Privacy Policy

Peptly (“we,” “our,” or “us”) operates the website at peptly.com and sells digital productivity templates and related products.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our Site, purchase our Products, or interact with us. It also describes your rights with respect to your personal data under applicable privacy laws, including the European Union General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”).

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use the Site.

a. Information You Provide Directly

• Contact information: When you contact us via email, you may provide your name and email address.
• Purchase information: When you purchase a Product through a third-party platform (such as Etsy or Gumroad), that platform collects your payment and personal information on our behalf. We may receive limited transaction details (such as your email address, country, and order reference) from these platforms.
• Communications: Any messages, feedback, or inquiries you send to us by email or through social media.

b. Information Collected Automatically

• Log data: Our web host may automatically collect standard log data, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps when you access the Site.
• Analytics: We may use analytics tools (such as Google Analytics) to understand how visitors interact with the Site. These tools may collect data about your browsing behavior in aggregate or pseudonymous form. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Cookies: See Section 6 for details on cookies and tracking technologies.

c. Information from Third-Party Platforms

When you interact with Peptly on social media platforms (Instagram, TikTok, YouTube, Lemon8), those platforms may collect data about you subject to their own privacy policies. We may receive limited information about your interactions with our social media content (such as engagement statistics) from these platforms.

We use the information we collect to:

• Process and fulfill your orders and deliver purchased Products;
• Respond to your inquiries, questions, and customer service requests;
• Send transactional communications related to your purchase (order confirmation, access instructions);
• Send marketing communications about new Products, updates, or promotions, where you have consented or where we have a legitimate interest and applicable law permits;
• Analyze Site usage to improve the Site, Products, and user experience;
• Detect, prevent, and address fraud, security issues, and technical problems;
• Comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the GDPR:

• Performance of a contract (Article 6(1)(b)): To process your order, deliver your Product, and provide customer support.
• Legitimate interests (Article 6(1)(f)): To analyze Site usage, improve our Products, communicate relevant product updates, and protect against fraud — where these interests are not overridden by your fundamental rights.
• Consent (Article 6(1)(a)): For marketing communications where we ask for your consent, and for non-essential cookies. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): To comply with applicable laws, such as tax, accounting, or consumer protection requirements.

We share your personal information only as necessary and in the following circumstances:

• Third-party marketplaces and payment processors: When you purchase through Etsy, Gumroad, or another platform, that platform processes your payment and is responsible for its own data handling. We receive limited transaction data from these platforms.
• Analytics providers: We share aggregated or pseudonymized browsing data with analytics providers (such as Google Analytics) to understand Site usage.
• Email service providers: If we send marketing or transactional emails, we may use a third-party email service provider who processes your email address on our behalf.
• Legal compliance: We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Peptly, our customers, or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

We do not sell your personal information.

We may use cookies and similar technologies (such as pixels and local storage) to operate the Site and understand how it is used.

Types of cookies we may use:

• Strictly necessary cookies: Required for the Site to function (e.g., security tokens, session management). These cannot be disabled.
• Analytics cookies: Collect information about how you use the Site to help us improve it. These are set by third parties such as Google Analytics.
• Preference cookies: Remember your settings and preferences across visits.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Site. For EU visitors, we obtain consent for non-essential cookies where required by law.

We retain your personal data only as long as necessary for the purposes outlined in this Policy or as required by applicable law:

• Transaction records: Retained for up to 7 years as required for accounting, tax, and legal compliance purposes.
• Customer support communications: Retained for up to 3 years after your last interaction.
• Analytics data: Retained in accordance with the policies of the analytics provider (typically up to 26 months for Google Analytics).
• Marketing email lists: Retained until you unsubscribe or request deletion.

After the applicable retention period, we will securely delete or anonymize your personal data.

If you are located in the EEA, UK, or Switzerland, you have the following rights under the GDPR:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”): You may request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to restriction of processing: You may ask us to restrict how we process your data in certain circumstances.
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority within the EU).

To exercise any of these rights, please contact us at contact@peptly.com. We will respond within 30 days. We may require identity verification before processing your request.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out of sale or sharing: Peptly does not sell or share personal information for cross-context behavioral advertising. If this changes, we will update this Policy and provide an opt-out mechanism.
• Right to limit use of sensitive personal information: We do not collect or use sensitive personal information (as defined by the CPRA) for purposes other than those permitted without opt-out rights.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a CCPA/CPRA request, contact us at contact@peptly.com with the subject line “California Privacy Request.” We will respond within 45 days. We may need to verify your identity before processing your request.

Categories of personal information collected in the past 12 months: identifiers (email address, name), commercial information (transaction records), Internet or network activity (browsing data, analytics). These are collected for the purposes described in Section 3.

Peptly operates globally. Your information may be transferred to and processed in countries outside your country of residence, including the United States, which may have different data protection laws than your home country.

For transfers of personal data from the EEA, UK, or Switzerland to countries not recognized as providing an adequate level of data protection, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

By using the Site, you acknowledge and consent to the transfer and processing of your personal data in accordance with this Privacy Policy.

We implement commercially reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include secure hosting, limited access controls, and encrypted data transmission (HTTPS).

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your own accounts and access credentials.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

The Site and Products are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at contact@peptly.com and we will take steps to delete that information.

If you are under 16 years of age, please do not use the Site or submit any personal information to us.

The Site may contain links to third-party websites and services (such as Etsy, Gumroad, Notion, Instagram, TikTok, and YouTube). This Privacy Policy applies only to peptly.com. We are not responsible for the privacy practices or content of any third-party site or service.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of Peptly Products.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the effective date at the top of this page.

For material changes, we will make reasonable efforts to notify you (for example, by prominent notice on the Site or by email where applicable). Your continued use of the Site after any changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Peptly
Email: contact@peptly.com
Website: peptly.com

We take all privacy inquiries seriously and will respond to your request within 30 days (or within any shorter period required by applicable law).