Heavenly Peptides
Last Updated: 1 September 2026

Heavenly Peptides (“Heavenly Peptides“, “we“, “us” or “our“) respects your privacy and is committed to protecting the personal information we collect and hold.

This Privacy Policy explains how we collect, use, disclose, store, protect and otherwise handle personal information when you:

• visit our website;
• create an account;
• purchase or enquire about our products;
• contact us;
• subscribe to communications;
• interact with our website, advertisements or social-media channels; or
• otherwise interact with Heavenly Peptides.

This Privacy Policy should be read together with our Terms & Conditions, Shipping & Tracking Policy and Returns & Refunds Policy.

Where applicable, we handle personal information in accordance with the relevant laws of Wyoming, USA.

If you are located outside the USA, additional privacy laws may apply to our handling of your personal information depending on your location and the circumstances of our activities.

---

1. WHO WE ARE

The entity responsible for the handling of personal information under this Privacy Policy is:

Heavenly Peptides

Legal entity: Plexus Labs LLC
Business/trading name: Heavenly Peptides
Email: privacy@heavenlypeptides.store
Website: www.heavenlypeptides.store

For privacy enquiries, please contact us using the details above.

---

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected through:

• our website;
• online checkout;
• customer accounts;
• email;
• telephone;
• customer-service communications;
• contact forms;
• order forms;
• subscription forms;
• surveys;
• promotions;
• social-media interactions;
• cookies and similar technologies;
• third-party platforms used to operate our business; and
• other lawful interactions between you and Heavenly Peptides.

This Privacy Policy does not necessarily apply to third-party websites, applications or services that we do not control.

---

3. WHAT IS PERSONAL INFORMATION?

“Personal information” generally means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information is recorded in material form or not.

Depending on how you interact with us, personal information may include:

• name;
• postal address;
• billing address;
• delivery address;
• email address;
• telephone number;
• organisation or business name;
• job title or position;
• account username;
• order history;
• transaction information;
• payment-related information;
• shipping and tracking information;
• customer-service communications;
• correspondence;
• enquiry information;
• preferences;
• marketing preferences;
• website interaction information;
• IP address;
• browser type;
• device information;
• approximate location information;
• cookies and online identifiers;
• information you voluntarily provide through forms or communications; and
• information reasonably necessary to verify an order or transaction.

---

4. SENSITIVE INFORMATION

We generally do not seek to collect sensitive information about customers.

Sensitive information may include information relating to matters such as:

• health;
• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade-union membership;
• sexual orientation;
• criminal record; and
• certain biometric or genetic information.

You should not provide sensitive information to us unless it is reasonably necessary for the matter for which you are contacting us and we are legally permitted to collect it.

If you voluntarily provide sensitive information, we will handle it in accordance with applicable privacy laws.

Where consent is required for the collection, use or disclosure of sensitive information, we will obtain consent as required by law.

---

5. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

Directly from you

For example, when you:

• create an account;
• place an order;
• enter information during checkout;
• subscribe to our mailing list;
• submit a contact form;
• request customer support;
• contact us by email or telephone;
• participate in a promotion or survey; or
• otherwise provide information to us.

Automatically

We may automatically collect certain technical and usage information when you interact with our website.

This may include:

• IP address;
• browser information;
• operating system;
• device type;
• pages viewed;
• referring website;
• approximate geographic information;
• website navigation;
• session information;
• timestamps;
• interaction data; and
• other technical information.

From third parties

We may receive information from third parties such as:

• payment processors;
• fraud-prevention providers;
• shipping and logistics providers;
• fulfilment providers;
• website-hosting providers;
• ecommerce platforms;
• analytics providers;
• advertising platforms;
• customer relationship management providers;
• email-service providers;
• identity or verification providers; and
• business partners.

We will only collect personal information from third parties where permitted by applicable law.

---

6. WHY WE COLLECT PERSONAL INFORMATION

We collect personal information for purposes including:

Orders and transactions

To:

• process purchases;
• confirm orders;
• process payments;
• arrange fulfilment;
• arrange shipping;
• provide tracking information;
• manage returns and refunds;
• communicate about orders; and
• maintain transaction records.

