Privacy Policy

Seven Enterprises LLC, a Delaware limited liability company, doing business as TROPEZ

Effective date: October 5, 2026
Last updated: October 5, 2026

1. Scope

This Privacy Policy explains what personal information Seven Enterprises LLC, doing business as TROPEZ (“TROPEZ”, “we”, “us”, “our”), collects when you visit tropezpeptides.com (the “Site”), create an account, place an order, purchase a membership, or contact us; how we use and disclose it; how long we keep it; and the rights you have over it.

It applies to the Site and to our customer communications. It does not apply to any third-party website we link to.

One point specific to our business: we sell laboratory research materials, not medical products. We do not ask for, want, or knowingly collect information about your health, medical conditions, treatments, or any clinical matter, and you should not send us any. If you send us health information unsolicited, we will delete it rather than file it against your account. Nothing in your purchase history with us is a record of anything about your body.

2. Information we collect

2.1 Information you give us

Category	Examples	Why
Identifiers	Name, email address, telephone number, postal and billing address, account username	To create and operate your account, take and fulfil orders, and contact you
Account credentials	Password (stored only as a cryptographic hash, never in readable form)	To authenticate you
Commercial information	Products viewed and purchased, order history, amounts paid, membership plan and billing history, returns and support history	To fulfil orders, operate your account and membership, and provide support
Payment information	Payment card or bank details, entered into our payment processor’s fields	To take payment. We do not receive or store your full card number. It is collected and held by our payment processor under its own PCI-DSS obligations. We retain only the card type, the last four digits, the expiry, and the processor’s transaction reference
Research attestation record	The attestation text shown to you, the date and time you accepted it, and the IP address from which you accepted	To record the condition on which the sale was made, as described in Section 3 of the Terms and Conditions of Sale
Purchaser context	Where you provide it: institution or organisation name, role, and institutional email	To verify that an order is consistent with research use
Communications	The content of emails, contact-form messages, SMS messages and calls with us	To answer you and to keep a record of what was agreed

2.2 Information collected automatically

When you use the Site we and our analytics and advertising providers collect: IP address, approximate location derived from it (city or region level), device and browser type, operating system, screen characteristics, referring URL, pages and products viewed, search terms entered on the Site, time on page, click and scroll interaction, cart and checkout events, and cookie or similar device identifiers.

2.3 Information from third parties

We receive information from: our payment processor (authorisation results, fraud and risk scores, chargeback notices); our shipping carriers and fulfilment platform (tracking, delivery and exception events, address correction); fraud-prevention services (device and transaction risk signals); and advertising and analytics platforms (aggregate campaign and conversion reporting).

2.4 Sensitive personal information

We do not collect sensitive personal information as defined by California law for the purpose of inferring characteristics about you. In the ordinary course we collect: account log-in credentials (necessarily, to authenticate you), and precise financial account information only to the extent our payment processor requires it to take your payment. We do not collect race or ethnic origin, religious or philosophical beliefs, union membership, genetic data, biometric identifiers, health information, or information about sex life or sexual orientation. We do not collect precise geolocation.

2.5 Children

The Site is not directed to anyone under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact info@tropezpeptides.com and we will delete it.

3. How we use personal information

To create and operate your account and authenticate you.
To process, verify, fulfil, ship and invoice your orders.
To take payment, prevent and investigate fraud, and manage chargebacks.
To record and retain your research attestation, and to assess whether an order is consistent with the research-use condition of sale.
To operate the membership, including taking recurring payments, applying member pricing, sending renewal reminders and receipts, and processing cancellations.
To provide customer support and respond to your enquiries.
To send transactional messages you cannot opt out of while you hold an account or an order with us: order confirmations, dispatch and tracking notices, payment receipts, membership renewal reminders, security notices, and notices of changes to these policies.
To send marketing emails and, where you have separately consented, marketing SMS — see Section 6.
To measure and improve the Site, understand which products and pages are used, and diagnose faults.
To measure the effectiveness of our advertising and to show you advertising on third-party platforms — see Section 5.
To maintain records required for tax, accounting, audit and regulatory purposes.
To establish, exercise and defend legal claims, and to comply with law, subpoenas and lawful requests.

We do not sell your personal information for money. We disclose it as follows.

