Privacy Policy

1. Who We Are

Aussie Peptides is an Australian-owned business that supplies research-grade peptide compounds to qualified researchers. References to “we”, “us”, or “our” in this policy refer to Aussie Peptides. Our contact details are provided at the end of this policy.

2. Information We Collect

We may collect and hold the following types of personal information:

• Identity information: Your name, institution or organisation name, and professional title or credentials.
• Contact information: Email address, phone number, and shipping or billing address.
• Order information: Details of the products you have ordered, order history, and transaction records.
• Payment information: Payment card details processed securely through our third-party payment provider. We do not store full card numbers on our systems.
• Technical and security information: IP address, approximate location, browser and device characteristics, browser fingerprints (identifiers derived from those characteristics), pages visited, referring URLs, timestamps, and records of login attempts and form submissions, including unsuccessful or blocked attempts.
• Communications: Records of any correspondence you send us, including contact form details, messages, attachments, support enquiries, or feedback.

Saved carts and incomplete checkouts: We may save your email address and other details as you enter them, before you submit an order. This includes your phone number if entered, cart and checkout identifiers, products, variants, quantities, displayed prices, coupons, shipping and tax estimates, currency, country, language, checkout progress, and activity timestamps. We may associate these records with previous customer and order records where available.

Recovery records may also include campaign source, medium and name, landing-page and referring-site information, session identifiers and, where permitted and available, analytics identifiers. We record selected payment methods, available provider references and general failure categories, not card numbers, security codes or raw payment responses.

We only collect personal information that is reasonably necessary for one or more of our business functions or activities. We will not collect sensitive information (as defined under the Privacy Act) without your explicit consent.

3. How We Collect Information

We collect personal information in the following ways:

• Directly from you when you create an account, place an order, contact our support team, or subscribe to communications.
• Automatically through server logs, cookies, web beacons, browser fingerprinting, and similar technologies when you browse our website, submit a form, check out, or attempt to sign in.
• From third-party service providers such as our payment processor and shipping partners, where necessary to fulfil your order.

Where it is reasonably practicable to do so, we will give you the option of interacting with us anonymously or using a pseudonym. However, this may not be possible for order fulfilment purposes.

4. How We Use Your Information

We use the personal information we collect to:

• Process and fulfil your orders, including dispatch and delivery.
• Verify your eligibility as a qualified researcher in accordance with our research-use-only policy.
• Communicate with you about your orders, account, or enquiries.
• Send you product updates, promotional offers, or research information — only where you have opted in to receive such communications.
• Improve our website, products, and services through analysis of usage data.
• Meet our legal and regulatory obligations, including record-keeping requirements.
• Detect, investigate, and prevent fraud, spam, unauthorised access, and misuse of our services. For these purposes, we may link technical identifiers and security records with visits, form submissions, and orders, and automatically flag or restrict activity. These signals do not conclusively identify a person; contact us if you believe a restriction is incorrect.

We use saved checkout information to restore carts across devices, understand checkout difficulties, prevent duplicate reminders and, where we have a valid consent basis, send cart reminders and relevant offers. Automatic collection does not itself enrol you in marketing. We retain consent evidence and check unsubscribe and delivery-suppression records before sending. Marketing emails include an unsubscribe option.

We may assign customers consistently to a recovery-email group or a comparison group that receives no cart reminders. We compare purchases, discounts and estimated contribution over the same observation period, including purchases made without clicking an email. Recovery records include offer eligibility, queued and sent messages, delivery and click events, restored carts, linked orders and suppression reasons. An email provider may record an automated link check as a click; we do not treat email opens as proof of a purchase.

If you place an order with us, we may use the email address associated with that order to contact you about your purchase and, where permitted by applicable law, to send you promotional material about our products, offers, or updates. You may opt out of promotional emails at any time by using the unsubscribe link in the message or by contacting us directly.

