Privacy Policy

PFPEP LLC | www.pfpep.com
Effective date: September 27, 2026 · Last updated: September 27, 2026

We sell research materials intended solely for laboratory and in-vitro research use. We do not sell personal data for money. We do not sell sensitive personal data. We do not sell biometric data. Mailing Address: P.O. Box 1598, Cedar Park, TX 78630.

PFPEP LLC (“Company,” “we,” “us,” or “our”) operates the website www.pfpep.com and related order, customer-service, and research-supply channels (the “Site”). This Privacy Policy describes how we collect, use, share, retain, and protect personal information, and how Texas residents and other visitors may exercise privacy rights. By using the Site or placing an order, you acknowledge this Policy. If you do not agree, do not use the Site.

1. Who this Policy covers

This Policy applies to visitors, account holders, and purchasers who use the Site from the United States, including Texas. It does not apply to employment records of our staff. Our products are research-use-only laboratory materials.

We do not collect medical treatment records, clinical patient files, or protected health information in the ordinary course of operating this catalog.

2. Categories of personal data we process

Account and identity data. Name, email address, phone number, account login credentials, and research-institution or company name if you provide it.

Order and fulfillment data. Shipping address, billing address, order contents, order history, delivery notes, and communications about an order.

Payment-related data. Payment method type, billing ZIP code, last four digits of a card when returned by a processor, and transaction status. We do not store full card numbers, CVV codes, or bank account numbers on our own systems. Those details are handled by PCI-compliant payment processors.

Technical and device data. IP address, browser type, device type, operating system, referring URL, pages viewed, timestamps, and approximate location derived from IP address (city/region level, not precise GPS).

Cookie and analytics data. Session cookies needed for cart and checkout, preference cookies, and, if enabled on the Site, analytics or advertising cookies.

Support data. Messages you send us, attachments you upload (for example photos of damaged packaging), and records of how we responded.

Sensitive data (limited). Texas law treats some identifiers as “sensitive,” including government ID numbers, precise geolocation, and certain account-login credentials in combination with access codes. We do not request Social Security numbers, driver’s license numbers, or health diagnoses to complete a standard research-supply order. We do not knowingly collect data from children under 18, and we do not market to minors.

3. Sources of personal data

We collect information directly from you when you create an account, check out, subscribe to emails, or contact support; automatically through the Site and server logs; from service providers that help us process payments, ship packages, prevent fraud, host the Site, or send transactional email; and from communications platforms if you email or message us. We do not buy consumer lists for resale.

4. Purposes of processing

We use personal data only as reasonably necessary for completing purchases and shipping research materials; providing order confirmations, tracking, and customer support; maintaining accounts and preventing unauthorized access; detecting fraud, chargebacks, abuse, and policy violations; improving Site performance, inventory planning, and product availability; sending transactional messages that are part of an order; sending marketing emails only if you opted in or as otherwise permitted by law, with an unsubscribe option; complying with tax, accounting, customs, and legal obligations; enforcing our Terms, Shipping Policy, and Refund Policy; and protecting the security and integrity of the Site. We limit collection to what is adequate, relevant, and reasonably necessary for these disclosed purposes.

5. How we share information

We may share personal data with payment processors; shipping and logistics providers; website hosts, cart platforms, and email vendors; fraud-prevention and security vendors; professional advisers bound by confidentiality duties; authorities when required by law; and parties to a merger, asset sale, or reorganization. We do not rent mailing lists.

We do not authorize third parties to use your personal data for their own independent marketing. If a processor handles data for us, we require contractual limits consistent with the purpose of the service.

6. Sale of data, targeted advertising, and profiling

For Texas privacy-notice purposes: we do not sell personal data for monetary consideration; we do not sell sensitive personal data; we do not sell biometric data; and we do not use profiling that produces legal or similarly significant decisions about you. If the Site later uses advertising cookies or pixels that Texas treats as a “sale” or “targeted advertising,” we will disclose that activity in this Policy, provide a clear “Do Not Sell or Share My Personal Data / Opt Out of Targeted Advertising” link, and honor recognized universal opt-out signals, including Global Privacy Control (GPC), for Texas consumers. Until such tools are enabled, any analytics we use is limited to understanding Site traffic and checkout performance.

7. Cookies and similar technologies

The Site may use strictly necessary cookies for cart, checkout, login, and security; functional cookies to remember preferences; analytics cookies to measure traffic, if activated; and advertising cookies only if we enable them and disclose that fact. You can control cookies through your browser. Blocking necessary cookies may prevent checkout from working.

