Privacy Policy
Last updated: October 2026
Limitless Peptides (“we”, “us”) sells research compounds to customers in Canada. This policy explains what personal information we collect, why, and what you can do about it. We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
When you place an order we collect your name, email address, phone number, billing address, shipping address, and the contents of your order. We also record the IP address and browser used to place the order, for fraud screening.
If you contact support or request a certificate of analysis, we keep your message and our reply so we can follow up.
If you tick the marketing consent box at checkout, we keep your email address and phone number for that purpose. The box is never ticked for you, and you can unsubscribe from any email we send.
We do not collect information from anyone under 18, and our products are sold for laboratory research use only.
Payment information
We accept Interac e-Transfer only, from Canadian bank accounts, and all prices and payments are in Canadian dollars.
We do not accept credit cards and we do not use a card payment processor, so no card details are ever entered on this site or held by us. When you send an e-Transfer, your bank shares your name, the sending institution and the reference you enter. We keep that alongside your order so we can match the payment to it.
Why we use it
- To process, ship, and support your order
- To meet tax and business record-keeping obligations
- To detect and prevent fraudulent orders
- To send marketing email, where you have opted in
We do not sell your personal information, and we do not share it for anyone else’s advertising.
Who we share it with
We share only what is needed, with:
- Shipping carriers, to deliver your order
- Our web host, GoDaddy, which stores the site and its database
- Google, whose Gmail service we use to send the emails described below
- Law enforcement or regulators, where we are legally required to
How we send email to you
This site sends its transactional email, meaning order confirmations, payment instructions, shipping notifications and password resets, through the Gmail API using a Google account that belongs to Limitless Peptides.
The application requests a single permission, gmail.send, which allows it to send mail from our own account. It cannot read, delete or modify any message in that mailbox, and it has no access to contacts, Drive, Calendar or any other Google service.
The Google account involved is ours, not yours. Placing an order with us does not give us access to any Google account of yours.
What we store for this is an access token and a refresh token for our own Google account, held encrypted in this website’s database and used only to send the emails described above. No other Google user data is stored.
We do not transfer Google user data to any third party, we do not use it for advertising, profiling or marketing analysis, and no person reads it.
Limitless Peptides’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Access can be revoked at any time from the Google account’s security settings at myaccount.google.com/permissions.
Analytics and cookies
The site sets cookies to keep your cart and session working. These are required for checkout to function.
We use Google Analytics to understand how the site is used. Google may process this data outside Canada. You can opt out using Google’s browser add-on.
Where your data is held
Our site and customer records are hosted by GoDaddy in the United States. Some of our service providers, including Google, process data outside Canada, which means it may be accessible to courts and authorities in those countries.
How long we keep it
Order and payment records are kept for seven years, as required for Canadian tax purposes. Support conversations are kept for two years. Marketing records are kept until you unsubscribe.
Your rights
You can ask us to:
- Tell you what personal information we hold about you
- Correct anything inaccurate
- Delete your information, where we are not legally required to keep it
- Withdraw consent to marketing at any time
We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Security
The site runs over HTTPS, administrator access is restricted, and payment details never touch our servers. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
If we change this policy we will update the date at the top of this page.
Contact
For any privacy question or request, contact us at limitlesshealthlabs@gmail.com