Last updated: April 28, 2026.

This Privacy Policy describes how [Company Legal Name] ("Otter Peptides", "we", "us", "our") collects, uses, and shares information when you visit otterpeptides.com (the "Site") or place an order with us. By using the Site you consent to the data practices described here.

1. Information you provide

When you place an order, contact us, or submit a form, you may provide your name, shipping address, email address, optional phone number, payment information (handled by our third-party payment processor — see Section 3), and any free-form message or note you include with the order or inquiry.

2. Information collected automatically

When you visit the Site we automatically receive your IP address and approximate geographic region; your browser type, operating system, and device characteristics; the pages you view, links you click, and the date and time of your visit; and the website that referred you to us, if any. We use a small number of cookies and similar technologies as described in Section 5.

We do not knowingly collect Social Security numbers, government IDs, biometric data, or precise GPS location.

3. How we use information

We use the information we collect to process and fulfill your orders and communicate about them; provide customer support and respond to inquiries; prevent fraud, abuse, and unauthorized access to the Site; maintain and improve the Site and our products; comply with applicable law and respond to lawful requests from authorities; and enforce our Terms of Service.

4. Sharing with third parties

We share information only as necessary to operate the Site. Specifically: our payment platform (Cash App / Block, Inc.) receives the information necessary to process the payment link we send you under their own privacy policy. Shipping carriers (USPS, UPS, FedEx, and similar) receive the recipient name, shipping address, and order weight needed to deliver the package. Email and infrastructure providers (Resend for transactional email, Cloudflare for CDN and DDoS protection, AWS for server hosting) process information on our behalf under their respective privacy policies.

We may also disclose information if required by subpoena, court order, or other valid legal process, or if we reasonably believe disclosure is necessary to protect rights, property, or safety, or to investigate fraud or abuse. In the event of a merger, sale of business assets, or similar transaction, customer information may be transferred as part of that transaction. We do not sell personal information to third parties for advertising or marketing purposes, and we do not share data with third-party advertising networks.

5. Cookies and tracking

The Site uses cookies and similar technologies for: remembering that you have acknowledged the age gate (cookie name otter_age_ack, 30-day duration); maintaining your shopping cart between visits (browser localStorage, no server-side tracking); and basic, aggregated site analytics (page views, referrers). We do not use third-party advertising cookies. You can disable cookies in your browser, but parts of the Site — notably the cart and the age gate — may not function correctly.

6. Data retention

We retain order records and customer contact information for as long as needed to fulfill the order, comply with tax and accounting requirements (typically seven years for U.S. business records), and resolve disputes. We retain server logs for up to ninety (90) days for security and abuse-prevention purposes.

7. Security

We use commercially reasonable measures to protect your information, including HTTPS (TLS encryption) for all traffic, hashed passwords, server-side input validation, restricted access to admin systems, and a secrets-management system for API credentials. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.

8. Your rights

Depending on your state of residence, you may have the right to request a copy of the information we hold about you, request correction of inaccurate information, request deletion of your information (subject to our legitimate retention obligations such as tax records), and opt out of any non-essential email communications. To exercise any of these rights, email [email protected] from the email address associated with your account, with the subject line "Privacy request." We will respond within 45 days.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to deletion, and the right to opt out of sale. We do not sell personal information.

9. Children

The Site is not directed to anyone under 21 years of age and we do not knowingly collect information from minors. If we learn we have collected information from someone under 21, we will delete it. If you believe a minor has provided us information, contact us at [email protected].

10. International users

The Site is operated from the United States and we currently ship only within the contiguous U.S. If you access the Site from outside the U.S., your information will be transferred to and processed in the United States, where data protection rules may differ from your home jurisdiction.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on the Site at least thirty (30) days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy questions or to exercise your rights, email [email protected].