What we collect
When you create an account, we collect your name, email address, organisation or laboratory (if provided) and a password, which we store only in hashed form, never as written. We also record when you registered and last signed in, and the confirmations you made when registering (with the time and your IP address).
When you place an order or contact us, we collect your name, email address, phone number (if provided), delivery address, order details and the research purpose you declare at checkout. We do not store card details.
Why we collect it
We use this information to process and deliver orders, respond to enquiries, keep records required by law, and, if you opt in, email you when new certificates are published. You can unsubscribe at any time.
Who we share it with
We share only what is needed with service providers who help us run the business: our website host, our email and form providers, our payment provider and our delivery carrier. We do not sell personal information.
Where it is stored
Accounts and orders are kept in our records with our website host, Netlify, so we can provide your account and process, deliver and support your order. You can ask us to delete your account at any time.
Our providers may store information outside Australia. We take reasonable steps to ensure they protect it consistently with the Australian Privacy Principles.
If you pay by card, your name, email address, phone number, delivery address and card details are collected by our payment provider, TagadaPay, which is based in the United States and processes them there. We receive confirmation of the payment, not your card details.
When you start a card payment, we also record your IP address and browser details with the declarations and research purpose you give at checkout, as evidence for fraud prevention and payment disputes. Your research purpose is also passed to TagadaPay with the order. If a card checkout isn’t completed, we delete that record after 30 days.
Analytics and cookies
This site uses a cookie to keep you signed in to your account (for up to 30 days, renewed while you use the site) and stores your cart and your research-use confirmation in your own browser. If we add analytics, we will update this policy and offer the most privacy-preserving option by default.
Access and correction
You can ask to see or correct the personal information we hold about you by emailing info@iconicpeptides.com.
Complaints
If you have a privacy concern, contact us first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).