Privacy Policy

Effective May 28, 2026

This Privacy Policy describes how AP Research LLC, a Florida limited liability company doing business as 28 Peptides (“AP Research LLC,” “we,” or “us”), collects, uses, and shares personal information when you visit our website, create an account, place an order, or otherwise interact with us. AP Research LLC is the data controller for personal information processed through the Site. By using the Site you consent to the practices described here.

1. Information we collect

We collect information in the following categories:

• Account information. Name, email address, password (stored as a hash), and any contact information you choose to provide.
• Order information. Items ordered, shipping and billing addresses, order history, and the research-use-only attestation recorded with each order.
• Payment information. Payment-method type and the last few digits or tokenized reference of your card; for manual payments, the reference number you provide. We do not store full card numbers, CVVs, or cryptocurrency private keys — card data is handled directly by our payment processors and tokenized.
• Communications. Messages you send us through support threads or contact forms, and our replies.
• Technical information. IP address, device and browser characteristics, referring URL, pages viewed, and approximate location inferred from IP. Collected through cookies and similar technologies.
• Cookies and similar technologies. Strictly necessary cookies for the cart and session (including a session token and a referral-attribution token), and limited first-party cookies for site functionality.

2. How we use information

• To create and manage your account and authenticate you.
• To process, ship, and support your orders.
• To prevent fraud, abuse, and chargeback misuse; to enforce our Terms; and to maintain security.
• To send transactional emails (order confirmation, shipment, password reset, invoices and receipts, and support replies).
• To operate promotions, store credit, and referral programs that you opt into.
• To comply with applicable law, including sales-tax reporting and recordkeeping requirements.
• To improve the Site and our products and to analyze aggregate usage.

3. How we share information

We do not sell personal information. We share information only as needed to operate the business, namely with:

• Payment processors to authorize and capture payments and detect fraud.
• Shipping carriers and label providers to fulfill and track your order.
• Email service providers to deliver transactional emails.
• Hosting and infrastructure providers that store and process data on our behalf.
• Professional advisors and government authorities when required by law or to protect rights and safety.
• In a business transfer — such as a merger, acquisition, or sale of all or part of the business — information may be transferred to the acquirer.

4. Cookies and analytics

We use first-party cookies that are strictly necessary for the site to function (for example, your cart session and your authenticated session). Where we use analytics or similar technologies in the future, this policy will be updated and we will provide any notices and choices required by law.

5. Data retention

We retain account and order records for as long as needed to provide the service and to comply with legal, accounting, and tax obligations. After that, we delete or anonymize information unless we are required to keep it longer. You may request deletion of your account information as described below.

6. Your rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your information, subject to legal exceptions.
• Opt out of certain processing.
• Not be subject to discrimination for exercising your rights under applicable privacy law.

To exercise these rights, email cs@28peptides.com from the address associated with your account. We may need to verify your identity before responding.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against loss, misuse, and unauthorized access. Passwords are stored as salted hashes; payment-card data is handled directly by PCI-compliant processors and is not stored on our servers. No system is ever perfectly secure, however, and we cannot guarantee absolute security.

8. Children

9. International users

We operate the Site from the United States. If you access the Site from outside the U.S., you understand that your information will be processed in the U.S., which may have different data-protection laws than your home country.

10. Third-party links

The Site may link to third-party websites or services. We are not responsible for those sites' privacy practices. Please review their policies before providing any information.

11. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent revision. We will provide additional notice for material changes where required by law.

12. Contact

Questions about this Privacy Policy or your information? Email cs@28peptides.com or write to us at:

AP Research LLC
d/b/a 28 Peptides
5915 Memorial Hwy, Ste 104A, Town 'N' Country, FL 33615

See also our Terms & Conditions, Refund & Returns policy, and RUO policy.

This is a working draft. Final language pending counsel review.