Privacy Policy
This Privacy Policy explains how BNM Research Peptides LLC, doing business as BNM Research Peptides ("we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit bnmresearchpeptides.com (the "Site"), create an account, place an order, or otherwise interact with us.
This Policy forms part of our Terms of Service. If you do not agree with it, please do not use the Site.
Contents
- Information we collect
- How we use information
- Legal bases for processing
- How we share information
- Cookies and tracking
- Data retention
- Security
- Your rights — general
- California privacy rights (CCPA/CPRA)
- EU and UK privacy rights (GDPR)
- Children's privacy
- International visitors and transfers
- Changes to this policy
- Contact us
1. Information we collect
1.1 Information you provide
- Account and identity information — name, email address, telephone number, password, and your age confirmation.
- Buyer qualification information — the institution, laboratory, or business on whose behalf you purchase; your role; and any documentation you provide to support account verification.
- Research use affirmations — the covenant you affirm at checkout, together with the date, time, and IP address at which it was given.
- Order and transaction information — items ordered, quantities, order value, purchase order references, billing and shipping addresses.
- Payment information — processed by our payment provider. We receive confirmation of payment and limited details such as the card brand and last four digits. We do not store full payment card numbers on our systems.
- Communications — the content of emails, web form submissions, and other correspondence you send us, including any records we retain of enquiries we decline to answer.
1.2 Information collected automatically
- Device and connection data — IP address, browser type and version, operating system, device identifiers, language settings.
- Usage data — pages viewed, referring page, time and duration of visits, links clicked, and the record of your acknowledgement of the research use notice on entry.
- Cookies and similar technologies — see Section 5.
1.3 Information from third parties
- payment processors (transaction confirmations, fraud and risk signals);
- shipping carriers (delivery status, address validation);
- fraud prevention and identity verification providers, where used;
- referral partners, where you reached us through a partner link.
We do not collect health information, and we do not want it. Please do not send us information about any medical condition, treatment, or personal circumstance. Our materials are laboratory reagents and such information is neither relevant nor appropriate to any order.
2. How we use information
| Purpose | What this involves |
|---|---|
| Fulfilling orders | Processing payment, releasing lots, arranging shipment, issuing documentation, handling claims. |
| Buyer verification | Confirming age, affiliation, eligibility, and location before releasing a first order, and reviewing accounts periodically. |
| Compliance record-keeping | Retaining research use affirmations, order records, and lot documentation so we can demonstrate the basis on which each sale was made. |
| Customer support | Responding to enquiries about orders, accounts, quotes, and documentation. |
| Fraud prevention and security | Detecting and preventing fraudulent orders, unauthorised access, misrepresentation, and misuse of the Site. |
| Legal obligations | Tax and accounting records, responding to lawful requests from regulators or law enforcement, establishing or defending legal claims. |
| Site operation and improvement | Maintaining, securing, and improving the Site and our catalog. |
| Communications | Sending order confirmations, shipping notices, documentation, and — where you have opted in — catalog and stock updates. |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use personal information to make decisions producing legal or similarly significant effects by solely automated means.
3. Legal bases for processing
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:
| Basis | Applies to |
|---|---|
| Performance of a contract | Creating your account, processing and shipping orders, providing support. |
| Legal obligation | Tax and accounting records; responding to lawful regulatory or law-enforcement requests. |
| Legitimate interests | Verifying buyer eligibility, preventing fraud and misuse, securing the Site, maintaining compliance records demonstrating research-use basis of sale, and improving our services. We balance these against your rights and interests. |
| Consent | Optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting prior processing. |
4. How we share information
We share personal information only as follows:
- Service providers acting on our instructions — payment processing, web hosting, order and inventory management, email delivery, shipping and logistics, fraud prevention, and professional advisers. They are permitted to use the information only to provide services to us.
- Shipping carriers — name, delivery address, and contact details necessary to deliver your order.
