USA MADE PEPS

PRIVACY POLICY

www.usamadepeps.com

Effective Date: 9-25 | Last Updated: 5/26

IMPORTANT: All products sold by USA Made Peps are designated Research Use Only (RUO) and are not intended for human or animal use. This Privacy Policy governs data collected through your use of our website. By accessing this site, you confirm you are a qualified researcher or research professional and agree to the terms of this Policy.

USA Made Peps ("Company," "we," "us," or "our") operates the website located at www.usamadepeps.com. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information obtained from visitors and customers ("you") who access our website or place orders with us.

This Policy applies to all personal information collected through our website, email communications, and any related online or offline interactions. It does not apply to third-party websites, processors, or services that may be linked from our site.

Our products are sold exclusively for Research Use Only (RUO) purposes. We take our compliance obligations seriously and collect only the information necessary to verify purchaser eligibility, fulfill orders, and operate our business lawfully.

We collect information in the following categories:

• Identity Information: Full name, username or alias

• Contact Information: Email address, mailing address, phone number

• Account Information: Username, password (encrypted), account preferences

• Order Information: Products purchased, quantities, order history

• Payment Information: ACH bank account details or other payment method data (processed by our third-party payment processor; we do not store full payment credentials)

• Research Affiliation: Institution, organization, or stated research purpose provided during site entry or checkout (collected for RUO compliance purposes)

• Communications: Any messages, inquiries, or correspondence you send us

• Log Data: IP address, browser type, operating system, referring URLs, pages visited, time and date of access

• Device Information: Device type, screen resolution, browser version

• Cookie and Tracking Data: Session cookies, preference cookies, and analytics identifiers (see Section 7)

• Payment processors (ACH/banking partners) may provide transaction confirmation data

• Shipping carriers may provide delivery confirmation information

• Analytics providers may supply aggregated usage data

We use the information we collect for the following purposes:

• Order Fulfillment: To process, ship, and confirm your orders and provide related customer service

• RUO Compliance Verification: To verify that purchasers are qualified researchers and that products are not being purchased for prohibited uses

• Payment Processing: To facilitate ACH or other payment transactions through our third-party payment processor

• Account Management: To create and maintain your customer account

• Communications: To respond to your inquiries, provide order updates, and send transactional notifications

• Legal Compliance: To comply with applicable federal and state laws, regulations, and legal processes, including record-keeping requirements

• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities

• Site Improvement: To analyze usage patterns, improve our website, and optimize the customer experience

• Marketing (Opt-In Only): To send promotional emails or newsletters, but only if you have explicitly opted in; you may opt out at any time

We process your personal information on the following legal grounds:

• Contract Performance: Processing necessary to fulfill orders and provide services you have requested

• Legal Obligation: Processing required to comply with applicable laws, including RUO compliance documentation and tax record-keeping

• Legitimate Interests: Processing necessary for fraud prevention, site security, and business operations, where these interests are not overridden by your privacy rights

• Consent: Where you have given explicit consent, such as for optional marketing communications

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

We share information with trusted third-party service providers who assist us in operating our website and business, including:

• Payment processors (ACH processing and banking partners)

• Shipping and fulfillment carriers

• Website hosting and infrastructure providers (GoDaddy)

• Email service providers

• Analytics providers

All service providers are contractually required to use your information only for the purpose of providing services to us and to maintain appropriate security standards.

We may disclose your information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request

• Enforce our Terms and Conditions or this Privacy Policy

• Protect the rights, property, or safety of USA Made Peps, our customers, or others

• Investigate potential violations of our RUO policies or applicable laws

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website prior to such a transfer.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including:

• Order and transaction records: Minimum 7 years for tax and legal compliance purposes

• RUO compliance records (purchaser affiliation, stated research purpose): Minimum 5 years

• Account information: Retained while your account is active, plus 2 years after closure

• Communications and support records: 3 years

• Marketing opt-in/opt-out records: Retained indefinitely to honor your preferences

When retention periods expire, we securely delete or anonymize personal information in accordance with our data disposal procedures.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze site usage. We use the following types of cookies:

• Essential Cookies: Necessary for the website to function, including session management and security features. These cannot be disabled.

• Functional Cookies: Remember your preferences (such as your research affiliation acknowledgment) to improve your experience.

• Analytics Cookies: Collect aggregated, anonymized data about how visitors use our site (e.g., pages visited, time on site) to help us improve.

• Marketing Cookies: Only placed if you have opted into marketing communications.

You may control or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain site features. A full cookie consent mechanism is available on our site footer.

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website

• Encrypted storage of sensitive personal and payment data

• Access controls limiting personnel access to personal information on a need-to-know basis

• Regular security assessments and monitoring

• Third-party payment processing to minimize our direct handling of financial credentials

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and protect your account credentials.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you

• Right to Correction: Request correction of inaccurate or incomplete personal information

• Right to Deletion: Request deletion of your personal information, subject to legal retention requirements

• Right to Opt-Out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us directly

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of specific pieces of personal information collected, sources, business purposes, and third parties with whom information is shared

• Right to Delete: Request deletion of personal information, subject to exceptions (e.g., legal retention requirements)

• Right to Correct: Request correction of inaccurate personal information

• Right to Opt-Out of Sale or Sharing: We do not sell personal information. You may opt out of sharing for cross-context behavioral advertising

• Right to Limit Use of Sensitive Personal Information: You may request that we limit use of sensitive personal information to what is necessary for providing our services

• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

To exercise your California privacy rights, submit a verifiable consumer request by emailing us at privacy@usamadepeps.com. We will respond within 45 days.

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws may also have rights to access, correct, delete, and opt out of certain processing of their personal information. Contact us to exercise these rights.

Our website and products are not directed to individuals under the age of 21. We do not knowingly collect personal information from anyone under 21 years of age. Access to our site requires affirmative confirmation of adult age and qualified researcher status. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete such information promptly. If you believe a minor has provided us with personal information, please contact us immediately.

Our website may contain links to third-party websites, payment processors, or service providers. This Privacy Policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.

Some browsers transmit "Do Not Track" (DNT) signals to websites. At this time, our website does not respond to DNT signals. We will continue to monitor developments in DNT standards and update this Policy accordingly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated Policy on this page with a revised Effective Date

• Sending an email notification to registered customers (for material changes)

• Displaying a prominent notice on our website homepage

Your continued use of our website after the effective date of any changes constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

In connection with our RUO compliance obligations, we collect and retain records of purchaser-stated research affiliations and purposes. This data is maintained strictly for compliance documentation and is not used for marketing or shared with third parties except as required by law or regulatory authority.

By purchasing from USA Made Peps, you acknowledge and consent to our collection and retention of RUO compliance records as described in this Policy. This data retention is a legal necessity of our business model and cannot be waived.

For questions, concerns, or to exercise your privacy rights, please contact our Privacy Compliance contact:

USA Made Peps

Privacy & Compliance

Email: support@usamadepeps.com

Website: www.usamadepeps.com

USA Made Peps | Massachusetts, USA

We will respond to all privacy inquiries within 30 days. For California residents submitting verifiable consumer requests, we will respond within 45 days (with a possible 45-day extension for complex requests).

This Privacy Policy was drafted to reflect current U.S. federal and state privacy law requirements including CCPA/CPRA. It should be reviewed by qualified legal counsel prior to publication.

© 2026 USA Made Peps | www.usamadepeps.com | All Rights Reserved