Privacy Policy

Quest Molecular Peptides (“Quest Molecular Peptides,” “Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through compliance with this policy.

This Privacy Policy describes how we collect, use, process, retain, and disclose personal data about you when you interact with our websites, applications, products, and services that link to this policy (collectively, the “Services”), including across our affiliated brands, subsidiaries, partners, and authorized operational relationships, and describes the rights and choices available to you.

By using the Services or otherwise providing us with your information, you agree to the collection, use, and sharing of your information as described in this policy.

This policy may change from time to time. Your continued use of the Services after changes are made constitutes acceptance of those changes, subject to applicable law. Please check this page periodically for updates.

This Policy applies to personal information we collect:

• Through our website(s), mobile applications, and online storefronts;
• Through communications, including email, text, chat, and other electronic messages between you and us;
• When you interact with our advertising or applications on third-party websites and services where those materials link to this Policy; and
• Through offline interactions, such as trade shows or phone orders, where this Policy is referenced.

This Policy Does Not Apply To

• Information collected through another website, service, affiliate, or subsidiary that does not link to this Policy; or
• A third party’s own collection of information, including through content or advertising that may link to or be accessible from the Services.

We may provide additional or different privacy notices specific to certain features, services, jurisdictions, or activities. Those notices supplement this Privacy Policy.

Our Services are not directed to, and we do not knowingly collect personal data from, individuals under the age of 18.

If we learn that we have collected personal data from a child under 18 without appropriate authorization or verification where required, we will take reasonable steps to delete that information.

If you believe a child has provided us with personal information, please contact us at support@qmpeptides.com.

“Personal data” means information that identifies, relates to, or describes, directly or indirectly, you as an individual.

3.1 Information You Provide Directly

• Account and contact information: name, email address, phone number, shipping and billing address, username, and password.
• Payment information: payment method details and transaction information. Full payment card numbers are handled by applicable payment processors and are not intended to be stored directly on our servers.
• Account and order history: items purchased, subscriptions, transaction amounts, order history, and discounts used.
• Content you provide: messages sent through email, chat, contact forms, surveys, product reviews, SMS, or other communications, including information you voluntarily choose to include.
• Marketing preferences: your consent choices and communication preferences for email and SMS marketing.

3.2 Information Collected Automatically

• Device information: IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type, and browser settings.
• Technical and usage information: clickstream information, pages and products viewed or searched for, page response times, download errors, length of visits, scrolling, clicking, mouse-over activity, and navigation information.
• Cookies, web beacons, and similar technologies: described further in Section 6.
• Approximate location: information derived from an IP address or shipping information. We do not intentionally collect precise geolocation unless you separately provide permission through applicable settings or services.

3.3 Information From Third Parties and Business Partners

• Service providers we engage, such as payment processors, email and SMS platforms, analytics providers, fraud-prevention vendors, and security providers.
• Business partners that provide consumer information, marketing-preference information, or aggregated audience data to help us operate and improve the Services.
• Social media platforms when you interact with our content or use supported social account functionality.

3.4 Sensitive or Health-Adjacent Information

Because certain products available through our Services may relate to health, wellness, scientific research, or research-use contexts, you may voluntarily share health-related context with us, for example through a customer service message or product inquiry.

We do not ask you to provide medical records or clinical health information, and you should not send such information unless specifically necessary and legally appropriate.

Any voluntarily disclosed health-related information is treated with heightened care. It is used solely as reasonably necessary to respond to your inquiry or provide requested support, is not intended to be used for advertising or profiling, and is not shared with affiliates or partners for their own marketing purposes.

Where required by applicable law, we will only collect or process sensitive personal data with appropriate consent or another lawful basis.

Products are intended only for the uses described on the Quest Molecular Peptides website, including applicable research-use-only disclosures. Nothing in this Privacy Policy constitutes medical advice or a substitute for consulting an appropriately qualified professional.

We do not knowingly collect Social Security numbers, government identification numbers, biometric identifiers, or genetic information. If our practices materially change, we will update this Policy where required.

3.5 Aggregated and Technical Data

We may derive aggregated, statistical, or technical information from personal data, such as calculating the percentage of visitors using a particular feature.

If we combine aggregated or technical information with personal data in a manner that identifies you, we treat the combined information as personal information.

• Directly from you — when you create or update an account, place an order, subscribe, make a purchase, participate in a survey, promotion, or contest, submit a review, communicate with customer support, or otherwise provide information.
• Automatically — through cookies, web beacons, pixels, log files, and other tracking technologies as you use the Services.
• From service providers and business partners — as described elsewhere in this Policy.

