Privacy Policy

Resource-request topic notice updated September 24, 2026 (privacy-intent-v2).

PeptideSlim ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and disclose personal information when you visit www.peptideslim.co and interact with our educational content about GLP-1 weight-management treatments. We are committed to transparency and compliance with applicable privacy laws, including the CCPA/CPRA (California), the CAN-SPAM Act, and the GDPR (EEA visitors).

1. Information we collect

We collect the following categories of personal information:

• Email addresses (when you opt in to receive our guide or newsletter)
• Consent records (timestamp and page where consent was given)
• Technical data (IP address, browser type, pages visited, via analytics)
• Interaction events (resource requests, newsletter opt-ins)
• On the pack-request page, an optional general information topic selected from a fixed list: service comparison, questions to prepare, how services work, or pricing and follow-up terms. If selected, it is stored with your resource request in our database to help us plan educational content. It is not a health assessment, does not personalize the PDF, is not sent to Meta or used for advertising targeting, and does not subscribe you to marketing. Skip or clear the choice if you prefer.

We do not collect protected health information (PHI), medical history, payment information, or government identifiers on this website.

2. How we use your information

• To deliver requested educational materials (PDF guides, newsletters)
• To send periodic educational emails about GLP-1 treatments (with your consent)
• To analyze website traffic and improve user experience (aggregated analytics)
• To comply with legal obligations (CAN-SPAM, CCPA record-keeping)

We do not use your information for automated decision-making or profiling.

3. How we share your information

We do not sell or share your personal information for monetary compensation. We may disclose information to the following service providers under contractual confidentiality obligations:

• Supabase Inc. (database hosting, United States)
• Vercel Inc. (website hosting, United States)
• Email service providers (newsletter delivery, CAN-SPAM compliant)
• Analytics and advertising providers (aggregated data only)

These providers are prohibited from using your information for any purpose other than providing services to us.

4. Legal basis and EEA visitors

If you are located in the European Economic Area (EEA), we process your personal information based on: your explicit consent (for email marketing and non-essential cookies), our legitimate interests (website security, analytics, fraud prevention), and legal obligations where applicable. You may withdraw consent at any time via the unsubscribe link in our emails or by contacting us. This website is intended for United States audiences; EEA visitors who nonetheless use it benefit from these GDPR-aligned protections.

5. Cookies and analytics technologies

• Essential cookies (site functionality)
• Analytics cookies (anonymized IP addresses)
• Advertising pixels (Meta Pixel, for ad measurement and optimization)

You can control cookie preferences through your browser settings. Disabling non-essential cookies may limit certain website features but will not prevent access to our educational content.

6. Your privacy rights (CCPA/CPRA - California residents)

California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: request disclosure of personal information collected in the past 12 months
• Right to Delete: request deletion of your personal information
• Right to Correct: request correction of inaccurate personal information
• Right to Opt Out: opt out of any "sale" or "sharing" of personal information (we do not sell or share as defined by CPRA)
• Right to Limit: limit use of sensitive personal information (we do not collect sensitive data as defined by CPRA)

To exercise these rights, contact us at privacy@peptideslim.co. We will respond within 45 days as required by law. You will not be discriminated against for exercising your privacy rights.

7. Children's privacy

Our website is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us personal information, contact us and we will delete it promptly upon verification.

8. Email marketing (CAN-SPAM compliance)

All commercial email messages we send comply with the CAN-SPAM Act of 2003 (15 U.S.C. § 7701 et seq.). Each email includes:

• Clear identification as an advertisement (when applicable)
• Accurate sender information and subject lines
• A valid physical postal address
• A prominent unsubscribe mechanism (processed within 10 business days)

9. Data security and retention

We implement industry-standard security measures:

• HTTPS encryption for all data transmission
• Secure database hosting with access controls
• Regular review of our security practices

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, typically up to 3 years after your last interaction with us, unless longer retention is required by law.

10. Changes to this policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date above and, for significant changes affecting your rights, notify you by email or on our website. This policy is reviewed at least annually.

11. Contact

For questions or requests regarding this Privacy Policy: privacy@peptideslim.co

Postal: INFINITYX FZE, Sharjah Research Technology Innovation Park (SRTIAP), Sharjah, United Arab Emirates.