Privacy policy

Bravo Zulu Peptides (“Bravo Zulu Peptides”, “we”, “us”) respects your privacy. This policy explains what we collect when you visit bravozulupeptides.com or purchase from us, how we use it, who we share it with, and what choices you have. By using the site you consent to these practices.

Information you give us. Name, email address, and a password (stored as a cryptographic hash — we never see or store your plaintext password). For orders: billing and shipping address, telephone number, order contents, and order history. We record the date, time, and version of your acceptance of the research use policy. We also retain anything you include in emails or support requests.

Payment information. Card data is collected and processed by our payment processor. We do not receive or store complete card numbers. We may retain a truncated identifier such as the last four digits and card brand for reconciliation and fraud prevention.

Collected automatically. IP address, browser type and version, operating system, device type, referring URL, pages viewed, and navigation paths, together with cookies as described below.

From third parties. Transaction status and fraud risk signals from our payment processor, and delivery and tracking events from carriers.

What we do not collect. We do not knowingly collect information from anyone under 21. We do not collect health information, medical records, or biometric data. Please do not send us health information — our products are laboratory reagents, we have no use for it, and we do not want it.

To process, fulfil, and ship your order; to send order confirmations, shipping notices, and tracking; to respond to support inquiries; to verify eligibility including age and research-use attestation; to detect and prevent fraud, chargeback abuse, and unauthorised access; to meet regulatory, tax, and accounting record-keeping obligations; to operate, secure, and improve the site; and, where you have opted in, to send marketing communications.

Where a legal basis is required, we rely on performance of a contract (fulfilment), legitimate interests (fraud prevention, security, service improvement), legal obligation (tax and regulatory records), and consent (marketing and non-essential cookies).

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under applicable state privacy law.

We share information only with service providers who act on our behalf and are contractually restricted from using it for anything else — our payment processor, shipping carriers, hosting and database infrastructure, transactional email provider, fraud prevention services, and analytics. We may also disclose information where required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to comply with legal process, protect our rights, prevent fraud, or protect the safety of any person. If we are involved in a merger, acquisition, or sale of assets your information may transfer as part of that transaction, and we will notify you.

Order and transaction records, including attestation records, are retained for a minimum of seven years to satisfy tax, accounting, and regulatory obligations. Account information is retained while your account is active, and afterwards only as necessary for legal, fraud-prevention, and dispute-resolution purposes. Support correspondence is typically retained for three years. Analytics data is typically retained in aggregated or de-identified form.

Essential cookies are required for the site to function — session management, authentication, cart contents, and security. Disabling them will prevent you from signing in or completing an order. Analytics cookies help us understand how the site is used, and preference cookies remember your settings. You can control cookies through your browser.

There is no industry-standard response to the browser “Do Not Track” signal and this site does not respond to it. We do honour recognised opt-out preference signals such as Global Privacy Control where applicable law requires.

Transactional email — order confirmations, shipping notices, account and policy notifications — is a necessary part of providing service and cannot be opted out of while you have an active account or order. Marketing email is sent only with your consent and you may unsubscribe at any time from the link in any marketing message, or by writing to Support@BravoZuluPeptides.com. Unsubscribing does not affect transactional messages.

We use TLS for all data in transit, hash passwords with industry-standard algorithms, hold data in access-controlled encrypted storage, restrict employee access by role, and keep dependencies patched. Card data is handled exclusively by a PCI-DSS compliant processor and is never stored on our systems.

No method of transmission or storage is completely secure and we cannot guarantee absolute security. You are responsible for the confidentiality of your credentials. If we become aware of a breach affecting your personal information we will notify you and the applicable regulators as required by law.

Depending on your jurisdiction you may have the right to access a copy of the information we hold about you, correct inaccurate information, request deletion, receive your information in a portable format, opt out of sale or sharing (we do neither), limit the use of sensitive information, and not be discriminated against for exercising a right.

To exercise a right, email Support@BravoZuluPeptides.com with the subject line “Privacy Request”. We verify identity before acting — usually by confirming you control the email address on the account. We respond within forty-five days or within the period required by applicable law, and may extend where permitted with notice to you.

You may use an authorised agent; we will require proof of authorisation and may still ask you to verify identity directly. We may decline a deletion request where retention is necessary to complete a transaction, detect or prevent fraud, comply with a legal obligation including tax and regulatory record-keeping, or exercise or defend legal claims.

The site is not intended for anyone under 21 and we do not knowingly collect information from minors. If we learn we have, we will delete it and cancel any associated order. If you believe a minor has provided us information, contact Support@BravoZuluPeptides.com immediately.

The site is operated in the United States. If you access it from elsewhere, your information will be transferred to, stored in, and processed in the United States, where privacy law may differ from your jurisdiction.

The site links to third-party resources including published literature and analytical laboratories. We are not responsible for their privacy practices; review their policies before providing them information.

We may update this policy. Material changes are announced by updating the date above and, where required by law, by direct notice. Continued use after changes take effect constitutes acceptance.

Bravo Zulu Peptides
4183 Franklin Rd, Ste B1, Murfreesboro, TN 37128
Support@BravoZuluPeptides.com · (808) 797-3626 ext. 800