We may use personal data to:

1. Provide, operate, maintain, and support the Services;
2. Process and fulfill orders, subscriptions, payments, deliveries, returns, and exchanges;
3. Create and manage customer accounts;
4. Send transactional communications such as order confirmations, shipping notices, account notices, and renewal information;
5. Send marketing communications where you have consented or where otherwise permitted by applicable law;
6. Personalize your experience and provide relevant product recommendations;
7. Improve and analyze the Services, including through aggregated analytics and permitted machine-learning techniques used to understand feature usage and performance;
8. Estimate audience size, recognize returning visitors, and improve navigation and search functionality;
9. Detect, investigate, and prevent fraud, abuse, unauthorized activity, and security incidents;
10. Enforce applicable terms, policies, billing obligations, and contractual rights; and
11. Comply with legal obligations and protect our rights and the rights, property, and safety of others.

Legal Bases

Where applicable, including for certain UK or European Economic Area users, legal bases for processing may include consent, necessity to perform a contract with you, legitimate interests such as improving and securing our Services, and compliance with legal obligations.

We and applicable service providers or partners may use:

• Cookies: small files placed on your device to help keep you logged in, remember your shopping cart, store preferences, support analytics, and support permitted advertising activities.
• Web beacons and pixel tags: small electronic files that may be used to count visitors, determine whether marketing communications have been opened, measure engagement, or verify system integrity.
• Do Not Track (DNT): because there is not a universal industry standard for interpreting DNT signals, our Services may not respond to every browser DNT signal.
• Global Privacy Control (GPC): where required by applicable law, we make reasonable efforts to recognize supported GPC signals as requests to opt out of certain sale, sharing, targeted advertising, or similar processing activities.

You may refuse or disable cookies through your browser or device settings. Doing so may affect certain website functions.

Third parties, including advertising providers, advertising networks, analytics providers, device manufacturers, and internet or mobile service providers, may independently use tracking technologies and may collect information across other websites or services over time.

Their processing activities are governed by their own policies, and you should contact the applicable third party directly with questions concerning those practices.

To provide more relevant advertising, Quest Molecular Peptides and applicable advertising partners may use information collected through the Services, and where permitted or consented to, information associated with affiliated brands, to support:

• Cross-brand retargeting: displaying advertisements for Quest Molecular Peptides or affiliated brands on third-party websites, applications, or social platforms based on browsing activity.
• Audience matching: sharing hashed or pseudonymized identifiers, such as a hashed email address, with advertising platforms such as Meta or Google to reach relevant or similar audiences.
• Customized communications: tailoring email or SMS communications based on permitted browsing, account, or purchase activity.

You can limit certain advertising activities through the privacy and opt-out methods described in Section 9.

We do not sell personal information for monetary consideration. We may disclose personal data in the circumstances described below.

8.1 Affiliates and Subsidiaries

We may share personal data with subsidiaries, affiliated businesses, or companies under common ownership or control with Quest Molecular Peptides for purposes such as coordinating operations, customer support, logistics, security, and fraud prevention.

Cross-brand marketing activities are conducted only where permitted by applicable law and applicable consent or opt-out requirements.

You may request information regarding applicable affiliated brands by contacting support@qmpeptides.com.

8.2 Contractors and Service Providers

We may share information with vendors and service providers performing services on our behalf, including:

• Payment processing;
• Shipping and fulfillment;
• Email and SMS delivery;
• Website hosting and infrastructure;
• Analytics;
• Customer support platforms;
• Fraud prevention and cybersecurity; and
• Advertising and marketing platforms.

These providers are expected to use personal data only as reasonably necessary to provide contracted services and subject to applicable confidentiality, privacy, and security obligations.

8.3 Strategic Partners

We may share limited information with partners where we jointly provide products, services, promotions, or other offerings, subject to applicable law and relevant privacy preferences.

8.4 To Fulfill Your Request

We may disclose information when necessary to complete an action specifically requested by you.

8.5 Business Transfers

In connection with a merger, acquisition, financing, reorganization, dissolution, bankruptcy, sale, or transfer of some or all business assets, personal data may be disclosed or transferred as part of the transaction.

Where required, we will provide appropriate notice concerning material changes in ownership, control, or use of personal data.

8.6 Legal and Safety Reasons

We may disclose information where reasonably necessary to comply with a court order, applicable law, subpoena, regulatory request, or government request; enforce applicable agreements; support billing or collection; investigate fraud; protect legal rights; or protect the safety, security, and property of Quest Molecular Peptides, customers, or others.

8.7 Aggregated or De-Identified Data

We may disclose aggregated or de-identified information that cannot reasonably identify an individual, subject to applicable law.

