Privacy policy

We collect what an order needs and almost nothing else. There is no analytics on this site, no advertising pixel, no social tracking script, and no cookie until you do something that requires one. We checked, rather than assuming, and the detail below says exactly what we found.

Boreal Peptides operates from West Vancouver, British Columbia, and this policy covers this website and the orders placed through it.

When you just read the site, we collect nothing. No account, no cookie, no analytics event. Our web host records standard server logs, which is true of every website and is described further down.

When you place an order, WooCommerce collects what the order needs: your name, your billing and shipping address, your email address, your telephone number if you give one, the items and quantities you ordered, and the order total. Your payment card details go to the payment provider, never to us. We do not see, store or process card numbers.

When you create an account, we store your username, your email address, an encrypted form of your password, and the addresses you save for reuse. We never see your password in readable form.

When you use a contact form, the form sends us the fields you filled in, by email. The forms on this site are Contact Form 7, which by default emails a submission rather than storing it in the website’s database.

When you email us or start a chat, we hold that conversation so we can answer it and so we can find it again if you ask a follow-up.

We do not ask for, and have no use for, your date of birth, your government identification, your health information, your employer, or anything about what you intend to do with a compound.

Plainly, because most privacy policies bury this:

• No Google Analytics, and no analytics of any other kind. There is no analytics plugin on this site and no measurement script on any page.
• No advertising pixels. No Meta pixel, no Google Ads tag, no TikTok pixel, no conversion tracking.
• No profiling and no automated decision-making. Nothing on this site scores you, segments you, or decides anything about you automatically.
• No selling or renting your data. Not to advertisers, not to data brokers, not to anyone.
• No sharing with other peptide sellers, suppliers or laboratories. Your order is not passed on.
• No embedded social widgets. The share buttons on our pages are ordinary links. Nothing loads from a social network until you click one, and then you are on their site under their rules.

There is a separate cookie policy with the full detail. In summary: no cookie is set when you first arrive. Cookies appear only when you add something to the cart, log in, or take another action that cannot work without one, and every cookie the site sets is functional.

We keep this list short on purpose, and everyone on it is here because the site cannot run without them.

Google Fonts is worth naming explicitly, because it is the one thing on this site that contacts a third party on an ordinary page view. Our pages request two typefaces from fonts.googleapis.com, and making that request discloses your IP address and basic browser information to Google. Nothing else on a normal page reaches outside this website.

Some of these providers operate outside Canada, which means your information may be stored or handled in another country and may be accessible to that country’s authorities under its own laws.

• Order records: kept for as long as we are required to keep business and tax records, and then deleted. Order history is also what lets us answer a question about a batch you received.
• Account details: kept until you ask us to close the account.
• Contact form and email correspondence: kept while the matter is open and for a reasonable period afterwards, then deleted.
• Server logs: kept by our host on their own retention schedule.

Canadian federal privacy law governs how a business handles personal information in the course of commercial activity, and British Columbia has its own provincial privacy legislation. Under those laws you can:

• Ask what we hold about you, and get a copy of it.
• Ask us to correct it if it is wrong or incomplete.
• Withdraw consent for uses that are not required to complete an order or to meet a legal obligation.
• Ask us to delete what we are not legally required to keep.
• Complain, first to us, and then to the Office of the Privacy Commissioner of Canada if you are not satisfied with how we handled it.¹

Ask through any of the contact routes on our contact page. We will not charge you for a request and we will not make you explain why you are asking.

The site runs over HTTPS, so traffic between your browser and this site is encrypted. Passwords are stored in hashed form and cannot be read back, by us or by anyone with database access. Card details never reach our systems.

We are not going to tell you your data is perfectly safe, because no website can honestly say that. What we can say is what we hold, which is little, and who can reach it, which is few.

This site is not intended for children and we do not knowingly collect information from them. If you believe a child has given us information, tell us and we will delete it.

If this policy changes in a way that affects what we collect or who can see it, we will change the effective date at the top and describe what changed. We will not quietly widen it.

1. Office of the Privacy Commissioner of Canada. https://www.priv.gc.ca/en/