Privacy Policy

1. Information We Collect

Personal Information You Provide

When you create an account, place an order, fill out a form, sign up for our newsletter, or contact us, we may collect information you voluntarily provide, including:

• Name (first and last)
• Email address
• Phone number
• Date of birth (used solely to verify you are 21 years of age or older; Verapep products are sold for research use only and are restricted to adults)
• Researcher type (independent, academic, commercial laboratory, biotech, content creator), used for research-use attestation and aggregated analytics only
• Shipping and billing address
• Payment details (processed securely by our payment processors; we never store full card numbers on our servers)
• Newsletter opt-in preference (only if you check the box on signup or the welcome offer popup)
• Account credentials (hashed password, or Google OAuth identifier if you choose Continue with Google)
• Research-use attestation timestamp (the date and time you confirmed you are 21+ and that products are for research use only)

Automatically Collected Information

When you browse our website, certain technical data may be collected automatically:

• Browser type and device information
• IP address (used for fraud prevention and to enforce U.S.-only shipping)
• Pages viewed and time spent on the site
• Cookies and similar tracking technologies (including a session cookie for cart contents and an authentication cookie if you sign in)
• Referral source (if you arrived via an affiliate link, the partner's referral code may be stored in a first-party cookie for up to 60 days for commission attribution)

What We Do Not Collect

We do not collect Social Security numbers, biometric data, precise geolocation data, or any data from anyone who has not voluntarily provided it. We do not knowingly collect any data from individuals under 21.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill orders accurately
• Verify that account holders are 21 years of age or older (research-use attestation)
• Provide customer support and respond to inquiries
• Send order confirmations, shipping updates, tracking information, and (if you opted in) newsletters and promotional offers
• Issue and validate one-time-use discount codes
• Track affiliate referrals and pay partner commissions
• Improve website performance, usability, and user experience
• Detect and prevent fraud or unauthorized activity
• Comply with applicable legal obligations

Newsletter / Marketing Email. We will only email you marketing content if you explicitly opted in (newsletter checkbox on signup, or the welcome-offer popup). You can unsubscribe at any time using the link in any marketing email or by contacting us; we honor every opt-out request immediately.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

3. Data Security

We take data protection seriously. Your information is safeguarded through industry-standard security measures, including:

• SSL/TLS encryption on all pages
• PCI-compliant payment processing; we never store full credit card numbers, CVVs, or banking credentials on our servers
• Access controls limiting data to authorized personnel only

While no online system is completely immune to threats, Verapep takes all reasonable precautions to minimize risk to your data.

4. Cookies & Tracking Technologies

Our website uses cookies and related technologies to:

• Remember your preferences, cart contents, and settings
• Improve site performance and page-load times
• Monitor traffic patterns and analyze site usage

You can disable cookies through your browser settings. Please note that doing so may affect certain website functionality, such as cart persistence.

5. Third-Party Services

We rely on a small number of trusted third-party services to operate the site. These providers receive only the minimum data necessary to perform their function and are contractually prohibited from using your information for any other purpose:

• Supabase: Hosts our user authentication system and stores your account profile (name, email, hashed password, DOB, researcher type, attestation status, favorites). U.S. data centers, SOC 2 compliant.
• Snipcart: Processes shopping cart, checkout, and payment. Stores order history and shipping addresses for fulfillment.
• Google: If you sign in via "Continue with Google," Google shares your name, email address, and profile picture with us. We do not receive your Google password.
• Google Maps Platform: Powers the address autocomplete on our checkout page.
• Brevo (Sendinblue): Sends transactional emails (order confirmations, shipping notifications, password resets) and, only if you opted in, marketing newsletters.
• USPS / UPS / shipping carriers: Receive your name and shipping address to deliver your order.

We do not integrate third-party advertising networks or sell data to data brokers.

6. Your Rights & Choices

Depending on your jurisdiction, you may have rights regarding your personal data:

• Access: Request details about the data we hold about you
• Correction: Ask us to fix inaccurate or incomplete data
• Deletion: Request removal of your data, subject to legal retention requirements
• Opt-Out: Choose not to receive non-essential communications

To exercise any of these rights, email support@verapep.com. We will respond within a reasonable timeframe. We may be required to retain certain records for legal, regulatory, or fraud-prevention purposes even after account or data deletion.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.

8. Policy Updates

We may revise this Privacy Policy periodically to reflect changes in law, operations, or our data practices. When updates occur, the "Effective Date" at the top of this page will be updated. Continued use of our website constitutes acceptance of any changes.