Privacy Policy

Privacy Policy

Last updated: September 6, 2026

Red Leaf Research Labs (“Red Leaf Research Labs”, “we”, “us” or “our”) operates redleafpeptides.com, a Canadian supplier of research peptides sold for laboratory research use only. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to this website, to orders placed through it, and to our email and text-message programs.

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for commercial email and text messages, Canada’s Anti-Spam Legislation (CASL).

1. Information we collect

Information you give us

• Order information. Your name, shipping address, billing address, email address and phone number when you place an order.
• Account information. If you create an account, your username, password (stored encrypted, never in readable form) and order history.
• Contact and support. Anything you send us through our contact form, by email, or through the WhatsApp chat link on the site.
• Marketing sign-ups. Your email address, and your phone number if you opt in to text messages, when you subscribe through our sign-up form.
• Affiliate and referral information. If you join our affiliate program, the details you submit to enrol and the referrals attributed to you.

Information collected automatically

• Device and usage data. IP address, browser type, operating system, referring page, the pages you view and how long you spend on them.
• Cookies and similar technologies. Used to keep your cart working, remember your session, and measure how the site is used. See section 5.
• Security logs. Our security plugin records IP addresses and request details to block malicious traffic and login attempts.

We do not knowingly collect sensitive personal information such as health information, and we ask that you do not send it to us. Our products are research chemicals; we do not ask what you intend to study and we do not provide medical guidance.

2. How we use your information

• To process, fulfil and ship your order, and to send order confirmations, shipping notices and receipts
• To answer questions and provide customer support
• To verify eligibility, screen for fraudulent or high-risk orders, and enforce our Legal Terms
• To send marketing email or text messages, where you have given express consent
• To understand how the site is used so we can improve it
• To meet our legal, tax and record-keeping obligations

3. Payment information

We currently accept payment by Interac e-Transfer. We do not collect, process or store credit card or debit card numbers on this website, and no card data passes through our servers. When you pay by e-Transfer, your payment is handled by your own financial institution under its terms and privacy practices; we receive only the confirmation and the sender details your bank includes.

4. Email and text-message marketing

We send marketing email and text messages only to people who have given express consent, for example by subscribing through the sign-up form on this site. Consent is never a condition of purchasing from us.

• Email. Every marketing email includes an unsubscribe link and identifies us as the sender, with a mailing address, as required by CASL. Unsubscribing takes effect immediately.
• Text messages. Reply STOP to any message to stop receiving them, or use the unsubscribe link where one is provided. Message and data rates may apply and message frequency varies.
• Transactional messages. Order confirmations, shipping updates, password resets and similar messages are not marketing and are sent regardless of your marketing preferences.

Our email and text-message program is operated on our behalf by Klaviyo, Inc. Subscriber information is stored on Klaviyo’s platform.

5. Cookies and analytics

This site uses cookies and similar technologies for three purposes:

• Strictly necessary. Keeping items in your cart, keeping you signed in, remembering that you have acknowledged our research-use-only notice, and page caching. The site does not work properly without these.
• Analytics. Google Analytics and WooCommerce analytics tell us which pages and products people visit, in aggregate. We also use a third-party analytics tracker operated by our SEO agency.
• Advertising. Google Ads tags let us measure which ads lead to orders and, where permitted, show ads to people who have visited the site.

You can control cookies through your browser settings, and through any cookie notice shown to you on the site. Blocking analytics and advertising cookies will not affect your ability to browse or order. Most browsers also offer a “Do Not Track” signal; there is currently no common standard for responding to it, so we do not act on it separately.

6. Who we share information with

We do not sell your personal information, and we do not rent or trade our customer or subscriber lists. We share information only with service providers who need it to do work for us, and only for that purpose:

• Hosting and website infrastructure — our web host, content delivery and backup providers, who store the site and its database
• Shipping and fulfilment — our shipping software and carriers, including UPS and other couriers, which receive the name, address, phone number and email needed to deliver and track your parcel
• Email and text messaging — Klaviyo, Inc. for marketing messages, and our transactional email service for order and account notices
• Analytics and advertising — Google (Analytics, Ads, Search Console) and our SEO agency’s analytics tracker
• Security — our website security and firewall provider

We may also disclose personal information if we are required to do so by law, by a court order, or by a lawful request from a government or law enforcement authority, or where necessary to protect our rights, our customers or the public. If our business is ever sold or reorganised, customer information may be transferred as part of that transaction, subject to this policy.

7. Where your information is stored

Some of our service providers are located in the United States or other countries, so your personal information may be stored or processed outside Canada. While it is outside Canada, it is subject to the laws of that country and may be accessible to that country’s courts, law enforcement and national security authorities. We use providers that offer a comparable level of protection to what is required in Canada.

8. How long we keep information

We keep order and transaction records for as long as required for tax and business record-keeping obligations in Canada, generally seven years. Account information is kept while your account is open. Marketing subscriber information is kept until you unsubscribe, after which we retain a minimal record of the unsubscribe so that we do not contact you again. Security and server logs are kept for a short period and then overwritten.

9. How we protect information

This site is served over an encrypted HTTPS connection. Access to customer data is limited to the people who need it to run the business, accounts are protected by strong authentication, and the site is protected by a firewall and malware scanner. Backups are encrypted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take these safeguards seriously and review them.

10. Your rights and choices

Under PIPEDA you have the right to:

• Access the personal information we hold about you, and be told how it has been used and who it has been disclosed to
• Correct information that is inaccurate or incomplete
• Withdraw consent to marketing at any time, and to withdraw consent to other uses subject to legal and contractual restrictions
• Ask us to delete information we no longer need to keep
• Complain to us, and to the Office of the Privacy Commissioner of Canada if you are not satisfied with our response

To exercise any of these rights, email us at info@redleafpeptides.com. We will respond within 30 days. We may need to confirm your identity before releasing information. There is no charge for a reasonable request.

11. Age requirement

This website and its products are intended for qualified adults conducting laboratory research, and you must be at least the age of majority in your province or territory (18 or 19) to order. This site is not directed at children, and we do not knowingly collect personal information from anyone under the age of majority. If you believe a minor has provided us with personal information, contact us and we will delete it.

12. Links to other sites

Our site links to third-party sites, including certificate-of-analysis records published by our independent testing laboratory. Those sites have their own privacy practices and we are not responsible for them. We encourage you to read their policies before providing information.

13. Changes to this policy

We may update this policy as our business, our tools or the law change. The “last updated” date at the top shows when it was last revised. Material changes will be posted on this page, and where the change affects marketing consent we will contact subscribers directly.

14. How to contact us

Questions, requests and privacy complaints can be sent to:

Red Leaf Research Labs
Privacy enquiries
Ontario, Canada
Email: info@redleafpeptides.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

See also our Legal Terms, which cover eligibility, research-use-only conditions, returns and refunds.