PeptideDoc

PeptideDoc — Bayside, Queens · 4232 Francis Lewis Boulevard, Bayside, NY 11361

PeptideDoc.com legal notice

Privacy Policy

Effective Date: September 22, 2026

Last Updated: September 22, 2026

PeptideDoc.com (“PeptideDoc,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information collected through our website, communications, technology platform, and related services.

This Privacy Policy explains what information we collect, how we use and disclose it, how cookies and similar technologies are managed, and the privacy choices and rights that may be available to you.

PeptideDoc is a technology platform that connects users with independent licensed healthcare providers and pharmacy or fulfillment partners. PeptideDoc itself is not a medical practice, healthcare provider, or pharmacy, consistent with the current Terms of Service.

1

Information We Collect

We may collect information you provide directly to us, including:

  • Name
  • Email address
  • Telephone number
  • Mailing or shipping address
  • Account credentials
  • Appointment and scheduling information
  • Billing and transaction information
  • Communications with PeptideDoc
  • Health intake information
  • Symptoms, health goals, medical history, or treatment-related information
  • Documents or information uploaded for review
  • Marketing and communication preferences

The existing PeptideDoc materials identify health questionnaires, symptoms, billing and shipping information, account credentials, and uploaded documents among the information collected.

We may also automatically collect certain technical information when you use the website, including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Referring URLs
  • Approximate location derived from IP address
  • Website interactions
  • Cookie identifiers
  • Analytics information
  • Advertising or attribution information, where permitted
2

Sensitive and Health Information

Some information submitted through PeptideDoc may relate to your health, medical history, treatment interests, prescriptions, symptoms, or healthcare services.

Health information handled by independent healthcare providers or other HIPAA-regulated parties may also be subject to the Health Insurance Portability and Accountability Act and applicable state medical privacy laws.

PeptideDoc maintains a separate Notice of Privacy Practices concerning protected health information. The existing notice states that participating healthcare providers and medical groups are required to maintain the privacy of PHI and identifies treatment, payment, and healthcare operations as relevant uses.

Where HIPAA applies, this Privacy Policy does not replace the applicable Notice of Privacy Practices.

3

How We Use Personal Information

We may use personal information to:

  • Operate and maintain PeptideDoc.com
  • Create and manage accounts
  • Respond to inquiries
  • Connect users with independent healthcare providers
  • Facilitate telehealth services
  • Coordinate pharmacy or fulfillment services
  • Process payments
  • Schedule appointments
  • Communicate service-related information
  • Provide customer support
  • Maintain security and prevent fraud
  • Comply with legal or regulatory requirements
  • Improve the website and user experience
  • Conduct analytics where permitted
  • Send marketing communications when consent has been provided
  • Maintain and enforce privacy preferences
  • Establish, exercise, or defend legal claims

PeptideDoc will not use health information for targeted advertising where doing so would violate applicable health privacy law.

4

How We Disclose Information

We may disclose personal information where reasonably necessary to:

  • Independent licensed healthcare providers
  • Pharmacy or dispensing partners
  • Payment processors
  • Scheduling providers
  • Hosting and cloud infrastructure providers
  • Security vendors
  • Customer-support providers
  • Professional advisers
  • Regulators, courts, government agencies, or law-enforcement authorities when legally required

The current policy identifies independent providers, pharmacies, payment gateways, and technology vendors as categories of recipients.

We do not sell personal information for monetary compensation.

However, certain advertising or analytics disclosures may constitute “sharing” under California law even where no money changes hands. When applicable, users may opt out as described below.

5

Cookies and Similar Technologies

PeptideDoc may use cookies, pixels, SDKs, tags, local storage, and similar technologies.

We divide these technologies into the following categories:

Strictly Necessary Cookies

Required for security, website operation, authentication, fraud prevention, network management, accessibility, and user-requested functionality. These cookies cannot be disabled through our consent manager where they are technically necessary to provide the service.

Analytics Cookies

Used to understand website traffic, performance, and user interactions.

Functional Cookies

Used to remember preferences and enhance website functionality.

Advertising and Targeting Cookies

Used, where applicable, for campaign measurement, attribution, advertising, retargeting, or cross-context behavioral advertising.