We will not use your personal information for a purpose that is unrelated to the primary purpose of collection unless you have consented or we are required or authorised to do so by law.

5. Disclosure of Your Information

We may disclose your personal information to third parties in the following circumstances:

• Service providers: Third-party businesses that assist us in operating our website and fulfilling orders, including payment processors, courier and logistics providers, and IT service providers. Saved-cart records are stored using Supabase and recovery emails are delivered using Resend. These parties are contractually bound to handle your information securely and only for the purpose we have specified.
• Advertising measurement: To measure and manage our advertising, we share limited information with Google Ads in a hashed (one-way transformed) form — specifically a hashed version of the email address and phone number you enter at checkout, together with the order date and value. Google uses this to recognise whether a purchase followed one of our ads and to stop showing our ads to existing customers. Hashed identifiers can be matched with information Google holds and are not necessarily anonymous. You can opt out of personalised advertising through your Google account settings.
• Legal obligations: Regulatory authorities, government agencies, or law enforcement bodies where we are required to do so by law, court order, or regulatory requirement.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

6. Overseas Disclosure

Some of our third-party service providers may be located outside Australia (for example, cloud hosting or analytics providers). Where we disclose your personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles. By using our website, you consent to the potential transfer of your information to overseas recipients for these purposes.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyse site traffic, and understand how visitors interact with our content. Cookies are small text files stored on your device by your browser. You can configure your browser to refuse cookies or to alert you when cookies are being sent; however, some features of our website may not function properly if cookies are disabled. We do not use cookies to collect sensitive personal information.

Browser fingerprinting and server-side security logging do not necessarily rely on cookies, so disabling cookies does not stop all collection of technical and security information. We use these records for the security purposes described above.

Where an existing Google Analytics browser identifier is available, we associate it with your checkout and report the purchase from our server after payment is confirmed. This report includes product identifiers, quantities, transaction reference and amounts, but not your name, email, phone, delivery address or private order links. This server-side reporting honours Do Not Track, Global Privacy Control and analytics opt-outs signalled at checkout. We do not create a replacement analytics identifier when the browser identifier is unavailable.

8. Data Security

We take reasonable technical and organisational steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include SSL/TLS encryption for data in transit, secure payment processing through accredited third-party providers, and access controls limiting who within our organisation can access personal data.

While we strive to protect your information, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

9. Retention of Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are generally retained for a minimum of 7 years in accordance with Australian taxation law. When personal information is no longer required, we will take reasonable steps to destroy or de-identify it securely.

Saved-cart browser identifiers last up to 30 days. Recovery links normally expire after 14 days and personal offers after 72 hours. We normally delete detailed recovery sessions and their event histories after 60 days without cart activity. Unsubscribe links remain available for at least 30 days after the message. We retain email-level experiment assignments and recent-offer records for up to two years after the last recovery activity to maintain consistent measurement and frequency limits. Unsubscribe records and legally required order records are retained separately; deleting a saved cart does not remove your unsubscribe choice.

Retention of technical and security records depends on their use for investigating incidents, preventing recurring abuse, and resolving disputes. Relevant records may be kept for longer where needed for an ongoing investigation or legal obligation.

10. Your Rights & Access

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of personal information that is inaccurate, out of date, incomplete, or misleading.
• Withdraw consent to the use of your personal information for marketing communications at any time by unsubscribing or contacting us directly.
• Lodge a complaint with us if you believe we have breached the Australian Privacy Principles.

To make an access or correction request, please contact us using the details below. We will respond within 30 days. In some circumstances we may charge a reasonable fee for providing access. We will not charge for making a correction request.

11. Complaints

If you have a complaint about how we have handled your personal information, please contact us in the first instance so we can attempt to resolve the matter. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically. Your continued use of our website following any changes constitutes your acceptance of the revised policy.

13. Contact Us

For any privacy-related enquiries, access requests, correction requests, or complaints, please contact our Privacy Officer: