Privacy Policy

Pepmod (“we,” “us,” or “our”) respects your privacy. This policy explains what data we collect, how we use it, who we share it with, and the rights you have over it. By using pepmod.com or buying from us, you agree to the practices described here.

1. What we collect

We collect three categories of information:

Information you provide directly - when you place an order, this includes your name, email address, shipping address, and the payment details required by our payment processor (we never store full card numbers ourselves).

Information collected automatically - browser type, device type, referring URL, IP address, time of visit, and pages viewed. We collect this through Vercel Analytics for traffic measurement.

Compliance records - because our products are sold for research use only, we store the IP address, user agent, and timestamp associated with the acknowledgements you confirm at checkout (age 18+, research-use-only). These records are retained for legal and regulatory purposes.

2. How we use it

• Fulfill your orders, including shipping, tracking, and customer service.
• Send transactional email - order confirmations, shipping notifications, and replies to inquiries.
• Send occasional product announcements or research updates if you have opted in.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with legal obligations including tax, recordkeeping, and law-enforcement requests where required.
• Improve the site through aggregate analytics on traffic and feature usage.

3. Who we share it with

We share data only with service providers necessary to operate the business, each bound by their own privacy agreements:

• Payment processors - to authorize and capture payment. Card details go directly to them, not to us.
• Email delivery (Resend) - to send transactional and marketing email from hello@pepmod.com.
• Hosting and analytics (Vercel) - for site delivery and aggregate traffic measurement.
• Address autocomplete (Mapbox) - when you type in the checkout address field. Only the keystrokes you enter are sent.
• Shipping carriers - USPS or equivalent, to deliver your order. They receive name and shipping address.
• Legal authorities - only when required by valid legal process (subpoena, court order, etc).

We do not sell your personal information to advertisers or data brokers.

4. Cookies and analytics

We use a small number of cookies and local-storage entries for essential site functionality (your cart contents, your theme preference, your acknowledgement of UTM attribution). Vercel Analytics records anonymized traffic data. We do not use third-party advertising trackers or cross-site fingerprinting.

5. Your rights

You can, at any time:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your account information, subject to legal retention requirements (orders, acknowledgements).
• Unsubscribe from marketing email using the link in any marketing message we send.
• Object to or restrict certain processing of your data.

To exercise any of these rights, email hello@pepmod.com. We respond within 30 days. California, Colorado, Virginia, and Connecticut residents have additional rights under their respective state privacy laws.

6. Data retention

Order records and research-use acknowledgements are retained for a minimum of seven years to comply with tax and regulatory recordkeeping. Marketing-related data is retained until you opt out. Analytics data is aggregated and anonymized after 90 days.

7. Security

All traffic to pepmod.com is encrypted in transit (HTTPS). Card details are handled exclusively by our PCI-compliant payment processors and never touch our servers. We apply industry-standard security practices but no system is perfectly secure, and we cannot guarantee against unauthorized access.

8. International data transfers

We currently ship only within the United States and Canada. Our service providers may process data outside your country of residence. Where required, those transfers are governed by standard contractual clauses or equivalent safeguards.

9. Children

Pepmod is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, contact us and we will delete it.

10. Changes

We may update this policy as the business evolves. Material changes will be noted with a new “last updated” date and, where appropriate, communicated by email to customers on file. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact

Questions, requests, or privacy concerns: hello@pepmod.com.