Privacy Policy

Effective and last updated: July 29, 2026

1. Scope and our privacy commitment

This Privacy Policy explains how Peptas.com collects, uses, stores, discloses, and protects personal data. It applies to Site visitors, account holders, prospective customers, customers, consignees, payers, institutional contacts, suppliers, and people who communicate with us. It should be read with any shorter Personal Information Collection Statement shown at the point where information is requested.

For purposes of Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486), the data user is Ikigai Corporation Limited, a company registered in Hong Kong (Business Registration No. 69705679) with registered office at Room 1213, 12/F., Tower A, Hunghom Commercial Centre, 39 Ma Tau Wai Road, Hunghom, Kowloon, Hong Kong, which owns and operates Peptas.com and determines the purpose and manner of the relevant processing. Operator details are also stated on the Regulatory Information page. Privacy questions and requests can be sent to info@peptas.com.

We seek to follow the Data Protection Principles concerning purpose and manner of collection, accuracy and retention, use, security, openness, and access and correction. We collect data that is reasonably necessary for genuine business and legal purposes, explain those purposes, and do not sell sensitive research-order information as a business model.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories:

• Identity and contact data: name, title, age or confirmation of age, organization, department, professional role, billing and delivery addresses, email address, telephone number, and preferred language.
• Account and authentication data: username, encrypted or hashed password information maintained by the Site platform, account preferences, login history, security events, and verification status.
• Order and research-context data: Products viewed or ordered, quantities, quotation requests, order numbers, lawful intended-use statements, end-user and consignee information, permit or licence details, institutional affiliation, shipping instructions, returns, complaints, and customer-service correspondence.
• Transaction data: payment method type, payment status, currency, invoice information, limited payment references, fraud-screening results, refunds, and chargeback records. Full card credentials are generally entered into and handled by a payment processor rather than intentionally stored by Peptas, but the processor may return a token, card brand, last digits, or risk result.
• Technical and usage data: internet protocol address, device and browser information, operating system, approximate location inferred from network data, referral source, pages viewed, searches, interactions, timestamps, cookie identifiers, and diagnostic logs.
• Compliance and security data: identity evidence, sanctions or fraud review information, business registration information, import and export documentation, communications about prohibited use, and records needed to investigate misuse, safety, or legal obligations.
• Communications and marketing data: messages, attachments, survey responses, consent choices, subscription status, support history, and records of requests not to receive direct marketing.
• Business and partnership enquiry data: when you submit a business or partnership enquiry, organisation type, country or territory of registration, organisation website, job title or role, business telephone number, research area or field of activity, and, where provided, company registration or VAT number.

We do not ask you to send health information, clinical data, patient records, or information about personal use of research materials. Do not include such data in an order note or support message. If you send unnecessary sensitive information, we may delete, restrict, or retain a minimal record as reasonably needed for safety, legal compliance, or incident handling.

3. Sources of personal data

We collect data directly from you when you browse, create an account, place an order, request a quotation, subscribe, contact support, submit documentation, or exercise a right. We may receive data from your employer, institution, purchasing agent, payer, consignee, or colleague when they include you in a transaction. If you provide another person's data, you represent that you are authorized to do so and have given any notice required by law.

4. Why we use personal data

We may use personal data for the following purposes, where reasonably related to the purpose of collection or otherwise permitted by law:

• to operate, secure, troubleshoot, and improve the Site;
• to create and administer accounts and authenticate users;
• to respond to inquiries, prepare quotations, process orders, issue invoices, collect payment, arrange delivery, and provide support;
• to verify age, identity, institutional authority, end use, consignee, destination, licences, sanctions status, and transaction legitimacy;
• to prevent fraud, diversion, prohibited human or veterinary use, security incidents, abuse, and unlawful transactions;
• to manage inventory, testing documentation, batch traceability, complaints, replacements, refunds, recalls, safety notices, and product-quality investigations;
• to comply with tax, accounting, customs, import, export, pharmaceutical, controlled-chemical, court, regulatory, and law-enforcement obligations;
• to establish, exercise, or defend legal claims and enforce Site policies;
• to understand aggregate Site use, improve navigation, measure performance, and maintain consent preferences;
• to send service messages, including order, security, policy, compliance, and delivery notices; and
• to send direct marketing only where the required notice and consent or indication of no objection has been obtained, and always subject to an effective opt-out.

16. Changes and contact

We may update this Privacy Policy when data practices, providers, Products, laws, or Site features change. Material changes will receive an additional notice where appropriate or required. The current version applies prospectively from the displayed effective date. Prior versions may be retained for compliance records.

For privacy questions, access or correction requests, marketing opt-outs, or concerns about a provider, email info@peptas.com. Include your name, relationship to Peptas, relevant order or account reference, jurisdiction, and the specific request. Do not send unnecessary identity documents until we explain a secure verification method.

---

General Legal Provisions Applying to This Policy

The provisions in this section form part of this policy and should be read together with the policy-specific sections above. They are included so that important rules are not left to implication. If a policy-specific provision directly conflicts with a provision in this section, the policy-specific provision controls for the subject covered by that provision.

Definitions and interpretation

In these provisions, "Peptas," "we," "us," and "our" mean the person or entity that owns and operates Peptas.com and supplies the relevant products or services as identified in the written quotation, the order confirmation, the invoice, or legally required business information displayed on the Site. "Site" means Peptas.com and any page, account area, form, communication, or digital service operated under that domain.

Governing law and dispute resolution

Except where mandatory law requires otherwise, this policy and non-contractual obligations connected with it are governed by the laws of the Hong Kong Special Administrative Region, without applying rules that would select another jurisdiction's law. The courts of Hong Kong have exclusive jurisdiction, subject to any mandatory right you have to bring a claim elsewhere and either party's right to seek urgent interim relief in a court with authority to grant it.