection to you. Order and transaction records are kept for the period our tax and accounting obligations require. Compliance attestations are kept alongside the related order record. Security and access logs are kept for a limited period and then aggregated or deleted. If you ask us to delete your account, we remove or de-identify your personal information except for the limited records we are required to retain.

6. Cookies and analytics

We use cookies and similar storage that are necessary to operate the site — to keep you signed in, remember your cart, and protect against cross-site request forgery — together with privacy-preserving first-party analytics that help us understand how the site is used. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the site from working.

7. How we protect information

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit (HTTPS/TLS), storage of passwords only as salted hashes, access controls that limit who can see personal information, and activity logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if a breach affecting your personal information occurs, we will notify you and any relevant authority as required by law.

8. Your choices and rights

You can review and update your account information at any time by signing in, and you can unsubscribe from marketing email using the link in any such message or by contacting us. Depending on where you live — including under the California Consumer Privacy Act and comparable laws in other U.S. states — you may also have the right to request access to the personal information we hold about you, to have it corrected or deleted, to receive a portable copy, and to not be discriminated against for exercising these rights. Because we do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, there is nothing to opt out of in those categories, but you may still exercise your other rights. To make a request, email vestrandpeptides@gmail.com; we will verify your identity using the least information necessary and respond within the time the applicable law allows.

9. Children

The site is intended for qualified researchers who are adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 21 years of age. If you believe someone under 21 has provided us personal information, contact vestrandpeptides@gmail.com and we will delete it.

10. Where we operate

We are based in the United States, we serve customers in the United States, and your information is processed in the United States. If you access the site from elsewhere, be aware that the information you provide will be handled in the United States under this policy.

11. Changes to this policy

We may update this policy from time to time; the date above shows when it last changed, and we will make any material change clear. Questions may be directed to vestrandpeptides@gmail.com.