Cookie Policy and Privacy Choices

Cookie Policy
Effective and last updated: October 17, 2026

This Cookie Policy explains how Peptas.com uses cookies and similar technologies. It should be read with the Privacy Policy, which explains our broader handling of personal data. The exact technologies active during a visit can depend on your choices, browser, location, Site configuration, and whether a feature is enabled.

A cookie is a small text record stored by a browser. Similar technologies include local storage, session storage, software development kits, tags, pixels, scripts, and identifiers used to recognize a browser or remember an action. Some expire when the browser closes; others remain for a defined period or until deleted.

2. Why we use these technologies

We use cookies and similar technologies to serve the Site securely through Cloudflare’s network, protect the contact form and the request-for-quotation forms against automated abuse, store your privacy choices, diagnose errors, understand aggregate use, and, only where you enable the relevant category, support optional functional, analytics, or marketing features.

We do not use a cookie label to hide a different purpose. A technology categorized as necessary should be limited to functions reasonably needed to provide a service you request, maintain security, or remember consent. Optional analytics and marketing technologies should operate only according to the consent or other legal rule applicable to the visitor.

Strictly necessary

These support page delivery and security through Cloudflare’s network, the Cloudflare Turnstile check on the contact form and the request-for-quotation forms, and storage of your cookie choices in the first-party cookie peptas_consent (180 days) and the wp_consent_ mirror cookies (30 days). The Site has no login, basket, checkout, or payment-routing cookies. Blocking necessary technologies through browser settings may stop a form from being submitted. Where law permits, they may be used without optional consent because they are necessary for a requested service or security.

Preferences and functionality

This category is recorded in peptas_consent as functional and is off until you enable it. At present the Site loads no additional cookie or script when it is enabled; the choice is passed to the consent signal described in section 4 so that a future convenience feature would respect it. No account or support feature depends on it.

Analytics and performance

This category is recorded as analytics and is off until you enable it. At present the Site loads no Google Analytics tag in any state: enabling Analytics updates the Google consent-mode signal described in section 4, and disabling it deletes any _ga cookie found on the device. In addition, once you enable Analytics, a web-analytics script from Ahrefs (analytics.ahrefs.com) loads to count visits and technical request data; it is not newly loaded while Analytics is off or while a Global Privacy Control signal is present, and it operates under Ahrefs’s own privacy policy. Withdrawing Analytics consent prevents loading from the next page view; it does not unload a script already loaded on the current page.

Marketing and measurement

This category is recorded as marketing and is off until you enable it. No advertising or campaign-attribution technology is loaded on the Site in any state: enabling Marketing only updates the consent-mode signal, and while Marketing is off the Site deletes any sbjs_ attribution cookie left on the device by the former shop software. A research request and detailed intended-use information should not be used for unrelated targeted advertising. You may change the choice at any time through the “Cookie settings” control in the Site footer. Where a recognized global opt-out preference signal is present, this category stays off whatever the stored choice records.

4. Technologies that may appear

The Site is a static website served through Cloudflare’s network. It is not built on WordPress or WooCommerce, has no user accounts, sign-in, basket, checkout, or online payment, and loads no embedded video, map, or social feature. The technologies present are:

Cloudflare network delivery and caching. Cloudflare processes network and security data to serve the Site and may set its own security cookies on the peptas.com domain where its protection features require them, under its privacy policy.
Cloudflare Turnstile on the contact form and the request-for-quotation forms, which post to a Cloudflare Worker operated for PEPTAS at /api/request (details below).
The PEPTAS consent manager: the first-party cookie peptas_consent (schema v:2, 180 days) holding your yes/no choice for the functional, analytics, and marketing categories; the mirror cookies wp_consent_statistics, wp_consent_functional, wp_consent_preferences, and wp_consent_marketing (30 days); and a Google consent-mode signal (gtag(‘consent’) in the page’s data layer) that mirrors your choice. No Google tag is loaded.
Ahrefs web analytics (analytics.ahrefs.com/analytics.js), loaded to count visits only after you enable the Analytics category.
Links to scientific databases and publications (PubMed, UniProt, EBI, PubChem), which load nothing until you follow them.