4.1 Service providers and processors

We disclose personal information to the vendors that run our business, each under a written contract that limits them to processing it for us and prohibits them from using it for their own purposes:

Function	Provider	What it receives
Website hosting and infrastructure	Kinsta; Cloudflare	Site traffic, IP addresses, all data stored in the Site database
Store platform	WordPress / WooCommerce	Accounts, orders, membership records
Payment processing	Our payment gateway and acquiring bank	Name, billing address, email, card or bank details, amount, device and risk signals
Order fulfilment and shipping	ShipStation; USPS, UPS, FedEx and comparable carriers	Name, shipping address, telephone, email, order contents, weight
Customer relationship management and email	GoHighLevel	Name, email, telephone, order and membership events, message history
SMS messaging	Our SMS provider	Telephone number, consent record, message content
Analytics	Google Analytics	Device and usage data, cookie identifiers, IP address
Advertising	Meta Platforms; Google	Cookie and device identifiers, page and purchase events, hashed email where used for matching
Business email	Google Workspace	Message content you send to or receive from us
Accounting and tax	Our accounting platform and tax advisers	Transaction and invoice records

4.2 Legal and protective disclosure

We disclose personal information where we believe in good faith it is necessary to: comply with law, a court order, subpoena, or lawful request from a government or regulatory authority; enforce the Terms and Conditions of Sale, including the research-use condition; investigate suspected fraud or unauthorised account access; or protect the rights, property or safety of TROPEZ, our customers or the public.

4.3 Corporate transaction

If we are involved in a merger, acquisition, financing, reorganisation or sale of assets, personal information may be disclosed to the counterparty and its advisers, subject to confidentiality, and may be transferred as part of the transaction. We will give notice on the Site before your information becomes subject to a materially different privacy policy.

4.4 Advertising platforms — treated as “sharing” and “selling” under state law

We use advertising and analytics technologies that transmit identifiers and activity from the Site to Meta Platforms and Google for the purpose of measuring and targeting advertising, including advertising shown to you on other sites and apps. Under California law this is “sharing” for cross-context behavioural advertising, and under several other state privacy laws it may constitute a “sale” of personal information even though we receive no money for it.

You can opt out. Use the “Do Not Sell or Share My Personal Information” link in our footer, or set the Global Privacy Control signal in your browser, which we honour automatically as an opt-out request for the browser that sends it. Opting out does not affect your account, your pricing, or your ability to purchase.

The categories of personal information shared for this purpose are: identifiers (cookie and device identifiers, IP address, and hashed email where used for matching) and internet activity (pages and products viewed, cart events, purchase events and order value). We do not share sensitive personal information for cross-context behavioural advertising, and we do not knowingly share the personal information of anyone under 16.

5. Cookies and tracking

We use:

Strictly necessary cookies — sign-in, session, cart, security and fraud prevention. The Site does not work without these and they are not subject to consent.
Functional cookies — remembering preferences such as a selected filter or size.
Analytics cookies — Google Analytics, to measure Site usage.
Advertising cookies and pixels — the Meta pixel and Google advertising tags, to measure conversions and target advertising.

You can control cookies through your browser settings and clear them at any time; blocking strictly necessary cookies will prevent sign-in and checkout from working. We honour the Global Privacy Control signal. You can also opt out of Google Analytics using Google’s browser add-on, and manage advertising preferences in your Meta and Google account settings.

We do not use the Site to track you across other sites for any purpose other than the advertising measurement and targeting described in Section 4.4.

6. Email and SMS marketing

6.1 Email

With your consent, or where permitted as an existing customer, we send marketing email about products, pricing and membership. Every marketing email contains an unsubscribe link, which takes effect promptly. Unsubscribing from marketing does not stop transactional messages about your orders, payments, membership renewals or account security, which we must send while you hold an account or an order.

6.2 SMS

We send marketing SMS only where you have given prior express written consent by affirmatively opting in — by ticking an unticked box or by texting a keyword to us. Consent to SMS marketing is never a condition of purchase, and we record the date, time, source and exact consent language for every opt-in.

If you opt in: message frequency varies; message and data rates may apply; reply STOP to any message to opt out, or HELP for assistance; carriers are not liable for delayed or undelivered messages. We do not sell or disclose SMS consent records or mobile numbers to third parties for their own marketing.

7. Your privacy rights

7.1 California residents (CCPA as amended by the CPRA)

You have the right to:

Know the categories and specific pieces of personal information we have collected about you, the categories of source, the business purpose, and the categories of third party to whom we disclosed it.
Delete personal information we hold about you, subject to the exceptions in Section 7.4.
Correct inaccurate personal information.
Opt out of sale and sharing for cross-context behavioural advertising — see Section 4.4.
Limit the use and disclosure of sensitive personal information. We do not use or disclose sensitive personal information beyond the purposes permitted without a limitation right, so there is nothing further to limit; the right is available to you regardless.
Non-discrimination. We will not deny you goods or services, charge you a different price, or give you a lower quality of service because you exercised a right. We offer no financial incentive in exchange for personal information.

