CertifiedPEPS
Legal

Privacy Policy

Last updated: June 2025. This policy describes how CertifiedPEPS, LLC ("CertifiedPEPS," "we," "us," or "our") collects, uses, and protects your personal information when you use our website and services.

1. Information We Collect

CertifiedPEPS collects only the information necessary to process orders, manage accounts, and provide customer support. This includes:

  • Account information: name and email address provided at registration;
  • Order information: shipping address, order contents, and order history;
  • Payment confirmation: payment card details are processed directly by Stripe and are never stored on our servers — we only receive a confirmation that payment succeeded;
  • Usage information: standard server logs including IP address, browser type, and pages visited, used solely for security and operational purposes.

2. How We Use Your Information

  • To fulfill and ship your orders;
  • To send order confirmations, shipping notifications, and account-related emails;
  • To provide order tracking and history through your account;
  • To respond to customer support inquiries;
  • To send occasional product or restock updates, only if you opt in via the newsletter signup.

We do not use your data for behavioral advertising, data brokering, or any purpose beyond operating the store.

3. How We Store Your Information

Account and order data is stored securely via Supabase, a SOC 2 Type II compliant platform. All data is encrypted in transit (TLS) and at rest. Payment card details are handled entirely by Stripe and are never transmitted to or stored on CertifiedPEPS servers.

4. Data Sharing

We do not sell or rent your personal information. Limited data is shared with third-party service providers strictly as needed to operate the store:

  • Stripe — payment processing;
  • Shippo / shipping carriers — your name and shipping address are shared with the carrier to fulfill delivery;
  • Supabase — secure account and order data storage;
  • Resend — transactional email delivery (order confirmations, shipping updates).

Each provider is contractually bound to use your data only as necessary to perform their service.

5. Cookies

CertifiedPEPS uses only session cookies required for authentication and keeping you signed in. We do not use tracking, advertising, or analytics cookies.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at certifiedpepsinfo@gmail.com. Deleting your account will remove your stored profile information. Anonymized order records may be retained as required for accounting and legal compliance purposes.

7. Children's Privacy

CertifiedPEPS does not knowingly collect personal information from anyone under 21 years of age. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the site after changes constitutes acceptance of the revised policy.

9. Contact

Privacy questions or data requests? Contact us at certifiedpepsinfo@gmail.com.