The Site’s forms use Cloudflare Turnstile as a strictly necessary anti-abuse control. Turnstile can process technical and interaction signals and issue a short-lived verification token through challenges.cloudflare.com. The token is sent with the form and validated by the Cloudflare Worker before the submission is delivered. Associated security storage or network requests are not used by PEPTAS as optional advertising consent and therefore may operate when optional analytics is rejected. Cloudflare may process the verification under its own privacy policy. Blocking the Turnstile service prevents the contact form and the request-for-quotation forms from being submitted.

5. First-party and third-party cookies

A first-party cookie is associated with the Peptas.com domain. A third-party cookie is associated with another domain whose service is used on the page. The label describes the domain relationship, not whether a cookie is safe, necessary, optional, or privacy-protective.

Third-party providers may act as our processor for some activities and as an independent data user for their own security, billing, legal, or service purposes. Their use is governed by their privacy information and our contract where applicable. We select providers and configure integrations with reasonable care, but we do not control an independent provider’s browser software or policies.

Where the consent banner appears, you may accept all optional categories, reject them, or choose by category. Necessary technologies remain active where allowed. Your choice is recorded in the first-party cookie peptas_consent for 180 days so the banner does not need to ask on every page; optional categories stay off until you enable them. You may reopen the cookie settings through the control in the Site footer and change future choices.

Withdrawing consent does not erase processing that occurred lawfully before withdrawal. It should stop future placement or reading of the affected optional technologies after the preference is applied, subject to technical limits and any independent data already held by a provider. Existing cookies may need to be deleted through the browser if a provider cannot remove them remotely.

Consent must be freely given where required. Rejecting optional cookies does not prevent browsing the Site or submitting the contact form or a request for quotation. We do not treat continued browsing alone as consent where an affirmative choice is required.

7. Browser and device controls

Most browsers let you view, block, or delete cookies; block third-party cookies; clear site data when closing; and limit tracking. Mobile systems may provide advertising-identifier and cross-app tracking controls. Instructions are available in the browser or device help settings.

Blocking all cookies may cause the consent banner to reappear on each visit, because the peptas_consent cookie cannot be stored, and may prevent Cloudflare Turnstile from verifying a form submission. A privacy extension, corporate network, or browser setting may also block scripts before our consent tool can manage them. These outcomes do not mean that Peptas intentionally ignored your choice.

8. Do Not Track and global signals

Browser Do Not Track signals do not have one universally accepted technical or legal meaning. Where a legally recognized opt-out preference signal applies to our processing, we seek to honor it as required. In other cases, use the Site consent controls and browser settings. We will update this policy as standards and legal duties develop.

Cookie-related data may include an identifier, consent choice, internet protocol address, browser, operating system, approximate region, referral source, page, event, session time, and security result. The consent cookies hold only your category choices and the time you made them; a form submission is connected with you by the details you type into it, not by a cookie. Analytics data is ordinarily intended to be aggregated or pseudonymous, but a persistent identifier or IP address can still be personal data under applicable law.

We use such data for the purposes described in this policy and Privacy Policy. We do not ask analytics providers to receive patient data, clinical information, or the substance of private research protocols. Do not place sensitive information in URLs, search fields, or unstructured forms because URLs and event logs can be captured by technical systems.

Session cookies usually expire when the browser session ends. Persistent cookies remain for a stated duration so they can remember a choice or recognize a returning browser. The appropriate period depends on purpose. Security cookies, where Cloudflare sets them, should last only as long as operationally needed; the consent record lasts 180 days (peptas_consent) and 30 days (the wp_consent_ mirrors) so we can respect and document your choice; analytics periods should be configured to avoid unnecessary retention.