Customer service

To:

• respond to enquiries;
• provide customer support;
• investigate complaints;
• resolve disputes;
• communicate with customers; and
• improve our services.

Website operation

To:

• operate and maintain the website;
• authenticate accounts;
• personalise website functionality;
• diagnose technical problems;
• prevent abuse; and
• maintain website security.

Business administration

To:

• maintain financial records;
• conduct accounting;
• conduct auditing;
• manage business relationships;
• undertake internal administration;
• manage risk;
• protect our legal rights; and
• comply with applicable laws.

Fraud and security

To:

• detect suspicious transactions;
• prevent fraud;
• protect accounts;
• investigate security incidents;
• prevent unauthorised access; and
• protect customers and our business.

Regulatory compliance

We may collect and use information where reasonably necessary to:

• comply with legal obligations;
• respond to lawful requests from authorities;
• comply with court orders;
• comply with customs requirements;
• comply with sanctions and trade restrictions;
• verify transactions;
• investigate suspected unlawful activity; and
• meet other regulatory obligations.

Marketing

Subject to applicable law, we may use contact information to send:

• product announcements;
• company news;
• research-related information;
• promotions;
• offers;
• educational content; and
• other marketing communications.

You can opt out of marketing communications at any time.

---

7. RESEARCH-USE-ONLY CUSTOMER INFORMATION

Heavenly Peptides supplies products strictly for legitimate research purposes.

We may collect information reasonably necessary to establish whether a transaction is legitimate and permitted under our Terms & Conditions and applicable law.

Depending on the circumstances, this may include:

• organisation name;
• institutional affiliation;
• business details;
• research-related information;
• shipping destination;
• transaction history;
• information concerning the intended lawful research purpose; and
• information necessary to verify eligibility to purchase.

We do not request medical information merely because you purchase an RUO product.

Customers should not provide us with medical histories, diagnoses, treatment information or other health information unless we specifically request it and there is a lawful reason for doing so.

---

8. LEGAL BASES AND AUTHORITIES FOR PROCESSING

Where Australian privacy law applies, we handle personal information in accordance with the Privacy Act and applicable APPs.

Depending on the circumstances, collection, use or disclosure may be based on:

• your consent;
• performance of a contract with you;
• steps taken at your request before entering a contract;
• compliance with a legal obligation;
• protection of our legitimate business interests where permitted by law;
• fraud prevention and security;
• resolution of disputes; or
• another lawful basis available under applicable legislation.

Where a particular law requires consent, we will seek consent as required.

---

9. PAYMENT INFORMATION

Payments may be processed through third-party payment providers.

We generally do not need to retain your complete payment-card number or security code.

Payment providers may collect and process payment information in accordance with their own privacy policies and contractual arrangemen

We recommend reviewing the privacy policies of any payment provider used to complete your transaction.

We may retain limited payment-related information such as:

• transaction amount;
• transaction date;
• payment status;
• payment method;
• transaction identifier;
• billing information; and
• fraud or verification information.

---

10. COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies, pixels, tags, scripts and similar technologies.

These technologies may be used to:

• operate the website;
• maintain sessions;
• remember preferences;
• maintain shopping carts;
• analyse website traffic;
• improve website performance;
• understand customer behaviour;
• prevent fraud;
• provide relevant advertising; and
• measure marketing effectiveness.

Cookies may be:

• strictly necessary;
• functional;
• analytical;
• performance-related; or
• advertising/marketing-related.

You can generally control cookies through your browser settings.

Disabling certain cookies may affect website functionality.

---

11. ANALYTICS

We may use third-party analytics services to understand how visitors use our website.

These services may collect information such as:

• IP address;
• device information;
• browser information;
• pages visited;
• referral information;
• approximate geographic information;
• session activity; and
• website interactions.

Examples may include Google Analytics or other analytics services actually used by our website.

We will update this Privacy Policy if our material analytics practices change.