Categories of personal information disclosed under the circumstances described above may include account and contact information, transaction and payment-related information, order history, device and technical information, and content voluntarily provided to us.

9.1 Cookies and Tracking

You can adjust browser or device settings to block or delete cookies or use available cookie consent tools. Certain Services may not function properly when cookies are disabled.

9.2 Promotions From Us

If you do not want us to use your information to promote products or services, you may adjust available marketing preferences, use the unsubscribe mechanisms provided in communications, or contact support@qmpeptides.com.

9.3 Targeted / Interest-Based Advertising

You may opt out of interest-based advertising from participating advertising networks through:

• Network Advertising Initiative
• Digital Advertising Alliance

Certain advertising opt-out mechanisms may require browser cookies to function correctly.

9.4 Cross-Brand / Affiliate Sharing

Email support@qmpeptides.com with the subject line “Opt Out of Affiliate Sharing” to request limitations on the use or sharing of your information with affiliated brands or partners for their own marketing purposes where such rights apply.

This does not affect information sharing necessary to process an order, provide requested Services, prevent fraud, maintain security, or provide customer support.

9.5 Email Marketing

You may opt out of promotional email communications by clicking the “unsubscribe” link included in applicable marketing emails.

9.6 SMS Marketing

• If you provide your phone number and affirmatively opt in where required, you agree to receive recurring automated promotional or informational text messages from Quest Molecular Peptides at that number.
• Consent to SMS marketing is not a condition of purchase.
• Message and data rates may apply.
• Message frequency may vary.
• Reply STOP to applicable messages to opt out.
• Reply HELP where supported or contact support@qmpeptides.com for assistance.
• Messages may be delivered from a dedicated messaging number that differs from other customer-support contact information.

9.7 Location Data

Where a Service requests real-time device location, you can control access using your device privacy settings. Restricting location access may limit related functionality.

Depending on where you live, you may have rights under privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), comprehensive privacy laws in other U.S. states, or applicable international data-protection laws.

Depending on applicable law, these rights may include:

• Access / Know: confirming whether we process personal data and requesting access to or a copy of certain information.
• Correction: requesting correction of inaccurate personal data.
• Deletion: requesting deletion of personal data, subject to applicable legal exceptions.
• Opt Out: opting out of certain sale or sharing of personal data, targeted advertising, or certain profiling activities where applicable.
• Non-Discrimination: exercising applicable privacy rights without unlawful discrimination.

The scope of these rights and applicable exceptions vary by jurisdiction.

To exercise a privacy right, contact support@qmpeptides.com. We may need to verify your identity before completing a request.

Where permitted, you may designate an authorized agent to act on your behalf, subject to verification requirements.

Global Privacy Control

Where required by applicable law and technically detected, we make reasonable efforts to recognize supported Global Privacy Control signals as applicable opt-out requests.

Nevada Residents

Nevada law provides a limited right to opt out of certain sales of covered personal information. We do not currently engage in monetary sales intended to trigger this requirement, but Nevada residents may submit applicable requests to support@qmpeptides.com.

California Privacy Rights Notice

This section applies to California residents and supplements the general Privacy Policy pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Washington My Health My Data Act Notice

This section applies to Washington residents and supplements this Policy pursuant to Washington’s My Health My Data Act (“MHMDA”).

Consumer Health Data We May Process

The MHMDA broadly defines “consumer health data” as personal information linked or reasonably linkable to a consumer that identifies information concerning the consumer’s past, present, or future physical or mental health status.

Because certain products may relate to health, wellness, supplementation, or research contexts, this may include information voluntarily provided in connection with a purchase, customer-service inquiry, or product interest, such as references to a health goal, condition, or intended use.

General payment, shipping, or demographic information does not necessarily constitute consumer health data unless linked with health-related context.

Our Consumer Health Data Practices

• We do not sell consumer health data.
• We do not use consumer health data for advertising, retargeting, or profiling.
• We intend to exclude consumer health data from cross-brand and third-party marketing sharing described elsewhere in this Policy.
• We collect and use applicable consumer health data only as reasonably necessary to provide a requested product, service, or support function and with consent where required.
• We do not share consumer health data with affiliates, subsidiaries, or partners for their own marketing purposes.
• We limit employee and contractor access to individuals who reasonably require access for applicable operational purposes.

Your Washington Rights

Subject to applicable law, you may have rights to:

• Confirm whether we are collecting, sharing, or selling covered consumer health data and request access to applicable information;
• Withdraw consent to certain collection or sharing of consumer health data;
• Delete consumer health data we have collected, subject to applicable law; and
• Appeal certain decisions relating to applicable requests.

