Peptides Privacy Policy

Effective date: September 11, 2026

This Privacy Policy explains how TGR Leafy LLC, doing business as Helix Aminos (“Helix Aminos,” “TGR Leafy,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you visit tgrleafy.com, create an account, communicate with us, accept a research-use acknowledgment, submit a wholesale application, place an order, or otherwise interact with our website, products, and services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree, please do not use the Services. This Privacy Policy should be read together with our Terms of Service and any research-use acknowledgment or certification presented during checkout.

1. Scope and Eligibility

The Services are offered only to individuals located in the United States who are at least 21 years old. The Services are not directed to children or anyone under 21. We do not knowingly collect personal information from anyone under 21. If you believe an individual under 21 has provided personal information to us, contact us so we can investigate and delete it where appropriate.

This Privacy Policy applies to information collected through the Helix Aminos portions of tgrleafy.com and related interactions with TGR Leafy LLC. It does not govern third-party websites, services, or applications that maintain their own privacy policies.

2. Personal Information We Collect

The information we collect depends on how you interact with us. It may include the following categories:

Identifiers and contact information

• Name, billing address, shipping address, email address, telephone number, customer number, account username, and similar identifiers.
• Age or confirmation that you are at least 21.
• Internet Protocol address, device identifiers, cookie identifiers, and similar online identifiers.

Account and transaction information

• Account credentials, preferences, order history, cart activity, products viewed, products purchased, quantities, shipping selections, transaction status, refunds, chargebacks, and customer-service records.
• Payment type, billing information, transaction authorization, payment token, and limited payment details supplied by our processors, such as card brand or last four digits. We do not directly store complete payment-card numbers.

Research-use and compliance records

• Your acceptance of research-use terms, certifications, disclosures, and waivers.
• Electronic signature, date and time of acceptance, IP address, order number, account information, and the version of the terms or waiver accepted.
• Information about intended lawful research use and communications concerning eligibility, restrictions, or compliance.

Wholesale and business verification information

• For wholesale applicants, we may collect business name, job title, business address, business email, business telephone number, resale or tax information, research credentials, licenses, corporate records, purchasing authority, intended use, and other information reasonably needed to evaluate or administer the account.
• We do not ordinarily request identity or credential documents from retail customers. Wholesale applicants may be asked to provide appropriate verification records.

Communications

• Emails, text messages, telephone communications, support requests, reviews, survey responses, dispute information, and other content you choose to provide.

Device, browsing, and analytics information

• Browser type, device type, operating system, language, approximate location derived from IP address, referring pages, pages visited, links selected, session activity, access times, and website performance or diagnostic information.
• Cookie, pixel, local-storage, and similar technology data used for essential website functions, preferences, security, analytics, cart functionality, and consent management.

Please do not send us medical records, diagnoses, treatment information, genetic information, or other health information. We do not request or intend to collect personal health information through the Services.

3. Sources of Personal Information

We collect personal information:

• directly from you when you browse, order, register, communicate, subscribe, complete a waiver, or apply for a wholesale account;
• automatically from your browser or device through cookies and similar technologies;
• from Shopify and other vendors that operate or support our website;
• from Authorize.Net, MiCamp, our acquiring bank, card networks, and other payment or fraud-prevention providers;
• from shipping carriers, fulfillment providers, address-verification providers, and delivery partners;
• from Google Analytics and other analytics or security providers we identify in our cookie controls;
• from wholesale businesses, authorized representatives, references, or publicly available business records; and
• from government agencies, regulators, law enforcement, courts, or other parties where permitted or required by law.

4. How We Use Personal Information

We may use personal information to:

• provide, operate, maintain, personalize, and improve the Services;
• create and administer accounts, carts, orders, payments, shipping, delivery, claims, refunds, and customer support;
• verify age, identity, account authority, wholesale eligibility, research-use representations, and compliance with our Terms;
• record and preserve research-use acknowledgments, electronic signatures, waivers, consent records, and applicable policy versions;
• detect, investigate, prevent, and respond to fraud, chargebacks, account misuse, prohibited purchases, security incidents, and unlawful activity;
• communicate about orders, accounts, products, documentation, policy changes, security, and support;
• send newsletters or promotional emails when you opt in and send marketing texts only when legally sufficient consent has been obtained;
• measure website traffic and performance, understand how visitors use the Services, debug errors, and improve navigation and content;
• maintain business, financial, tax, accounting, compliance, safety, quality, dispute, and legal records;
• enforce our agreements, establish or defend legal claims, respond to lawful requests, and comply with applicable law; and
• evaluate or complete a financing, merger, acquisition, reorganization, sale, or transfer involving all or part of our business.

