Legal

Privacy Policy

Last updated: May 26, 2026

BOILERPLATE NOTICE: This document is a starting template intended to be reviewed, edited, and finalized by a licensed attorney in your jurisdiction before being published. It is not a substitute for tailored legal advice on GDPR, CCPA, HIPAA, or other applicable laws.

1. Who We Are

Pétale Peptides, a brand of Kskin Company ("we", "us", "our"), operates petalepeptides.com (the "Site"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have.

2. Information We Collect

  • Account information: name, email, password (hashed), shipping address, phone.
  • Intake & quiz data: goals, age, height, weight, lifestyle, current medications, photos you upload.
  • Order & payment data: products purchased, billing details (payment card data is handled by our processor and is not stored on our servers).
  • Member dashboard data: progress check-ins, weight logs, energy/sleep ratings, notes, photos.
  • Technical data: IP address, device type, browser, pages visited, referral source, cookies and similar tracking technologies.
  • Communications: emails, chat messages, consultation transcripts.

3. How We Use Your Information

  • Process orders, ship products, and manage subscriptions.
  • Generate AI-driven blend recommendations based on your intake and progress data.
  • Provide customer service and consultations.
  • Send transactional emails (order confirmations, shipping updates, account notices).
  • Send marketing communications (only with your consent; you can opt out at any time).
  • Improve the Site, our products, and our recommendation algorithms.
  • Comply with legal obligations and enforce our Terms.

4. Sensitive & Health-Adjacent Data

Certain intake fields (height, weight, medications, photos) may be considered sensitive in your jurisdiction. We collect this data solely to deliver the recommendation and fulfillment service you request. We do not sell or share this data with advertisers. You may delete it from your dashboard at any time.

5. How We Share Information

  • Partner pharmacies & fulfillment partners to compound and ship your kit.
  • Payment processors (e.g., Stripe) to charge your card.
  • Service providers for hosting, analytics, email, and customer support, under confidentiality obligations.
  • Legal & safety: when required by law, subpoena, or to protect rights and safety.
  • Business transfers: in connection with a merger, acquisition, or asset sale.

We do not sell personal information for monetary consideration.

6. Cookies & Tracking

We use cookies and similar technologies for authentication, preferences, analytics, and marketing attribution. You can manage cookies through your browser settings. Disabling cookies may affect Site functionality.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion at any time (see Section 9).

8. Security

We use industry-standard administrative, technical, and physical safeguards (encryption in transit, hashed passwords, access controls) to protect your data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights

Depending on where you live (e.g., California, EEA, UK), you may have the right to access, correct, delete, port, or restrict processing of your personal information; to object to processing; and to withdraw consent. To exercise any right, email privacy@petalepeptides.com. We will respond within the timeframes required by applicable law.

10. California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what categories of personal information we collect, the right to delete, the right to correct, and the right to opt out of "sharing" for cross-context behavioral advertising. We do not knowingly sell personal information of consumers under 16.

11. EEA / UK Residents (GDPR)

We process personal data on the legal bases of contract performance, consent, legitimate interests, and legal obligation. International transfers are protected by Standard Contractual Clauses or equivalent safeguards. You may lodge a complaint with your local supervisory authority.

12. Children's Privacy

The Site is not directed to children under 18. We do not knowingly collect information from minors. If you believe a minor has provided data, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date will reflect the most recent revision. Material changes will be communicated by email or prominent Site notice.

14. Contact

Questions or requests? Contact us or email privacy@petalepeptides.com.