To submit a Washington health-data request, email support@qmpeptides.com with the subject line “Washington Health Data Request.”

We will respond within the period required by applicable law and will not unlawfully discriminate against you for exercising applicable rights.

If an applicable request is denied, you may appeal as permitted by law and, where applicable, contact the Washington State Attorney General.

Geofencing

We do not use geofencing technology to establish a virtual boundary around a mental-health facility, reproductive or sexual-health facility, or similar location for purposes prohibited by the MHMDA, including identifying or tracking consumers or collecting covered consumer health data in that manner.

Other States’ Privacy Rights

This section applies, as appropriate, to residents of U.S. states with comprehensive consumer privacy laws, including jurisdictions such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Nebraska, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Tennessee, as applicable laws evolve.

Depending on your jurisdiction, you may have a right to:

• Access personal data processed about you;
• Correct inaccurate personal data;
• Delete certain personal data;
• Opt out of certain targeted advertising, sale of personal data, or qualifying profiling; and
• Appeal certain decisions relating to privacy requests.

Some jurisdictions may additionally require businesses to:

• Recognize supported universal opt-out mechanisms such as the Global Privacy Control;
• Obtain opt-in consent before processing certain categories of sensitive personal data; and
• Provide heightened protections for known minors.

How to Exercise These Rights

Submit applicable privacy requests to support@qmpeptides.com.

We may verify your identity using information reasonably necessary for verification before completing a request. You may designate an authorized agent where permitted by applicable law.

We will respond within the period required by applicable law, which may commonly be approximately 45 days for certain state privacy requests, subject to permitted extensions.

Appeals

If we decline to act on an eligible request and applicable law provides an appeal right, you may appeal by replying to our decision or contacting support@qmpeptides.com.

If an appeal is denied, we may provide applicable information regarding submission of a complaint to the appropriate state Attorney General or regulator.

Categories of Personal Information We Collect

During the preceding 12 months, categories of personal information we may have collected, depending on your interaction with Quest Molecular Peptides, include:

• Identifiers: name, email address, phone number, address, and IP address;
• Customer records information: payment-related details and order history;
• Commercial information: products purchased, transaction information, and purchase history;
• Internet or electronic-network activity: browsing behavior, website interactions, and cookie information;
• Approximate geolocation information: information derived from IP address or shipping details; and
• Inferences: information derived from other data to understand preferences or provide product recommendations.

We do not intentionally collect sensitive personal information such as precise geolocation, government identification information, biometric identifiers, or genetic information through ordinary website operations.

If you voluntarily disclose health-related context, such information is not intended to be used to infer characteristics about you for advertising or profiling purposes.

Sources of Personal Information

We collect personal information directly from you, automatically through use of the Services, and from service providers, advertising partners, and applicable affiliated businesses as described in this Policy.

How We Use and Disclose Personal Information

We use and disclose applicable personal information for the business and commercial purposes described in Sections 5 and 8 of this Policy.

During the preceding 12 months, categories of personal information described above may have been disclosed to service providers, affiliated businesses, subsidiaries, or advertising partners where applicable and permitted by law.

“Sales” and “Sharing” of Personal Information

We do not sell personal information for monetary consideration.

Certain advertising cookies, pixels, or audience-matching technologies may constitute “sharing” for cross-context behavioral advertising under the CCPA/CPRA.

Where applicable, you may opt out using supported privacy controls, applicable website privacy tools, or Global Privacy Control functionality available through a supported browser.

Your California Rights

Subject to applicable law, California residents may have the following rights:

• Right to Know: request categories and specific pieces of personal information collected, applicable sources, purposes, and categories of third parties receiving information.
• Right to Delete: request deletion of applicable personal information subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: request that qualifying sale or sharing activities stop where applicable.
• Right to Limit Use of Sensitive Personal Information: where applicable to qualifying secondary uses.
• Right to Non-Discrimination: protection from unlawful discrimination for exercising applicable privacy rights.

How to Submit a California Request

Submit a verifiable consumer request by emailing support@qmpeptides.com with the subject line “California Privacy Request.”

We may verify your identity by matching information provided with applicable records before fulfilling certain access, correction, or deletion requests.

An authorized agent may submit a request where permitted, subject to applicable authorization and verification requirements.

California Appeals

If an applicable request is declined and an appeal right applies, you may contact us by replying to our decision or emailing support@qmpeptides.com.

Shine the Light

California Civil Code Section 1798.83 may permit certain California customers to request information regarding specified disclosures of personal information to third parties for direct-marketing purposes.

To submit an applicable request, email support@qmpeptides.com with “Shine the Light Request” in the subject line.