---

12. ADVERTISING AND MARKETING TECHNOLOGIES

Where permitted by law, we may use third-party advertising and marketing services.

These services may use cookies, pixels or similar technologies to:

• display advertisements;
• measure advertising performance;
• understand website visits;
• create advertising audiences;
• prevent advertising fraud; and
• manage marketing campaigns.

You may be able to control certain advertising preferences through your browser, device settings or the relevant advertising platform.

---

13. EMAIL COMMUNICATIONS

If you subscribe to marketing communications, we may send emails concerning:

• products;
• promotions;
• company announcements;
• research-related information;
• educational material; and
• other information that may be relevant to our customers.

Every marketing email will provide an appropriate method of unsubscribing where required by law.

You may also contact us directly to request removal from marketing communications.

Please note that even if you unsubscribe from marketing, we may continue sending essential transactional communications such as:

• order confirmations;
• invoices;
• shipping notifications;
• account notices;
• security notices; and
• legally required communications.

---

14. WHO WE MAY DISCLOSE PERSONAL INFORMATION TO

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy and where permitted by law.

These parties may include:

Service providers

• website hosts;
• ecommerce platforms;
• cloud-storage providers;
• IT providers;
• software providers;
• customer-service platforms;
• CRM providers;
• email providers;
• analytics providers;
• payment processors;
• fraud-prevention providers;
• shipping providers;
• logistics companies;
• fulfilment providers;
• accounting providers;
• professional advisers; and
• other contractors.

Government and regulatory authorities

We may disclose information to:

• courts;
• government agencies;
• customs authorities;
• law-enforcement agencies;
• regulators;
• tax authorities; and
• other authorities

where required or authorised by law.

Professional advisers

We may disclose information to:

• lawyers;
• accountants;
• auditors;
• insurers;
• consultants; and
• other professional advisers.

Business transactions

If Heavenly Peptides is involved in:

• a merger;
• acquisition;
• sale;
• restructuring;
• financing;
• asset transaction; or
• similar corporate transaction,

personal information may be disclosed to relevant advisers, counterparties and professional service providers, subject to applicable law.

---

15. OVERSEAS DISCLOSURES

Some of our service providers may be located outside USA or may store or process personal information outside the USA.

Depending on the services we use, overseas recipients may be located in countries including:

• Europe
• Asia

For example, overseas processing may occur through cloud-hosting, ecommerce, payment, analytics, email, customer-support or fraud-prevention providers.

We will take reasonable steps required by applicable privacy law in relation to overseas disclosures.

You acknowledge that an overseas recipient may be subject to the privacy laws of its own jurisdiction.

We will update this section if our material overseas disclosure arrangements change.

---

16. HOW WE HOLD AND STORE PERSONAL INFORMATION

Personal information may be stored electronically through:

• secure cloud systems;
• ecommerce systems;
• customer databases;
• accounting systems;
• email systems;
• CRM platforms;
• document-management systems; and
• other business systems.

We take reasonable steps appropriate to the circumstances to protect personal information from:

• misuse;
• interference;
• loss;
• unauthorised access;
• modification; and
• unauthorised disclosure.

Security measures may include:

• access controls;
• authentication;
• encryption where appropriate;
• secure hosting;
• monitoring;
• backups;
• staff access restrictions;
• contractual controls; and
• security procedures.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

---

17. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by law.

Retention periods may depend upon:

• the type of information;
• the purpose for which it was collected;
• contractual requirements;
• accounting requirements;
• tax requirements;
• regulatory obligations;
• dispute-resolution requirements;
• fraud-prevention requirements; and
• legal limitation periods.

When personal information is no longer reasonably required, we may securely delete, destroy or de-identify it, subject to legal and operational requirements.

---

18. ACCESS TO PERSONAL INFORMATION

Subject to applicable law, you may request access to personal information we hold about you.

To request access, contact:

privacy@heavenlypeptides.store

Your request should provide sufficient information to allow us to identify the relevant records and verify your identity.

We may need to request additional information to confirm that you are the person entitled to access the information.