8. Retention

We keep personal data only as long as needed for the purposes above, then delete or de-identify it, unless a longer period is required by law. Typical periods: order, invoice, and tax records as required by Texas and federal recordkeeping rules; account credentials while the account remains open and for a reasonable period after closure; support tickets as needed to resolve and document the issue; server logs for a limited operational period unless needed for security investigation; marketing email lists until you unsubscribe or the list is purged; and records of privacy-rights requests for at least two years after the last relevant consumer interaction, or longer if required.

9. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the volume and nature of the data we handle. These may include encrypted checkout, restricted staff access, password controls, and vendor security requirements. No method of internet transmission is completely secure. You are responsible for keeping your account password confidential. If we dispose of records containing personal identifying information, we will do so in a manner intended to make the information unreadable or indecipherable, consistent with Texas Business and Commerce Code Chapter 521.

10. Security incidents (Texas Chapter 521)

If we determine that a breach of system security has occurred involving sensitive personal information, as that term is defined in Texas law, we will notify affected individuals without unreasonable delay and no later than 60 days after we determine that a breach occurred, unless a permitted law-enforcement delay applies. If 250 or more Texas residents are affected, we will also report the incident to the Office of the Attorney General of Texas within the time required by statute (currently no later than 30 days after determination of the breach).

11. Texas consumer rights (Chapter 541)

If you are a Texas consumer and this Policy applies to our processing of your personal data, you may request to: confirm whether we process your personal data and access that data; correct inaccuracies; delete personal data provided by or obtained about you, subject to legal exceptions; obtain a copy of personal data you previously provided to us, in a portable and readily usable format if available; and opt out of the sale of personal data, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects, if we ever engage in those activities. A parent or legal guardian may exercise these rights on behalf of a known child.

How to submit a request: email support@pfpep.com with the subject line “Texas Privacy Request”; use the privacy-request form on www.pfpep.com if published; or mail a written request to the Texas Mailing Address: P.O. Box 1598, Cedar Park, TX 78630. We will need enough information to verify you are the person making the request or an authorized agent. We will respond without undue delay and within 45 days of receiving an authenticated request. If reasonably necessary, we may extend that period by an additional 45 days if we notify you of the extension and the reason within the first 45 days. We will process up to two free requests from the same consumer in a twelve-month period.

Appeals: if we deny your request in whole or in part, you may appeal by emailing support@pfpep.com with the subject line “Privacy Appeal.” We will review the appeal and respond in writing within the time required by Texas law. If you disagree with the appeal result, you may contact the Office of the Attorney General of Texas.

12. California and other U.S. state rights

Residents of other states with consumer privacy laws may have similar rights to know, access, correct, delete, port data, and opt out of sale or targeted advertising. Submit the same request described above and identify your state of residence. We will honor applicable rights that apply to our processing. We do not discriminate against you for exercising privacy rights.

13. Children

The Site is intended for adults who are legally able to enter a research-supply transaction. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

14. Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” signal. There is no uniform industry standard for responding to DNT. Where Texas law requires recognition of a universal opt-out mechanism such as Global Privacy Control for sale or targeted advertising, we will treat a valid GPC signal from a Texas consumer as an opt-out of those activities to the extent we engage in them.

15. International visitors

We operate in the United States and process data in the United States. If you access the Site from outside the U.S., you understand that your information may be transferred to and stored in the United States, where privacy laws may differ from those in your country.

16. Third-party sites

The Site may link to laboratories, carriers, payment pages, or educational articles we do not control. Their privacy practices are governed by their own policies.

17. Research-use reminder

Personal data collected through this Site is used to operate a research-supply business. It is not used to provide medical care, diagnose conditions, or create a patient file. Product pages and order records describe laboratory materials, not treatments.

18. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date will change when we do. Material changes will be posted on this page. Continued use of the Site after an update means you accept the revised Policy to the extent permitted by law.

19. Governing law

This Policy is intended to be read with our Terms and Conditions. Except where a privacy statute requires otherwise, this Policy is governed by the laws of the State of Texas, without regard to conflict-of-law rules. Venue for disputes that are not exclusively reserved to a regulator is as stated in our Terms.

20. Contact

Privacy requests, questions, and appeals: PFPEP LLC, Attn: Privacy Request. Email: support@pfpep.com. Website: https://www.pfpep.com. Mailing Address: P.O. Box 1598, Cedar Park, TX 78630. For complaints about Texas privacy rights, you may also contact the Office of the Attorney General of Texas.