This policy explains what personal information Croma collects, how we use it, and your rights. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Who we are

Croma is a Canadian-operated research peptide supplier based in British Columbia. For privacy questions, email cromapeptides@gmail.com.

2. What we collect

When you place an order, we collect:

• Full name
• Email address
• Phone number
• Shipping address (street, city, province, postal code, country)
• Optional company or lab name
• Order details (products, quantities, dates, totals)
• Notes you choose to add to your order

We do not collect:

• Credit card or banking information (payment is via Interac e-transfer through your bank, which we never see)
• Government identification
• Health information
• Browsing behaviour outside our website

3. Why we collect it

The information above is used only to:

• Confirm and process your order
• Arrange payment and shipping
• Communicate with you about your order, including replacement or follow-up
• Comply with our legal obligations (tax records)

4. How we store it

Order information is stored in access-controlled systems used only by Croma operators. We do not store personal information in publicly shared documents or unencrypted spreadsheets. Access is limited to the people who need it to fulfill your order.

5. Who we share with

We share information with:

• The carrier delivering your order (name, address, phone for delivery contact)
• Our payment platform (your name, on the e-transfer record only)
• Government tax authorities, where required by law

We do not share, sell, or rent your information to advertisers, marketers, or third parties for any other purpose.

6. How long we keep it

We retain order records for six years from the date of the transaction, as required by Canada Revenue Agency rules for business records. After that period, records are deleted or anonymized.

7. Marketing

We do not add you to a marketing list when you place an order. If we ever launch a newsletter or promotional list, joining will require your explicit opt-in.

8. Your rights

Under Canadian privacy law, you have the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is inaccurate
• Ask us to delete your information (subject to our retention obligations for tax records)
• Withdraw consent for any optional uses (e.g., a marketing list, if you joined one)

To make any of these requests, email cromapeptides@gmail.com. We respond within 30 days.

9. Cookies and website analytics

Our website uses minimal essential cookies and local browser storage to keep your shopping cart functional. We do not use third-party advertising trackers. If we add basic analytics in the future (page view counts, traffic sources), it will be privacy-respecting and noted here.

10. Children

Croma products are for laboratory research and our website is not intended for anyone under 18. We do not knowingly collect information from minors.

11. Security

We take reasonable precautions to protect your information, including access controls and secure storage. No system is perfectly secure, but we limit what we collect and how it is stored to reduce risk.

12. International data

We are based in Canada and store data in Canada. We do not transfer customer data outside Canadian jurisdiction except where required for shipping (for example, a parcel routed through a US sortation hub on its way to your province).

13. Changes to this policy

We may update this policy as our operations evolve. The “Last updated” date at the top will reflect any changes. Material changes will be communicated via the website.

14. Contact

Email: cromapeptides@gmail.com
Croma
British Columbia, Canada