In certain circumstances, applicable law may permit or require us to refuse access or provide access in a limited form.

If we refuse access, we will generally explain the reasons for the refusal and any available review or complaint options, subject to applicable law.

---

19. CORRECTING PERSONAL INFORMATION

We take reasonable steps to ensure that personal information we hold is accurate, complete and up to date where required.

You may request correction of personal information that you believe is inaccurate, incomplete, out of date or misleading.

Requests should be sent to:

privacy@heavenlypeptides.store

If appropriate, we will correct the information within a reasonable period.

If we refuse a correction request where permitted by law, we will generally explain why.

---

20. ANONYMITY AND PSEUDONYMS

Where permitted by law, you may have the option of dealing with us anonymously or using a pseudonym.

However, anonymity or pseudonymity may not be reasonably practicable for certain activities, including:

• placing an order;
• processing payment;
• arranging delivery;
• complying with legal requirements;
• preventing fraud;
• verifying identity; or
• managing certain customer-service matters.

We will not require identification where it is lawful and reasonably practicable for us to deal with you anonymously or pseudonymously.

---

21. UNSOLICITED PERSONAL INFORMATION

If we receive personal information that we did not solicit, we will determine whether we could have lawfully collected that information.

Where applicable privacy law requires us to destroy or de-identify unsolicited personal information, we will do so unless an exception applies.

---

22. DIRECT MARKETING

We may use personal information for direct marketing where permitted by law.

We will provide appropriate opt-out mechanisms.

You may unsubscribe from marketing communications by:

• using the unsubscribe link in a marketing email;
• contacting us at privacy@heavenlypeptides.store; or
• following any other unsubscribe mechanism we provide.

We will process opt-out requests within a reasonable period and as required by applicable law.

---

23. DATA QUALITY

We take reasonable steps to ensure that personal information used or disclosed by us is accurate, complete and up to date where required by law.

You can assist us by notifying us when your personal information changes.

---

24. DATA BREACHES

We maintain procedures designed to identify, assess and respond to suspected data breaches.

Where a Notifiable Data Breaches (NDB) applies and we determine that an eligible data breach has occurred, we will comply with applicable notification requirements.

This may include notifying affected individuals and/or government authorities where legally required.

If you believe your personal information has been compromised through your interaction with us, please contact us promptly.

---

25. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, security or content of third-party websites.

You should review the privacy policy of any third-party website before providing personal information.

---

26. SOCIAL MEDIA

We may maintain accounts or pages on social-media platforms.

Interactions with those platforms may involve the collection of personal information by both Heavenly Peptides and the relevant platform.

The platform’s own privacy policy will apply to information it collects.

We encourage you to review the privacy policies of the relevant social-media services.

---

27. CHILDREN’S PRIVACY

Our products are intended for legitimate research purposes and are not directed toward children.

We do not knowingly seek to collect personal information from children where such collection is prohibited by applicable law.

Our website and purchasing services are intended for individuals who are legally capable of entering into a binding transaction.

If you believe that a child has provided personal information to us improperly, contact us so that we can investigate.

---

28. INTERNATIONAL USERS

If you access our website from outside USA, your personal information may be transferred to, stored in or processed in USA and other countries where our service providers operate.

Privacy protections in those jurisdictions may differ from those in your country.

Where applicable law grants you additional rights, we will comply with those rights to the extent legally required.

---

29. EUROPEAN ECONOMIC AREA, UNITED KINGDOM AND OTHER JURISDICTIONS

Where applicable, individuals in certain jurisdictions may have additional privacy rights.

Depending on the law applicable to you, these may include rights to:

• access personal information;
• correct personal information;
• request deletion;
• restrict processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable supervisory authority.

These rights are subject to applicable legal exceptions and limitations.

If you believe a particular privacy law applies to you and wish to exercise a specific right, contact us using the details in this Privacy Policy.

We will assess your request under the law applicable to the relevant processing activity.