The live cookie-settings panel may show individual expiration periods. A provider may retain server-side records under a separate schedule after a browser cookie expires. Our Privacy Policy explains broader retention criteria. Clearing a cookie does not necessarily delete an invoice, security event, consent audit record, or other data retained for a separate lawful purpose.

11. International processing

Technology providers may process identifiers and usage data outside Hong Kong. We use reasonable contractual, technical, and organizational safeguards appropriate to the provider and data, as explained in the Privacy Policy. Optional consent does not by itself replace a transfer safeguard required by law.

The Site has no user accounts or payment forms, so a request for a password, one-time code, or payment credential does not come from this Site; never send such details to someone claiming to be support. Use a trusted Site address and report suspicious activity promptly.

We may deploy additional security technology after a threat. A change made for urgent security may occur before this static policy is updated, but the live consent and privacy information should be corrected within a reasonable period.

13. Embedded content

The Site currently embeds no video, map, social, review, or document content; external references are plain links. Loading embedded content from a provider can disclose your IP address and browser information and may set cookies, so if an embed is added we will delay it until consent where required or provide a link instead. Following an external link subjects you to the destination’s controls.

Scripts and providers change. We should periodically review the public pages, the Site’s forms, each consent state, and mobile views to identify cookies; remove unused trackers; confirm categories; test reject and withdraw behavior; and update descriptions. A cookie discovered during an audit is not automatically authorized merely because a script set it.

We may update this policy and the live inventory to reflect changes. The Last updated date identifies this version. A material expansion of optional tracking may require renewed consent rather than reliance on an old choice.

For technical questions about a cookie or consent control, email cs@peptas.com. Formal privacy-rights requests should be sent to info@peptas.com. Include the browser, device type, page, approximate time, and cookie name if known. Do not send passwords or full payment details. Privacy rights and regulator information are described in the Privacy Policy.

General Legal Provisions Applying to This Policy

The provisions in this section form part of this policy and should be read together with the policy-specific sections above. They are included so that important rules are not left to implication. If a policy-specific provision directly conflicts with a provision in this section, the policy-specific provision controls for the subject covered by that policy. If these provisions conflict with a non-waivable right under applicable law, the non-waivable right controls only to the extent of that conflict.

Definitions and interpretation

In these provisions, “Peptas,” “we,” “us,” and “our” mean the person or entity that owns and operates Peptas.com and supplies the relevant products or services as identified in the written quotation, the order confirmation, the invoice, or legally required business information displayed on the Site. “Site” means Peptas.com and any page, form, communication, or digital service operated under that domain. “Product” means an item offered through the Site. “Customer,” “you,” and “your” mean the person visiting the Site, submitting information, requesting a quotation, or accepting a quotation, and any organization on whose behalf that person acts. “Applicable Law” means every law, regulation, court order, licence condition, import or export control, sanctions measure, professional rule, and binding government requirement that applies to the relevant person, Product, transaction, shipment, or activity.

Headings, summaries, examples, frequently asked questions, and tables are provided for readability. They do not limit the operative wording. Words such as “including,” “includes,” and “for example” are illustrative and do not create an exhaustive list. A reference to writing includes email and other electronic records unless Applicable Law requires another form. Singular words include the plural and vice versa where the context permits. A duty not to do something includes a duty not to authorize, assist, encourage, or permit another person to do it. References to a statute include amendments, replacements, subsidiary legislation, and official requirements made under it.

Nothing on the Site creates a partnership, joint venture, fiduciary relationship, employment relationship, agency, medical relationship, or professional advisory relationship between you and Peptas. No person may bind Peptas or make a representation on its behalf unless that authority is confirmed in writing by an authorized representative. Product information, customer-service responses, educational material, and links are not legal, medical, clinical, regulatory, tax, customs, investment, or other professional advice.

