Privacy Policy

Effective date: October 15, 2026

This Privacy Policy explains how 1001639269 ONTARIO INCORPORATED, operating as Peptide Stacks (“we”, “us”, or “our”), handles personal information when you visit PeptideStacks.io, shop with us, contact us, or use the PeptideStacks.io protocol tracking app.

At a glance

• The website uses account, order, delivery, payment-status, and contact information to operate the store and assist customers.
• The website uses cookies and service providers for checkout, security, communications, analytics, and marketing attribution.
• In the current native app, protocol entries and shot histories are saved on your device. The app does not send these entries to the storefront or provide account-based cloud synchronization.
• You can control notifications, unsubscribe from marketing emails, and request access, correction, or deletion of information we hold about you.

Information used by the website

Information you provide can include your name, email address, telephone number, billing and shipping addresses, account details, order contents, product reviews, support messages, and marketing preferences. We also process shopping-cart and checkout information, payment status and transaction references, shipping and tracking details, refunds, and customer-service records.

When you browse, our website and its service providers can receive your IP address, browser and device information, referring pages, campaign and affiliate identifiers, pages viewed, interactions with products and checkout, and technical error information. When you provide an email address or sign in, some browsing and checkout activity can be associated with that address.

How we use website information

• Provide accounts, maintain carts, process orders and payments, arrange delivery, and manage returns and support.
• Send order confirmations, payment instructions or reminders, shipping updates, and replies to your requests.
• Send newsletters, offers, review requests, and cart or checkout follow-ups, subject to applicable consent requirements and your choices.
• Operate loyalty and affiliate features, measure campaigns, understand storefront usage, and diagnose checkout and technical problems.
• Protect the website, investigate suspected fraud or misuse, and meet accounting and other legal obligations.

Cookies, analytics, and advertising

We use cookies and similar browser storage for account sessions, carts, checkout, customer recognition, preferences, analytics, and campaign attribution. A first-party cookie named email_id can retain an email address you supplied so we can recognize returning customers and connect activity with customer communications. It has a rolling lifetime of up to 400 days and can be refreshed when you return.

Our website uses Google Tag Manager and integrations for analytics, advertising attribution, affiliate tracking, and technical monitoring, including Datadog. These integrations can process browser identifiers, device and interaction data, and customer or order identifiers. Some providers can combine information received through their services with information they hold under their own privacy policies.

You can block or delete cookies through your browser and use privacy controls offered by advertising providers. Blocking essential cookies can prevent accounts, carts, or checkout from working. To withdraw consent for optional communications or request help with privacy choices, contact us. Unsubscribing from marketing does not stop necessary order and service messages.

Information in the native app

Sign in with Apple supplies an app-specific user identifier and, if you authorize it, your name and email address or Apple relay address. The current app retains the Apple user identifier and display name on your device to maintain its sign-in session. Apple handles authentication; the app does not receive your Apple Account password.

Protocol information you enter includes peptide names, vial strength, units, BAC water amounts, dose values, schedules, active status, shot history, and any notes. In the current app these records are stored on your device and are not uploaded to the PeptideStacks.io storefront. Your device or Apple backup settings may separately include app data in backups.

Shot reminders are scheduled through the device’s notification system after you grant permission. They can display peptide names and dose information on the lock screen. You can turn off reminders in the app and change notification previews or permissions in system settings. The current app does not access HealthKit, contacts, photos, or location.

The app’s Delete Account & Data control removes its saved protocols, shot history, reminder schedules, and local sign-in session from that device. It does not delete a separate website shopping account, records on other devices, Apple-managed backups, or your Apple Account. You can manage the app’s Sign in with Apple authorization in Apple Account settings.

Service providers and disclosures

We disclose information needed to provide services to hosting and security providers, payment services, shipping carriers and fulfillment providers, email and customer-communication services such as Brevo, and analytics, monitoring, and advertising partners. Payment services handle the payment credentials submitted through their checkout interfaces; our order records include payment results and references. Apple separately processes authentication and App Store activity under its policies.

We may also disclose information when required by law, to protect rights or investigate fraud, or in connection with a business transfer, subject to applicable protections. Providers may process information outside Canada, where it may be accessible under local law.

Retention and security

Retention depends on the type of information and why it is needed, including order fulfillment, support, accounting, fraud prevention, and legal obligations. Information retained for these purposes may remain after an account deletion request. Device-only app records remain until you delete them or remove the app, subject to your backup settings.

We use technical and organizational safeguards to protect information, including encrypted website connections and access controls. No online service or device can guarantee absolute security. Keep your devices and account credentials protected.

Your choices and requests

You may request access to, correction of, or deletion of personal information we hold, withdraw consent where applicable, or raise a privacy concern. Use the unsubscribe link in marketing emails or contact us to change communication preferences. We may need to verify your identity before acting on a request. Some information must be retained for legal or transaction-record purposes; we will explain relevant limitations.

For privacy requests, contact Peptide Stacks Privacy through our Contact Us page. Please describe your request and provide the email address associated with your account or order. Do not send passwords, full payment-card details, or unnecessary sensitive protocol information.

Children and external services

Our store and app are intended for adults, not children. If you believe a child has provided personal information, contact us so we can investigate. Links to Apple, payment services, or other external sites are governed by those services’ privacy practices.

Changes to this policy

We will update this page and its effective date when our practices change. Material changes to how personal information is handled will be communicated as required, and additional consent will be sought where required.