Cookie inventory and tracking audit
Cookie or technologyProviderPurposeCategoryDurationPartyData leaves PeptideDoc
peptidedoc_cookie_consent_v1PeptideDocStores cookie-category preferences, sale/sharing opt-out status, GPC status, and the timestamp of the most recent choice.Strictly necessaryUntil the visitor changes or clears preferencesFirst-party browser storageNo
sidebar_statePeptideDoc interface componentRemembers whether a collapsible sidebar is open or closed if that interface component is used.Strictly necessary / functional preference7 daysFirst-party cookieNo
Google Maps embedded mapGoogleDisplays the Bayside map after functional consent is granted.Functional non-essentialSet by Google if the map loadsThird-party embedded serviceYes — browser request data may be sent to Google when the map is loaded.

Developer-facing tracking audit

This list is based on technologies detected in the current codebase. Any future third-party tracking script must be mapped to a consent category before deployment.

PeptideDoc consent preference storage

Consent category
Strictly necessary
Where it loads
Sitewide consent manager
Health / identifying information risk
No health or identifying form values are sent outside PeptideDoc by this preference store.
Status
Allowed before consent because it stores privacy choices.

sidebar_state cookie

Consent category
Strictly necessary / functional preference
Where it loads
Reusable sidebar interface component only when that component is used
Health / identifying information risk
No health or identifying form values are stored in this cookie.
Status
Detected in codebase; not a marketing tracker.

Google Fonts stylesheet

Consent category
Site presentation resource
Where it loads
Global document head
Health / identifying information risk
May receive browser request data such as IP address and user agent; no form-field values are sent by site code.
Status
Detected external stylesheet; not categorized as analytics, advertising, targeting, or session replay.

Google Maps iframe

Consent category
Functional non-essential
Where it loads
Home and Bayside location map areas after functional consent
Health / identifying information risk
May receive browser request data when loaded; no health, booking, name, email, phone, or form-field values are sent by site code.
Status
Blocked until affirmative functional consent.

Booking request form

Consent category
Form integration / strictly necessary for requested service
Where it loads
Contact page
Health / identifying information risk
Can receive names, email addresses, phone numbers, appointment details, and optional notes that may include health information.
Status
No advertising, retargeting, session replay, or unnecessary analytics are loaded on this workflow by site code.

Ask PeptideDoc AI question box

Consent category
User-requested functionality
Where it loads
FAQ page when a visitor submits a question
Health / identifying information risk
Can receive free-text questions that a visitor chooses to submit and that may include health-related information.
Status
Triggered only by visitor submission; not an advertising or retargeting script.

Advertising pixels, retargeting scripts, session replay, GA, Meta Pixel, Hotjar, Clarity, Segment, PostHog, Mixpanel, FullStory, LogRocket

Consent category
Advertising / targeting / analytics / session replay
Where it loads
Not detected in the codebase audit
Health / identifying information risk
If added later, these must be mapped to a consent category and kept away from health or identifying workflows unless reviewed.
Status
Not loaded automatically.
HHS tracking technology guidance
7

California Privacy Rights

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to PeptideDoc's processing of your information, California residents may have the right to:

  • Know the categories of personal information collected
  • Know the categories of sources from which information was collected
  • Know the purposes for collecting, using, selling, or sharing information
  • Know the categories of third parties to whom information is disclosed
  • Request access to specific pieces of personal information
  • Request deletion, subject to legal exceptions
  • Request correction of inaccurate information
  • Opt out of the sale or sharing of personal information
  • Limit certain uses and disclosures of sensitive personal information, where applicable
  • Receive equal service and pricing without unlawful discrimination for exercising privacy rights

These rights are consistent with PeptideDoc's existing California Privacy Notice.

California authorities confirm that consumers have rights to know, delete, correct, opt out of sale or sharing, and in appropriate circumstances limit use of sensitive personal information.

8

Do Not Sell or Share My Personal Information

PeptideDoc does not sell personal information for monetary consideration.

To the extent that the use of advertising, analytics, pixels, cookies, or similar technologies constitutes a “sale” or “sharing” of personal information under applicable California law, you may opt out at any time.

The website must provide a persistent footer link labeled:

Your Privacy Choices

That page or preference center must allow users to disable:

  • Advertising cookies
  • Targeting cookies
  • Cross-context behavioral advertising
  • Any technology treated as sale or sharing under applicable law

A user must not be required to create an account in order to exercise this choice. California requires qualifying businesses to provide an accessible mechanism for opting out of sale or sharing.

