Legal
Privacy Policy
Last updated July 2026
What we collect
Order details (name, institution, email, shipping address, purchase history) and support correspondence. Payment card data is handled entirely by Stripe and never touches our servers.
What we don't do
We don't sell or rent your data. We don't run third-party ad trackers on this site.
Where it lives
Data is stored with our infrastructure providers (Supabase/PostgreSQL, Stripe) under their security programs. Access is limited to staff who need it for support and fulfillment.
Your rights
Email support@pepthea.com to access, correct, or delete your data. We honor deletion requests within 30 days, except records we must keep for tax or compliance purposes.
Cookies
We use only functional storage: your cart and preferences in your own browser's localStorage, and a session cookie for the staff console. No cross-site tracking cookies.