We have not sold personal information for monetary consideration in the preceding twelve months. We have shared the categories identified in Section 4.4 for cross-context behavioural advertising in the preceding twelve months. We have disclosed the categories in Section 2 to the service-provider categories in Section 4.1 for business purposes in the preceding twelve months.

7.2 Residents of other states

If you live in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Nebraska, New Hampshire, New Jersey, Iowa, Indiana, Tennessee, Minnesota, Maryland, Kentucky, Rhode Island or another state with a comprehensive privacy law in force, you have broadly equivalent rights: to confirm processing and access your data; to correct it; to delete it; to obtain a portable copy; to opt out of targeted advertising, sale, and profiling with legal or similarly significant effects; and, in most of those states, to appeal a refusal of a request. We do not conduct profiling that produces legal or similarly significant effects.

Appeals. If we refuse your request, you may appeal by replying to our decision or writing to info@tropezpeptides.com with “Privacy appeal” in the subject line. We will respond within the period your state’s law allows and, if we maintain the refusal, tell you how to contact your state attorney general.

7.3 How to make a request

Email info@tropezpeptides.com with “Privacy request” in the subject line, or telephone (805) 252-1066, and tell us which right you are exercising.

We verify requests before acting on them, to a degree of certainty matched to the sensitivity of what is requested. For an account holder, we will normally verify by asking you to make the request from the email address on the account and to confirm details that match our records. For a deletion or a request for specific pieces of information, we may ask for additional confirmation. We will not ask for more information than is necessary, and we use what you give us for verification only.

We respond to acknowledge within ten (10) business days and substantively within forty-five (45) calendar days, extendable once by a further forty-five (45) days where reasonably necessary, in which case we will tell you. Requests are free unless they are excessive or repetitive, in which case we will tell you before doing any work.

Authorised agents. An agent may make a request on your behalf with your signed written permission, which we may ask to verify directly with you. Opt-out requests may be submitted by an agent without verification of the agent’s authority where the law provides, but we may ask you to confirm you gave permission.

7.4 Limits on deletion

Some information we cannot delete on request, and we will tell you which and why. In particular, we retain for the periods in Section 9: completed transaction records and invoices, required for tax and accounting law; the research attestation record and lot allocation for each order, which is the record of the condition on which a regulated sale was made and which we must be able to produce; records necessary to detect and prevent fraud or to resist a payment dispute; and anything we must keep to comply with a legal obligation or to establish or defend a legal claim. Where we cannot delete, we restrict the information to those purposes.

7.5 California “Shine the Light”

California Civil Code § 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures. You may confirm this by writing to info@tropezpeptides.com.

8. Security

We protect personal information with measures appropriate to its sensitivity, including: TLS encryption of all traffic to and from the Site; encryption of data at rest at our hosting provider; password hashing; access limited to personnel who need it; multi-factor authentication on administrative accounts; a web application firewall and bot mitigation; logging of administrative access; vendor due diligence and written data-protection terms; and keeping full card numbers out of our systems entirely by using a payment processor that collects them directly.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. Choose a unique password, do not reuse it, and tell us immediately at info@tropezpeptides.com if you suspect unauthorised access to your account. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as the law requires.

9. How long we keep information

Record	Retention
Account record	While the account is open, then 24 months after it is closed or last used, then deleted
Order, invoice and payment record	7 years from the transaction, for tax, accounting and audit
Research attestation record and lot allocation	7 years from the order
Payment dispute and fraud record	7 years from resolution
Marketing email list membership	Until you unsubscribe, then a suppression record only, kept indefinitely so we do not email you again
SMS consent record	5 years after consent is withdrawn, to evidence the consent that applied
Customer support correspondence	3 years from the last message
Analytics and advertising data	14 months at platform level, or less where the platform’s default is shorter
Server and security logs	12 months

Where a period has run, we delete or irreversibly de-identify the information, except where we must keep it longer for a legal obligation, an ongoing dispute, or an unresolved claim.

10. Where information is processed

We operate in the United States and our vendors process information in the United States. Some vendors maintain support, backup or content-delivery infrastructure in other countries; where they do, they are contractually bound to equivalent protection.

11. Third-party links

The Site links to third-party sites, including certificate-of-analysis files hosted by testing laboratories and payment pages operated by our processor. Those operators have their own privacy policies and we are not responsible for their practices.

12. Changes to this Policy

We may update this Policy. The current version is always posted on the Site and the “Last updated” date reflects the latest change. For material changes affecting how we use information we already hold, we will give notice by email to registered customers or by a prominent Site notice before the change takes effect.

13. Contact

Privacy questions and requests:

Seven Enterprises LLC dba TROPEZ
Attn: Privacy
[BUSINESS ADDRESS NOT SET]
info@tropezpeptides.com
(805) 252-1066