5. Payments

Payments are processed through Authorize.Net, MiCamp, our acquiring bank, card networks, and related financial or fraud-prevention providers. Complete payment-card information is transmitted to and handled by those providers rather than stored directly by TGR Leafy LLC. We may receive limited transaction information such as payment status, authorization results, card brand, tokenized identifiers, and the last four digits of a card.

Payment providers process information under their own agreements and privacy notices. Their collection and processing practices are not controlled solely by this Privacy Policy.

6. Cookies and Similar Technologies

We and our service providers use cookies and similar technologies for:

• Essential operations: website navigation, checkout, cart preservation, account access, security, fraud prevention, and network management.
• Preferences: remembering choices and improving website usability.
• Analytics: measuring traffic, page interactions, website performance, and aggregated usage patterns, including through Google Analytics.
• Consent management: recording privacy and cookie selections.

We intend to provide a cookie banner or privacy-preference tool through which visitors can manage nonessential cookies. Until that tool is implemented, you may restrict cookies through your browser settings. Blocking essential cookies may prevent checkout, account, or other website functions from working correctly.

Where legally required and technically supported, we honor qualifying browser-based opt-out preference signals, including Global Privacy Control. Because technology and browser signals evolve, your browser settings may not control every device or service.

7. Google Analytics

We use Google Analytics to understand website usage and performance. Google may receive device, browser, IP-derived, cookie, and interaction information to provide analytics services. We configure analytics for measurement and improvement, not to sell personal information. Your ability to restrict analytics depends on our cookie controls, your browser settings, and tools Google makes available.

8. Email and Text Communications

We send marketing emails only to recipients who have subscribed or where otherwise permitted by law. You may unsubscribe using the link in a promotional email. Even if you unsubscribe from marketing, we may continue sending non-promotional messages about orders, accounts, security, compliance, or customer service.

If we offer marketing text messages, we will request legally sufficient consent before sending them. Consent to marketing texts is not a condition of purchase. Message and data rates may apply, and message frequency may vary. You may opt out by replying STOP or following the instructions in the message. We may send a confirmation of your opt-out. Transactional texts may be governed by separate consent or instructions presented when you provide your number.

9. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate business purposes:

• E-commerce and hosting providers, including Shopify, that operate our storefront, accounts, checkout, and supporting infrastructure.
• Payment and financial-service providers, including Authorize.Net, MiCamp, acquiring banks, card networks, fraud-prevention providers, and transaction processors.
• Shipping and operations providers, including carriers, fulfillment services, address-verification providers, inventory systems, and customer-support tools.
• Analytics, security, and technology providers, including Google Analytics, hosting, cloud storage, cybersecurity, consent-management, email, and SMS vendors used to support the Services.
• Electronic-signature and compliance providers used to collect, authenticate, transmit, and preserve research-use acknowledgments, waivers, and wholesale records.
• Professional advisers, including accountants, auditors, insurers, consultants, and attorneys subject to appropriate duties or restrictions.
• Governmental and legal recipients, including courts, regulators, law enforcement, tax authorities, and other parties when disclosure is required or permitted by law or reasonably necessary to protect rights, safety, and security.
• Transaction participants, including prospective or actual buyers, investors, lenders, advisers, and successors involved in a financing, merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, subject to appropriate safeguards where required.
• Recipients you direct or authorize, such as a shipping recipient, authorized account representative, or other party designated by you.

We do not sell or rent personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any notice and opt-out mechanism required by law.

10. Research-Use and Wholesale Records

Research-use acknowledgments and waivers are maintained to document purchaser representations, acceptance of applicable restrictions, the version accepted, and related transaction or compliance activity. Wholesale information may be used to verify business status, purchasing authority, intended use, tax treatment, and account eligibility.

We may deny, restrict, or terminate access or purchasing privileges when information is incomplete, cannot be verified, indicates prohibited activity, or creates a fraud, safety, legal, or regulatory concern.

11. Data Retention

We retain personal information only for as long as reasonably necessary and proportionate for the purposes described in this Privacy Policy, including providing the Services; maintaining transaction, payment, tax, accounting, COA, batch, waiver, consent, compliance, fraud-prevention, support, and dispute records; enforcing agreements; and satisfying legal obligations.