Authority, eligibility, and institutional responsibility

You may use the Site and transact with us only if you are at least 21 years old, have legal capacity to enter a binding agreement, and are not prohibited by Applicable Law from accessing the Site or acquiring the Products. If you act for a company, university, laboratory, government body, clinic, reseller, or other organization, you represent that you have authority to bind that organization and that the organization accepts responsibility for your acts and omissions. We may request reasonable evidence of age, identity, professional status, institutional affiliation, intended research purpose, destination, end user, funding source, or authority to order.

The person placing an order is responsible for ensuring that every employee, contractor, student, principal investigator, consignee, agent, and downstream recipient who may possess or handle a Product is appropriately qualified, trained, authorized, and supervised. Internal approval by an employer or institution does not replace a government licence, ethics approval, import permit, controlled-substance authorization, or other external requirement. A quotation, invoice, order acceptance, shipment, or prior sale does not establish eligibility for any later transaction.

We may decline a request, request additional verification, cancel an order, withhold shipment, limit quantities, or end a relationship if we reasonably believe that a transaction presents a safety, fraud, sanctions, reputational, legal, regulatory, payment, diversion, or misuse risk. We may do so without disclosing confidential screening criteria or information that could defeat fraud or compliance controls. We will exercise these rights subject to Applicable Law and will not rely on them to avoid a mandatory obligation already owed to you.

Research-use framework

Unless a Product page expressly states otherwise and the statement is legally authorized, Products offered on the Site are supplied exclusively as laboratory research materials. They are not medicines, foods, dietary supplements, cosmetics, consumer chemicals, veterinary products, diagnostic products, or medical devices. They are not offered for administration to humans or animals, for compounding, for clinical investigation without required authorization, or for the diagnosis, prevention, mitigation, treatment, or cure of any disease or condition. Labels such as “research use only” and “not for human or veterinary use” are material conditions of sale and use, not marketing slogans.

You must not ingest, inject, inhale, implant, apply, administer, prescribe, dispense, recommend, resell for personal use, or otherwise expose a human or animal to a Product. You must not use a Product as an active ingredient in a food, supplement, cosmetic, drug, medicine, veterinary preparation, or consumer product. You must not seek dosing, cycle, reconstitution-for-administration, treatment, or self-experimentation guidance from us. A discussion found elsewhere on the internet, a publication, a third-party practice, a product name, or a reference to an area of scientific investigation does not change these restrictions.

Products must be handled only in a suitable professional laboratory by trained personnel using an institutionally approved protocol, appropriate engineering controls, personal protective equipment, storage controls, waste procedures, incident response, and risk assessment. You are responsible for reviewing available safety information and determining whether additional testing, controls, approvals, or documentation are required for your intended lawful research. You must prevent unauthorized access and maintain custody records appropriate to the nature of the material.

Legal and regulatory compliance

You are responsible for identifying and complying with Applicable Law in every jurisdiction connected with your activity, including Hong Kong, the billing location, shipment origin, transit countries, destination, place of possession, place of research, and location of each end user. Requirements may concern pharmaceuticals, poisons, dangerous drugs, controlled chemicals, precursor chemicals, biological materials, customs classification, strategic commodities, import and export licensing, sanctions, anti-money-laundering controls, consumer protection, workplace safety, environmental disposal, research ethics, data protection, and professional practice.

Peptas remains responsible for legal duties that Applicable Law places on Peptas and that cannot lawfully be transferred to a customer. Your compliance obligation does not excuse our non-delegable duties. Likewise, our review of an order does not transfer your legal duties to us. We do not promise that a Product may lawfully be purchased, imported, possessed, resold, or used in every jurisdiction. Availability on the Site, receipt of a payment, issuance of a quotation, or successful delivery of a previous order is not legal clearance for a current transaction.

You must obtain all licences, permits, declarations, end-use statements, registrations, approvals, consents, and exemptions required for your role before the relevant activity occurs. On request, you must provide accurate supporting documents and cooperate with lawful due diligence. You must not misdescribe a Product, value, origin, end use, consignee, or transaction; divide orders to evade a limit; use a forwarding arrangement to avoid a restriction; or ask us to omit, alter, or falsify customs or shipping information. We may share information with carriers, payment providers, professional advisers, insurers, regulators, customs authorities, or law enforcement when reasonably necessary and legally permitted.

