Consumer Health Data Privacy Policy

1. Purpose & Scope

This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies to "consumer health data" as defined by the Washington My Health My Data Act (MHMDA) and comparable laws in other states, including Nevada (SB 370) and Connecticut. It describes the categories of consumer health data we collect, how we use and share it, and the rights available to you. Purely Peptides sells products for in-vitro research use only and does not provide healthcare services; this policy is provided out of an abundance of caution because purchase information could be construed as health-related.

2. Categories of Consumer Health Data We Collect

We may collect the following categories of data that could be considered consumer health data:

• The specific research products you view, add to a cart, or purchase, and your related order history
• Information you voluntarily provide when contacting us about products

We do not intentionally collect biometric data, precise location data, or diagnostic or treatment information.

3. Sources

We collect this data directly from you when you browse, place an order, or communicate with us, and automatically through standard order and website technology described in our Privacy Policy.

4. How We Use Consumer Health Data

• To process, fulfill, and ship your orders
• To provide customer support and respond to your inquiries
• To detect and prevent fraud and to secure our Site
• To comply with legal obligations

We do not use consumer health data for targeted advertising, and we do not sell it.

5. How We Share Consumer Health Data

We share consumer health data only with service providers who process it on our behalf and under contract, and only as needed to operate our business:

• Shipping carriers (e.g., USPS) to deliver orders
• Payment processors shown at checkout to complete your purchase
• Email and hosting providers (EmailJS, Cloudflare) to send order notices and operate the Site
• Legal or governmental authorities when required by law

We do not sell consumer health data, and we do not share it with third parties for their own purposes. We will not sell or share consumer health data without first obtaining your valid authorization as required by law.

6. Consent

Where required by law, we collect and process consumer health data only with your consent, which you provide by voluntarily placing an order or contacting us after being presented with this policy. You may withdraw your consent at any time by contacting us at [email protected]. Withdrawing consent will not affect processing that already occurred and may prevent us from fulfilling an order.

7. Your Rights

Subject to your state's law, you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data and access such data
• Withdraw consent to our collection and sharing of your consumer health data
• Delete your consumer health data
• Appeal a denial of any request

To exercise these rights, email [email protected] with the subject "Consumer Health Data Request." We will respond within the timeframe required by law. We will not discriminate against you for exercising these rights.

8. Data Security & Retention

We apply the safeguards described in our Privacy Policy and restrict access to consumer health data to personnel and processors who need it. We retain consumer health data only as long as necessary for the purposes above or as required by law.

9. Contact Us