- Legal and regulatory disclosure — where required by law, subpoena, court order, or lawful request, or where we believe disclosure is necessary to investigate a suspected breach of our Research Use Policy, to prevent harm, or to establish, exercise, or defend legal claims.
- Business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to equivalent protection.
- With your direction or consent — where you ask us to share information with a third party.
We do not disclose personal information to referral partners beyond aggregated, non-identifying commission data.
5. Cookies and tracking
We use the following categories of cookies and similar technologies:
| Category | Purpose | Can you disable? |
|---|---|---|
| Strictly necessary | Session management, cart contents, security, load balancing, and recording your acknowledgement of the research use notice. | No — the Site will not function without these. |
| Functional | Remembering preferences such as language or saved account details. | Yes |
| Analytics | Understanding aggregate traffic and Site performance. [DESCRIBE PROVIDER OR DELETE THIS ROW IF NOT USED] | Yes |
We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings; blocking strictly necessary cookies will prevent the Site from working. Because there is no consensus standard, we do not currently respond to browser "Do Not Track" signals, but we do honour Global Privacy Control signals as an opt-out request where applicable law requires it.
6. Data retention
We retain personal information for as long as necessary for the purposes described above, and then delete or anonymise it. Indicative periods:
| Category | Retention period |
|---|---|
| Order and transaction records | [X] years, to meet tax and accounting obligations |
| Research use affirmations and buyer verification records | [X] years from the last order, to evidence the basis on which each sale was made |
| Account information | Duration of the account, plus [X] months after closure |
| Support correspondence | [X] years from last contact |
| Site logs and analytics | [X] months |
We may retain information longer where required by law or where necessary to establish, exercise, or defend legal claims.
7. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls limiting staff access to what is necessary, use of PCI-compliant payment processors, and periodic review of our providers.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.
8. Your rights — general
Subject to applicable law, you may request to access, correct, delete, or receive a portable copy of your personal information, and you may object to or ask us to restrict certain processing. You may also opt out of marketing emails at any time using the unsubscribe link or by contacting us.
To make a request, email orders@bnmresearchpeptides.com. We will verify your identity before acting — typically by confirming control of the email address on the account, and for higher-risk requests by asking for additional information matching our records. We respond within the timeframe required by applicable law.
Some information cannot be deleted on request. In particular, we are required to retain order records for tax purposes, and we retain research use affirmations and buyer verification records as part of our compliance obligations and to establish or defend legal claims. We will explain if an exemption applies to your request.
9. California privacy rights (CCPA/CPRA)
This section applies to California residents and supplements the rest of this Policy.
9.1 Categories collected in the past 12 months
| Category (Cal. Civ. Code § 1798.140) | Collected | Source | Disclosed for a business purpose to |
|---|---|---|---|
| A. Identifiers (name, email, address, IP, account ID) | Yes | You; automatically | Payment, hosting, shipping, fraud prevention providers |
| B. Customer records (contact details, payment confirmation) | Yes | You; payment processor | Payment, shipping, accounting providers |
| C. Protected classification characteristics (age — 21+ confirmation only) | Yes | You | Not disclosed except as required by law |
| D. Commercial information (orders, quotes, history) | Yes | You | Order management, accounting providers |
| F. Internet or network activity | Yes | Automatically | Hosting, analytics, security providers |
| G. Geolocation (approximate, from IP) | Yes | Automatically | Fraud prevention, shipping eligibility |
| I. Professional or employment information (institution, role) | Yes | You | Not disclosed except as required by law |
| E. Biometric information | No | — | — |
| H. Sensory data (audio, visual) | No | — | — |
| J. Education information | No | — | — |
| K. Inferences / profiles | No | — | — |
9.2 Sensitive personal information
We collect account log-in credentials, which are treated as sensitive personal information. We use them only to authenticate and secure your account — a purpose exempt from the right to limit under § 1798.121. We do not collect precise geolocation, government identifiers, racial or ethnic origin, religious beliefs, union membership, genetic or biometric data, health information, or information about sex life or sexual orientation.