---

30. AUTOMATED DECISION-MAKING

We may use automated systems for purposes such as:

• fraud detection;
• transaction screening;
• website security;
• spam prevention;
• marketing analytics; and
• operational administration.

Where applicable law gives you specific rights concerning automated decision-making or profiling, we will comply with those requirements.

If we use a computer program to make a decision using personal information that could reasonably be expected to significantly affect an individual’s rights or interests, additional privacy-policy disclosures may be required under Australian privacy law from 10 December 2026.

We will update this Privacy Policy as necessary to reflect any such processing.

---

31. YOUR PRIVACY RIGHTS

Depending on the law applicable to you, you may have rights concerning your personal information, including rights to:

• know what information we collect;
• understand how it is used;
• understand who it is disclosed to;
• access your personal information;
• request correction;
• request deletion where applicable;
• object to certain processing;
• withdraw consent where consent is the legal basis;
• opt out of marketing;
• make a privacy complaint; and
• seek review by a relevant privacy regulator.

These rights are not absolute and may be subject to legal exceptions.

---

32. PRIVACY COMPLAINTS

We take privacy complaints seriously.

If you believe that we have mishandled your personal information or breached an applicable privacy law, please contact us first.

Step 1 — Contact Heavenly Peptides

Send your complaint to:

Privacy Officer
Heavenly Peptides
Email: privacy@heavenlypeptides.store

Please include:

• your name;
• contact details;
• details of the issue;
• relevant dates;
• supporting information; and
• the outcome you are seeking.

We will investigate your complaint and respond within a reasonable period.

Where appropriate, we may request additional information to investigate the complaint.

Step 2 — External complaint

If your complaint concerns Wyoming privacy obligations and you are not satisfied with our response, you may contact the relevant authority.

You can obtain information about making a privacy complaint through the relevant government website.

---

33. DISCLOSURE REQUIRED BY LAW

We may disclose personal information where reasonably necessary or required to:

• comply with legislation;
• comply with a court order;
• respond to a lawful government request;
• comply with regulatory requirements;
• prevent or investigate fraud;
• investigate suspected unlawful conduct;
• protect the rights, property or safety of Heavenly Peptides or another person; or
• establish, exercise or defend legal claims.

---

34. BUSINESS TRANSFERS

If our business is sold, merged, restructured, acquired or otherwise transferred, personal information may form part of the transferred business assets.

Where required by applicable law, we will take appropriate measures concerning the handling of personal information during such transactions.

---

35. SECURITY INCIDENTS INVOLVING THIRD-PARTY PROVIDERS

We may rely on third-party service providers to process personal information.

Where we become aware of a security incident involving a provider, we will assess the incident and take reasonable steps required by applicable law.

---

36. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes to our business;
• changes to our technology;
• changes to our service providers;
• changes to international operations;
• changes to privacy practices;
• changes to applicable laws; or
• regulatory guidance.

The updated Privacy Policy will be published on our website with a revised “Last Updated” date.

We encourage you to review this Privacy Policy periodically.

The OAIC recommends that APP privacy policies remain current and be reviewed regularly as an organisation’s information-handling practices change.

---

37. CONTACT US

For privacy questions, access requests, correction requests or complaints, contact:

Heavenly Peptides
Privacy Officer

Email: privacy@heavenlypeptides.store
Website: www.heavenlypeptides.store

---

38. IMPORTANT RUO PRIVACY NOTICE

Heavenly Peptides supplies products strictly for legitimate Research Use Only (RUO) purposes.

We do not intentionally require customers to provide medical histories or health information simply because they purchase research products.

Customers must not provide unnecessary sensitive personal information through product reviews, contact forms, email, order notes or other website functions.

If you inadvertently provide sensitive personal information, contact our Privacy Officer so that we can assess how the information should be handled.

---

39. PRIVACY POLICY ACKNOWLEDGEMENT

By using the Heavenly Peptides website, you acknowledge that you have read this Privacy Policy.

Where consent is required by applicable law, we will obtain consent through an appropriate mechanism rather than relying solely on your use of the website.

---

© 2026 Heavenly Peptides. All rights reserved.