Privacy Policy.

What we collect.

When you place an order, we receive your name, shipping and billing addresses, email address, and phone number. When you contact us through the site contact form, email, or messenger applications, we receive your name, email, and the message contents. When you visit the site, our hosting and analytics infrastructure record your IP address, device and browser data, the pages you view, the time you spend on each page, and the source that referred you. We use cookies and a third-party web analytics provider to capture this browsing data.

We do not collect or store payment card numbers. Card payments are routed through a PCI DSS-compliant third-party payment processor that holds card data on its own infrastructure. Interac e-Transfer payments pass through your financial institution; we receive only confirmation of receipt and your associated email address. Cryptocurrency payments are processed through a self-hosted payment server; we receive on-chain payment data and the customer’s chosen email contact.

Why we collect it.

We use this information to process your orders, ship them, communicate with you about order status, respond to support requests, prevent fraud, comply with our legal obligations under Canadian tax and corporate law, and improve the site over time. We do not use your information for unsolicited marketing, and we do not send promotional email unless you have explicitly subscribed to our newsletter.

Who we share it with.

We share information only with the service providers necessary to fulfill orders and operate the site. These include shipping carriers, our card payment processor, our hosting infrastructure providers, our email service provider, our newsletter platform (for subscribers only), and a web analytics provider. Each of these providers is contractually bound to protect your information and use it only to deliver services to us.

We may also disclose information if required by law, court order, or a government regulator, or where necessary to protect our rights, your safety, or the safety of others.

We periodically review and update our list of service providers. The categories of providers and the types of data shared with each category remain governed by this policy regardless of which specific provider in each category is currently engaged.

We do not sell, rent, or trade your personal information.

How we keep it safe.

The site uses TLS encryption for all data in transit. Customer data sits on managed hosting infrastructure with daily automated backups, firewall protection, and active intrusion monitoring. Cryptocurrency private keys are stored in an encrypted wallet on operator-controlled infrastructure; only the public extended key (xpub) is held on our payment server. No system is fully secure, and we cannot guarantee absolute protection — but we apply standard industry safeguards proportionate to the sensitivity of the data.

Cookies and analytics.

The site sets essential cookies required for cart, checkout, and age verification, plus analytics cookies from a third-party web analytics provider. Analytics cookies anonymize IP addresses and report aggregated traffic patterns to us. You can disable cookies in your browser; some site features (cart, checkout) will not work without them. Most analytics providers offer browser-level opt-out tools — consult your browser settings or the analytics provider’s documentation for opt-out options.

How long we keep records.

Order records are retained for seven years to satisfy Canadian tax recordkeeping requirements. Customer service correspondence is retained for three years. Newsletter subscriber records are retained until you unsubscribe. After applicable retention periods, records are deleted or anonymized.

Your rights.

You may request a copy of the personal information we hold about you, ask us to correct anything inaccurate, ask us to delete your information (subject to our legal retention obligations), or withdraw your consent to our processing at any time. To make a request, email support@roninpeptides.ca with the subject “Privacy Request.” We respond within 30 days.

Age requirement.

The site is restricted to adults 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from a minor, we delete it.

Cross-border data.

The site is operated from Canada, and your information is stored on Canadian infrastructure. If you access the site from outside Canada, your information will be transferred to Canada for processing. Canadian privacy law may differ from the law of your jurisdiction.

Changes.

We may revise this policy. The effective date at the top of this page reflects the most recent change. Material changes will be announced on the site for 30 days before taking effect.