Right to Limit Use of Sensitive Personal Information

Where we process sensitive personal information for a purpose beyond what is reasonably necessary to provide the Services and applicable law provides a limitation right, eligible consumers may direct us to limit that processing.

We do not intend to use voluntarily provided health-related or other sensitive personal information for secondary advertising or profiling purposes.

Automated Decision-Making Technology

We do not currently intend to use automated decision-making technology to make decisions producing legal or similarly significant effects concerning consumers, such as automatically denying Services solely on the basis of automated profiling.

If our practices materially change, we will provide applicable disclosures and rights as required by law.

Minors Under 16

We do not knowingly sell or share personal information of consumers we have actual knowledge are under 16 years of age without affirmative authorization where required.

As stated elsewhere in this Policy, the Services are not directed to and are not intended for use by individuals under 18.

Financial Incentives

Quest Molecular Peptides may offer loyalty, promotional, discount, or rewards programs where legally permitted.

Participation in such programs is voluntary. Where applicable privacy law treats a program as a financial incentive, required notices and disclosures will be provided.

Notice at Collection

Where required by applicable law, Quest Molecular Peptides may provide notice of categories of personal information collected and applicable purposes at or before the point of collection, including near forms requesting information such as email addresses, phone numbers, billing information, or shipping information.

California Privacy Protection Agency

The California Privacy Protection Agency (“CPPA”) is a state regulator responsible for administering and enforcing applicable portions of the CCPA/CPRA.

California consumers may find additional information at cppa.ca.gov.

You may also contact support@qmpeptides.com so we can attempt to address your privacy concern directly.

Data Breach — Private Right of Action

Under certain California data-breach provisions, consumers may have a private right of action where specified nonencrypted and nonredacted personal information is subject to unauthorized access, exfiltration, theft, or disclosure resulting from a failure to maintain reasonable security procedures.

Quest Molecular Peptides maintains the safeguards described in Section 13 of this Policy to reduce security risks.

Additional California privacy information may be available through the California Attorney General at: oag.ca.gov/privacy/ccpa .

We retain personal data for as long as reasonably necessary to fulfill the purposes described in this Policy, including operating the Services, fulfilling transactions, complying with legal, tax, accounting, and regulatory obligations, resolving disputes, enforcing agreements, and supporting fraud-prevention and security activities.

Retention periods vary depending on the type of information, applicable legal requirements, and the purpose for which information was collected.

For example, order and transaction records may be retained for periods required by tax, accounting, fraud-prevention, or other applicable legal obligations, while marketing preferences may be retained until you opt out, request deletion where applicable, or the information is no longer reasonably needed.

At the end of an applicable retention period, information may be deleted, destroyed, anonymized, or de-identified in accordance with applicable requirements.

Quest Molecular Peptides is based in the United States.

Personal data may be processed or stored in the United States or other countries where applicable service providers or infrastructure providers operate. These countries may have data-protection laws that differ from those in your country or jurisdiction of residence.

Where required by applicable law, we use appropriate safeguards for qualifying cross-border transfers, which may include contractual protections or other approved transfer mechanisms.

Quest Molecular Peptides uses commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental loss, destruction, unauthorized access, misuse, alteration, and disclosure.

Depending on the Services and providers involved, safeguards may include:

• Encryption of information in transit where appropriate;
• Access-control measures;
• Secure infrastructure and hosting controls;
• Payment-processing security practices;
• Fraud-detection and prevention measures;
• Security monitoring; and
• Administrative procedures designed to restrict unnecessary access.

No website, application, storage system, or online transmission method can be guaranteed to be completely secure, and we cannot guarantee absolute security of information transmitted to or through the Services.

Email, text-message, and chat communications may not always be secure. Please carefully consider what information you submit through those channels.

You are also responsible for protecting your account credentials and preventing unauthorized access to your account.

The Services may contain links to websites, applications, platforms, or services operated by third parties, affiliated businesses, or partners.

Quest Molecular Peptides does not control and is not responsible for the independent privacy practices, security practices, content, or data-handling activities of third-party services.

We encourage you to review the privacy policies and terms of applicable third parties before providing personal information to them.

Quest Molecular Peptides may update this Privacy Policy from time to time to reflect changes in our practices, technology, Services, operational requirements, or applicable legal requirements.

When changes are made, we may update the “Last Updated” date displayed near the top of this Policy.

Where required by applicable law, we may provide additional notice regarding material changes, such as through website notices or email communications.

We encourage you to review this Privacy Policy periodically.

To exercise applicable privacy rights or ask questions regarding this Privacy Policy, the collection or use of your information, your privacy preferences, or our privacy practices, please contact Quest Molecular Peptides.