If a licence or approval is delayed, denied, suspended, or revoked, you must notify us promptly. We may suspend performance while the issue is reviewed. Neither party is required to perform an act that would violate Applicable Law. Where lawful performance is impossible, we may cancel the affected portion of the transaction and address any payment according to the applicable policy, the allocation of responsibility for the problem, costs already incurred, and mandatory law.

Electronic transactions and communications

You consent to transact and communicate electronically. Subject to Applicable Law, electronic records, click acceptance, checkbox selections, form submissions, emails, and system logs may satisfy requirements for writing, acceptance, delivery, and retention. You are responsible for providing a current email address and monitoring messages, tracking updates, and requests for information. A notice is not invalid merely because an automated filter or internal routing rule prevented you from reading it.

An automated acknowledgment confirms only that a submission reached our system. It is not necessarily acceptance of an order, confirmation of product availability, regulatory clearance, or a promise to ship. A binding sale is formed only at the point specified in the Terms and Conditions of Sale. We may correct an electronic transmission error before acceptance and may contact you to verify an instruction that appears incomplete, inconsistent, unusual, or unauthorized.

You must not impersonate another person, use an address or payment instrument without authorization, manipulate technical records, or deny an electronic action genuinely performed by you or under your control. We may use reasonable authentication and audit records to evaluate a dispute. This paragraph does not prevent you from showing that a record is inaccurate, compromised, or legally insufficient.

Site information, availability, and corrections

We aim to present accurate and current information, but scientific, regulatory, logistical, and commercial information can change. Site content may contain typographical errors, translation differences, outdated references, incomplete descriptions, or technical display problems. Images may be illustrative and colors, labels, vials, packaging, or batch presentation may vary. A reference standard, molecular description, publication, or research summary does not guarantee that a Product is suitable for a particular protocol or produces a particular result.

We may correct errors, update content, change specifications, discontinue Products, impose quantity limits, or suspend Site functions. Before a binding sale is formed, we may correct an obvious pricing, availability, tax, shipping, or description error and invite you to proceed on corrected terms. After a binding sale is formed, any correction that materially affects your rights will be handled under Applicable Law and the governing sale terms. We will not knowingly rely on a disclaimer to preserve a materially false trade description or misleading omission.

The Site may be unavailable because of maintenance, security events, hosting failures, carrier outages, software changes, government action, or circumstances beyond reasonable control. We do not promise uninterrupted or error-free access. You should retain copies of order records, policies, certificates, and communications needed for your institutional files. We may limit access to protect the Site, customers, data, systems, or legal compliance.

Third-party services, links, and statements

The Site uses Cloudflare, a transactional email service, and a web-analytics provider, and may link to carriers, laboratories, publications, scientific databases, or other third parties. A link, technical integration, reference, or display of a third-party name does not mean that we control or endorse every statement, policy, security practice, product, or service of that party. Third parties may impose separate terms and privacy notices. You should review them before using the relevant service.

We are responsible for selecting and managing service providers to the extent required by Applicable Law. We are not responsible for an independent third party’s acts outside our control merely because its service is linked from the Site. However, this limitation does not remove responsibility that Applicable Law assigns to us for our own selection, instructions, representations, data handling, or non-delegable duties. A third-party laboratory report or certificate describes the sample and methods identified in that report; it is not a regulatory approval, medical endorsement, or universal guarantee about every unit or every possible use.

Reviews, testimonials, forum posts, and customer statements represent the views of their authors. They must not be interpreted as instructions for human or veterinary use. We may remove statements that promote prohibited use, make unsupported health claims, disclose confidential information, or violate law or Site rules. Removal does not mean that we can identify and prevent every improper statement.

Information security

You must provide complete and accurate information and keep it current. Secure the email account and devices you use to correspond with us. Notify us promptly at info@peptas.com if you suspect a fraudulent request or order made in your organization’s name, or a compromise affecting information supplied to us.

