Privacy policy

• Order information — name, email, phone, billing and shipping address, order contents
• Account information — email and password if you create an account
• Payment information — processed by our payment provider; we do not store full card numbers
• Communications — messages you send us and consent records for email or SMS
• Technical data — IP address, device and browser information, pages viewed, and referral or campaign parameters

• To process, fulfil and ship orders and handle returns
• To provide support and respond to enquiries
• To meet legal, tax and accounting obligations and to defend chargebacks
• To detect and prevent fraud and abuse
• To send marketing communications, only where you have opted in

We share personal information only with service providers who need it to operate the business — payment processing, shipping carriers, email and SMS delivery, and analytics — and only for those purposes. We also disclose information where required by law or to protect our legal rights. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We keep personal information only as long as needed for the purpose it was collected, plus any period required by law. In practice: order and transaction records for seven (7) years for tax, accounting and chargeback-defence purposes; research-access and age attestations for three (3) years as a compliance record; marketing and SMS consent records for four (4) years after consent is withdrawn, as evidence that consent was given; and website analytics for 26 months. When a retention period ends we delete the information or irreversibly de-identify it.

If you are a California resident you have the right to:

• Know what personal information we collect, the sources, the purposes, and who we disclose it to
• Access a copy in a portable format
• Delete personal information, subject to legal exceptions that require us to retain certain records
• Correct inaccurate personal information
• Limit our use and disclosure of sensitive personal information
• Opt out of any sale or sharing of personal information
• Not be discriminated against for exercising any of these rights

We have not sold or shared personal information in the preceding twelve months. We do not knowingly collect the personal information of anyone under 18.

To exercise a right, email support@luxresearchsupply.com with the subject line “Privacy Request”. We verify identity by matching the information you provide against our records, usually the email address or order number on the account. We respond within 45 days and may extend once by a further 45 days where necessary, telling you why. There is no charge. You may use an authorised agent, who must provide written proof of authorisation. If we decline a request you may appeal by replying to our response.

We honour the Global Privacy Control (GPC) opt-out preference signal. If your browser or extension sends a GPC signal we treat it as a request to opt out of any sale or sharing of personal information from that browser.

We use cookies and similar technologies to keep your cart, remember preferences, measure site performance and attribute advertising. You can block cookies in your browser, though parts of the site — including the cart — may stop working.

We use industry-standard technical and organisational measures to protect personal information, including encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Enrolling in a text-message program is optional and separate from ordering. Consent is collected only through the dedicated form at /sms, using separate unchecked boxes for order updates and for marketing. Message frequency varies. Message and data rates may apply. Reply STOP to cancel, HELP for help. Mobile opt-in data is never shared with third parties for their marketing.

This website and its products are intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we identify such information we delete it promptly.

We may update this policy; the “last updated” date above reflects the current version. Questions or requests: LUX Peptides LLC · support@luxresearchsupply.com