9.3 No sale or sharing
We do not sell personal information, and we have not sold personal information in the preceding 12 months. We do not share personal information for cross-context behavioural advertising. We do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age; in any event, our Site is restricted to persons 21 and over.
9.4 Your California rights
- Right to know — the categories and specific pieces of personal information we collected, the sources, our purposes, and the categories of recipients.
- Right to delete — subject to statutory exemptions, including our need to complete a transaction, detect security incidents, comply with legal obligations, and exercise or defend legal claims.
- Right to correct — inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing — not applicable, as we do neither.
- Right to limit use of sensitive personal information — not applicable, as our use falls within the statutory exemption.
- Right to non-discrimination — we will not deny service, charge different prices, or provide a different level of quality because you exercised a right.
Submit a request by emailing orders@bnmresearchpeptides.com with the subject line "California Privacy Request." We will confirm receipt within 10 business days and respond within 45 days, extendable by a further 45 days with notice. You may use an authorised agent, who must provide written permission and whose authority we may verify with you directly.
9.5 Shine the Light
California Civil Code § 1798.83 permits residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.
10. EU and UK privacy rights (GDPR)
This section applies where the EU GDPR or UK GDPR governs our processing of your personal information.
Controller. BNM Research Peptides LLC, 732 W Kingman Dr, Casa Grande, AZ 85122, United States, is the controller. Contact: orders@bnmresearchpeptides.com. We have not appointed an EU or UK representative under Article 27; if our activities change such that one is required, this Policy will be updated. We have not appointed a Data Protection Officer, as we are not required to do so.
10.1 Your rights
- Access — obtain confirmation of whether we process your data and a copy of it.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have data deleted where one of the grounds in Article 17 applies.
- Restriction — have processing restricted in the circumstances set out in Article 18.
- Portability — receive data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
- Object — object at any time to processing based on legitimate interests, including profiling, and to direct marketing (which we will always honour).
- Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Lodge a complaint — with your national supervisory authority, or with the UK Information Commissioner's Office (ico.org.uk) if you are in the United Kingdom. We would appreciate the chance to address your concern first.
We respond to requests within one month, extendable by two further months for complex requests, and will tell you if an extension applies. There is no fee unless a request is manifestly unfounded or excessive.
10.2 International transfers
We are established in the United States and personal information is processed there. Where we receive personal information from the EEA, UK, or Switzerland, transfers are made on the basis of the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), supplemented by technical and organisational measures. You may request a copy of the relevant safeguards by contacting us.
10.3 Automated decision-making
We do not carry out automated decision-making producing legal or similarly significant effects. Our buyer verification involves human review. Fraud-prevention tools may flag an order for review, but a person makes the final decision, and you may contact us to contest any decision to decline an order.
10.4 Statutory or contractual requirement
Provision of account, verification, and research use affirmation data is a contractual requirement and a condition of sale. Without it we cannot verify your eligibility and cannot supply you.
11. Children's privacy
The Site is not directed to children, and purchasers must be at least 21 years of age. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, contact orders@bnmresearchpeptides.com.
12. International visitors and transfers
The Site is operated from the United States and is intended for United States buyers. We do not ship internationally. If you access the Site from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection law may differ from that of your jurisdiction.
13. Changes to this policy
We may update this Policy from time to time. The effective date at the top indicates when it was last revised. Where changes are material we will provide prominent notice on the Site and, where required, notify you directly. Continued use of the Site after changes take effect constitutes acceptance.
14. Contact us
BNM Research Peptides LLC
Attn: Privacy
732 W Kingman Dr
Casa Grande, AZ 85122, United States
Email: orders@bnmresearchpeptides.com
Telephone: 480-790-3420 (Monday–Saturday, 8:00 AM–5:00 PM MST)