We may require identity evidence or confirmation from an institutional email address before processing a sensitive request, changing delivery details, or releasing records.

Prohibited conduct

You must not use the Site or Products to violate law, infringe rights, facilitate harm, evade controls, mislead another person, or interfere with systems. Prohibited conduct includes attempting unauthorized access; introducing malware; scraping in a way that disrupts service; reverse engineering security features; abusing promotional offers; making fraudulent claims; laundering funds; using stolen payment information; submitting false identity, end-use, customs, tax, or delivery information; promoting human or veterinary use; and reselling Products under false, misleading, or medically suggestive descriptions.

You must not remove or obscure warnings, batch identifiers, safety information, or chain-of-custody information. You must not relabel a Product as approved for a use for which it is not approved. You must not use our names, trademarks, documents, certificates, images, or test results to imply authorization, affiliation, clinical endorsement, or regulatory approval. We may preserve evidence, suspend service, cancel affected orders, and report reasonably suspected unlawful conduct where legally permitted.

Records, investigations, and cooperation

We may retain records reasonably needed to document consent, orders, payments, shipping, complaints, safety issues, compliance reviews, and legal obligations, subject to the Privacy Policy. In a dispute, relevant records may include order data, correspondence, payment authorization results, carrier scans, delivery photographs, access logs, batch records, certificates, submitted images, and statements from involved parties. No single category of record is automatically conclusive where Applicable Law requires a broader assessment.

You agree to cooperate reasonably with an investigation into fraud, diversion, damage, loss, unauthorized use, regulatory inquiry, safety concern, data request, or chargeback. Cooperation may include preserving packaging, providing photographs, confirming institutional authority, identifying the consignee, and returning or safely destroying material where lawful. We will not request information that is disproportionate to the matter, and privacy or legal requests may be subject to identity verification.

Events beyond reasonable control

Neither party is liable for delay or failure caused by an event beyond its reasonable control to the extent the event actually prevents performance and the affected party takes reasonable steps to reduce the effect. Events may include natural disasters, severe weather, epidemic or public-health measures, war, terrorism, civil disorder, sanctions, embargoes, sudden legal restrictions, customs action, carrier network disruption, labor disputes not limited to the affected party’s own workforce, power or telecommunications failures, cyberattacks by third parties, critical supplier failure, or government orders.

This provision does not excuse payment already due for Products properly supplied, a data-protection duty that can still reasonably be performed, or a duty that Applicable Law does not allow the parties to exclude. The affected party may receive a reasonable extension. If the disruption continues and substantially defeats the transaction, either party may exercise any cancellation right provided by the applicable policy or law. Allocation of prepaid amounts will take account of Products already supplied, irreversible costs lawfully chargeable, and mandatory rights.

Liability boundaries and mandatory rights

Every exclusion, limitation, waiver, indemnity, and allocation of risk in this policy applies only to the maximum extent permitted by Applicable Law. Nothing excludes or limits liability for fraud, fraudulent misrepresentation, willful misconduct, or any other liability that cannot lawfully be excluded or limited. Nothing limits a mandatory remedy available to a consumer under law that applies despite a choice-of-law clause. If Hong Kong’s Control of Exemption Clauses Ordinance or another reasonableness requirement applies, the relevant term is intended to operate only to the extent it satisfies that requirement.

Risk allocations are intended to reflect the specialized, research-only nature of the Products, the customer’s control over selection and use, the need for qualified handling, the limited ability to observe activities after delivery, and the availability of insurance and institutional controls to professional users. They are not intended to excuse a false trade description, misleading omission, wrongful acceptance of payment, breach of a non-excludable duty, or our own conduct where liability cannot fairly or lawfully be shifted.

If a court or authority finds a limitation too broad, it should be enforced to the broadest lawful and reasonable extent rather than disregarded entirely, where the law allows that approach. Separate limitations are intended to be severable. The existence of a specific remedy does not exclude another mandatory remedy, but you may not obtain double recovery for the same loss.

