Privacy policy.

We collect information you provide directly to us, including:

• Contact information — name, email address, phone number, and shipping / billing addresses;
• Payment information — card details and billing information, processed securely through our payment providers;
• Order information — products purchased, order history, and transaction details;
• Communications — messages, emails, and support requests you send us; and
• Account information — your profile details if you create an account.

When you visit the Website, we also automatically collect:

• IP address and browser type;
• Device information and operating system;
• Pages viewed and time spent on the site;
• Referring website and exit pages; and
• Cookies and similar tracking technologies.

We use the information we collect to:

• Process and fulfill your orders;
• Communicate with you about orders and products;
• Send promotional emails, with your consent;
• Improve the Website and customer experience;
• Prevent fraud and enhance security;
• Comply with legal obligations; and
• Respond to your questions and support requests.

We do not sell your personal information. We may share your information with:

• Service providers — payment processors, shipping carriers, and email providers who help us operate our business;
• Legal requirements — when required by law or to protect our rights; and
• Business transfers — in connection with a merger, acquisition, or sale of assets.

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission;
• PCI-compliant payment processing;
• Regular security audits and monitoring;
• Limited employee access to personal information; and
• Encrypted data storage at rest.

We use cookies and similar technologies to:

• Remember your preferences and cart contents;
• Analyze website traffic and usage patterns;
• Personalize your experience; and
• Serve relevant advertisements.

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Website.

If you opt in to marketing communications, we may send you recurring automated marketing and informational messages by email or text. Consent to marketing is not a condition of purchase, and message and data rates may apply. You can opt out at any time using the unsubscribe link in any marketing email or by replying STOP to any text message; transactional and service messages (such as order confirmations and tracking updates) will continue.

You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information;
• Opt out of marketing communications; and
• Request a copy of your data in a portable format.

To exercise these rights, contact us at privacy@prestigepeptides.com.

We process personal data as a controller under the EU General Data Protection Regulation (GDPR). Our legal bases are: performance of a contract (processing and shipping your order), legal obligation (tax, accounting, and record-keeping duties), legitimate interests (fraud prevention, site security, service improvement, and measuring our advertising), and consent (where you subscribe to marketing emails).

If you are located in the EU, EEA, Switzerland, or the UK you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate or incomplete data corrected;
• have your data erased where we no longer have a lawful basis to keep it;
• restrict or object to processing, including processing based on legitimate interests;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing that already took place; and
• lodge a complaint with your national data-protection supervisory authority.

To exercise any of these rights, email privacy@prestigepeptides.com. We respond within one month, as required by the GDPR.

International transfers. Some of our processors (for example payment, hosting, email, and advertising-measurement providers) may process data outside the EEA. Where that happens we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses together with additional safeguards.

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Order records may be retained as required by tax and commerce regulations.

The Website is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If we learn we have collected such information, we will promptly delete it.

The Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Website after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our privacy practices, contact us at privacy@prestigepeptides.com or support@prestigepeptides.com.

We use the Meta Pixel and Meta Conversions API to measure the performance of our advertising. We share the following with Meta:

• Hashed contact details — email, phone, first and last name, city, postal code and country are irreversibly hashed (SHA-256) in our servers before transmission. Raw email addresses and phone numbers are never sent to Meta.
• Technical identifiers — IP address, browser user agent and the Meta browser cookies _fbp and _fbc, used to match an event to an ad click.
• Event data — pages viewed, products viewed or added to cart, checkout steps and order value, currency and product identifiers.

This data is used solely to attribute and optimise our advertising — never to build profiles for third parties or to sell data. We rely on our legitimate interest in measuring our own advertising, and you can object at any time by emailing privacy@prestigepeptides.com, by using your browser's tracking-protection or cookie settings, or by adjusting your Meta ad preferences.