9

Global Privacy Control

PeptideDoc will recognize and honor qualifying Global Privacy Control (GPC) signals as requests to opt out of the sale or sharing of personal information where required by applicable law.

When a valid GPC signal is detected:

  • Advertising or sharing-related tracking should remain disabled.
  • The preference should be applied automatically where technically feasible.
  • The user should not be required to complete a separate form to effectuate the browser-level opt-out.

California expressly recognizes GPC as a valid opt-out mechanism for covered businesses.

10

Sensitive Personal Information

Information concerning health, medical history, treatment, and related healthcare services may qualify as sensitive information under applicable privacy laws.

PeptideDoc will use sensitive personal information only as reasonably necessary to provide requested services, meet legal obligations, maintain security, facilitate healthcare operations, or for other purposes permitted by law.

PeptideDoc will not use sensitive health information for cross-context behavioral advertising.

Where required, users will be provided a mechanism to limit uses of sensitive personal information.

11

HIPAA and Tracking Technologies

PeptideDoc will maintain additional safeguards for portions of the website or platform that may process Protected Health Information.

Advertising pixels, retargeting scripts, session-replay technologies, and other unnecessary third-party tracking technologies should not operate on authenticated patient pages, health intake forms, patient portals, telehealth interfaces, appointment-management areas, or other pages where PHI may be transmitted, unless the specific implementation has been reviewed for HIPAA compliance.

Where a tracking vendor receives PHI on behalf of a HIPAA-regulated entity, appropriate legal permissions and, where applicable, a Business Associate Agreement must be in place.

HHS cautions that a general cookie consent banner is not equivalent to a HIPAA-compliant authorization for disclosure of PHI.

12

Marketing Communications

PeptideDoc will send promotional email or text communications only where legally permitted and, when required, after the user has affirmatively opted in.

Users may unsubscribe from marketing communications by:

  • Selecting the unsubscribe link in an email
  • Replying STOP to qualifying SMS messages
  • Emailing privacy@peptidedoc.com

Opting out of marketing does not prevent PeptideDoc or participating providers from sending necessary transactional, administrative, safety, or treatment-related communications.

13

Privacy Requests

To exercise a privacy right, submit a request through:

Email: privacy@peptidedoc.com

The website should also provide an online privacy request form accessible through Your Privacy Choices.

Requests may include:

  • Access / Know
  • Delete
  • Correct
  • Opt Out of Sale or Sharing
  • Limit Use of Sensitive Personal Information
  • Withdraw Cookie Consent
  • Marketing Opt Out

PeptideDoc may need to verify your identity before completing certain requests.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

14

Data Retention

Personal information will be retained only for as long as reasonably necessary for the purposes described in this policy, including:

  • Providing requested services
  • Maintaining business and transaction records
  • Meeting medical or pharmacy record-retention requirements
  • Satisfying tax, accounting, compliance, or legal obligations
  • Resolving disputes
  • Preventing fraud
  • Enforcing agreements

Retention periods may differ depending on the type of information and applicable law.

15

Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No website, network, storage system, or method of electronic transmission can be guaranteed to be completely secure.

16

Third-Party Websites and Services

PeptideDoc may link to or integrate with services operated by independent providers, pharmacies, scheduling providers, payment processors, or other third parties.

Those third parties may have their own privacy policies and practices.

PeptideDoc's existing documents specifically identify independent healthcare providers and pharmacy partners as separate parties participating in the service model.

17

Children's Privacy

PeptideDoc's services are intended for adults age 18 and older, consistent with its existing Terms of Service.

We do not knowingly offer the service to children under 18 or knowingly collect personal information from them for purposes inconsistent with applicable law.

18

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • Changes in our services
  • Changes in technology
  • Changes in vendors
  • Changes in applicable law
  • Changes in privacy or security practices

The effective or last-updated date will be revised when material changes are made.

Where required, additional notice or consent will be provided.

19

Contact Us

For privacy questions, cookie choices, opt-out requests, or other privacy-related inquiries:

PeptideDoc.com

Email: privacy@peptidedoc.com

Related privacy choices