Certain transaction, compliance, research-use, waiver, safety, fraud, and legal records may be retained for the operating life of the business and afterward for any legally required or reasonably necessary archival, claims, tax, transfer, or wind-down period. Other information may be deleted, anonymized, or aggregated when it is no longer reasonably necessary. Retention periods depend on the nature and sensitivity of the information, the purposes of processing, legal requirements, potential disputes, and security considerations.

A deletion request does not require us to delete information that we must or are permitted to retain for completing transactions, recordkeeping, fraud prevention, security, legal compliance, exercising or defending claims, or other lawful exceptions.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include role-based access, individual staff accounts, authentication controls, two-factor authentication where available, vendor management, and access limitation.

No website, network, transmission, or storage system is completely secure. We cannot guarantee that personal information will never be accessed, lost, altered, or disclosed without authorization. You are responsible for protecting your credentials, using a unique password, restricting access to your devices, and notifying us promptly of suspected account compromise.

13. Your Privacy Choices

Depending on your state of residence and applicable law, you may have rights to:

• request access to or confirmation of personal information we maintain about you;
• request correction of inaccurate personal information;
• request deletion of eligible personal information;
• obtain a portable copy of certain personal information;
• opt out of the sale or qualifying sharing of personal information;
• limit certain uses of sensitive personal information where applicable;
• withdraw consent for optional marketing communications; and
• receive equal service and not be unlawfully discriminated against for exercising privacy rights.

Although some state privacy laws apply only after a business reaches specified thresholds, we may voluntarily consider reasonable access, correction, and deletion requests when doing so is practical, secure, and consistent with our legal and recordkeeping obligations. Voluntary handling of a request does not constitute a representation that a particular statute applies to us.

To submit a privacy request, email tgrleafy@gmail.com, call 626-900-9591, or write to the address in the Contact Us section. Describe the right you wish to exercise and provide enough information for us to locate relevant records.

We may need to verify your identity and authority before processing a request. Verification may require matching information already associated with your account or transaction. An authorized agent may submit a request where allowed by law, but we may require evidence of authorization and direct verification with the consumer. We will respond within the period required by applicable law.

14. California Privacy Notice

California residents may have rights under the California Consumer Privacy Act, as amended (“CCPA”), when the CCPA applies to the business or processing at issue. These may include rights to know, access, correct, delete, obtain information about collection and disclosure, opt out of sale or sharing, limit qualifying uses of sensitive personal information, and receive non-discriminatory treatment.

During the preceding 12 months, we may have collected the categories described in Section 2 from the sources described in Section 3, used them for the purposes described in Section 4, and disclosed them to the recipient categories described in Section 9. We do not knowingly sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics about consumers.

If the CCPA applies, qualifying requests will be handled according to applicable verification, timing, scope, and exception requirements. We will honor qualifying opt-out preference signals where required. Because we state that we do not sell or share personal information for cross-context behavioral advertising, there may be no sale or sharing from which to opt out.

15. State-Specific Rights and Appeals

Residents of certain states may have additional privacy rights, subject to statutory thresholds and exceptions. Where applicable, you may appeal our decision concerning a privacy request by replying to our response with “Privacy Appeal” in the subject line and explaining why you believe the decision should be reconsidered. We will provide any additional information or regulatory contact required by applicable law.

16. Do Not Track

Some browsers offer a “Do Not Track” setting, but there is no universally accepted standard governing responses to all such signals. We respond to legally recognized opt-out preference signals, such as qualifying Global Privacy Control signals, where required. A general Do Not Track signal may not produce the same result.

17. Third-Party Websites and Services

The Services may contain links to or integrations with third-party services. Those parties independently determine their privacy practices, and this Privacy Policy does not govern them. Review their privacy notices before providing information.

18. Business Transfers

If TGR Leafy LLC or any portion of its operations or assets is involved in a financing, merger, acquisition, restructuring, bankruptcy, dissolution, sale, or transfer, personal information may be reviewed, disclosed, or transferred as part of that transaction, subject to applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, vendors, Services, or legal obligations. The revised policy will be posted with a new effective date. We will provide additional notice of material changes when required by law. We encourage you to review this page periodically.

20. Contact Us

Questions, concerns, or privacy requests may be directed to:

TGR Leafy LLC, doing business as Helix Aminos
8531 Santa Monica Blvd
West Hollywood, CA 90069
Email: tgrleafy@gmail.com
Telephone: 626-900-9591