Assignment, subcontracting, and third-party rights

We may use affiliates and qualified service providers for hosting, payments, testing, storage, fulfillment, shipping, support, professional advice, fraud prevention, and compliance. We remain responsible to the extent required by Applicable Law. We may assign or transfer our rights and obligations as part of a genuine reorganization, financing, merger, acquisition, or sale of the business or relevant assets, provided the transfer does not reduce mandatory rights. You may not assign an order, policy right, or claim in a way that increases our risk or evades a restriction without our prior written consent, except where law gives you a non-waivable transfer right.

Unless a policy expressly says otherwise, a person who is not a party has no right to enforce it under the Contracts (Rights of Third Parties) Ordinance (Cap. 623). Our affiliates, personnel, contractors, laboratories, carriers, licensors, and payment service providers may rely on a provision that expressly protects them. The parties may amend or end their agreement without the consent of any other third party, to the extent permitted by law.

No waiver; severability; entire understanding

A failure or delay in enforcing a right is not a waiver. A one-time waiver applies only to the specific circumstances confirmed in writing. If a provision is unlawful or unenforceable, it will be modified to the minimum extent necessary or severed if modification is not permitted; the remaining provisions continue in effect. Each policy, an accepted quotation, the order confirmation, and any expressly incorporated document form the agreement for their subject matter. They replace prior discussions on that subject but do not exclude liability for fraud or a statement that law prevents us from excluding.

Purchase orders, procurement portals, email signatures, or customer forms do not add or replace terms merely because they are transmitted to us. Additional terms bind us only if an authorized representative expressly accepts them in writing. If an accepted written quotation or negotiated agreement identifies a conflict and states that it overrides a Site term, the negotiated provision controls for that transaction.

Governing law and dispute resolution

Except where mandatory law requires otherwise, this policy and non-contractual obligations connected with it are governed by the laws of the Hong Kong Special Administrative Region, without applying rules that would select another jurisdiction’s law. The courts of Hong Kong have exclusive jurisdiction, subject to any mandatory right you have to bring a claim elsewhere and either party’s right to seek urgent interim relief in a court with authority to grant it.

Before beginning formal proceedings, a party should send a written notice describing the issue, relevant order, requested remedy, and supporting information. The parties should allow at least 30 days for a good-faith attempt to resolve the matter, unless urgent relief, a limitation period, safety, fraud, confidentiality, intellectual property, or regulatory action makes waiting unreasonable. This process does not prevent a report to a regulator or law-enforcement authority and does not remove a statutory complaint right.

Claims should be brought individually unless Applicable Law permits or requires another procedure. No informal communication settles a claim unless it clearly records the agreed resolution and is sent by an authorized person. A payment-provider or carrier process does not finally determine the parties’ legal rights, although its records may be relevant.

Policy updates, language, and contact

We may revise this policy to reflect legal, operational, security, product, or service changes. The “Last updated” date identifies the current published version. Changes apply prospectively when posted or on a later date stated in the notice. A change will not retroactively remove a right that had already accrued unless Applicable Law permits and the change is validly agreed. For a material change, we may provide an additional notice by email, with a quotation, or by a Site banner where appropriate.

The English version controls to the extent permitted by law. A translation is provided for convenience unless it expressly states that it is an official controlling version. If you need this policy in an accessible format or have a question about its meaning, contact us before placing an order. Do not proceed if you do not understand and accept the terms that apply to you.

Formal legal notices, privacy-rights requests, security reports, and legal correspondence may be sent to info@peptas.com. Customer-service questions about products, orders, delivery, or returns should be sent to cs@peptas.com. Include enough information to identify the matter without sending unnecessary sensitive data. A business or postal address should be taken only from the current, verified contact information displayed on the Site or supplied in an official order document; do not rely on an address copied from an unofficial directory or an outdated page.

1. About this Cookie Policy