Privacy Policy

Effective September 24, 2026

This Privacy Policy explains how JD BioWorks collects, uses, discloses, and protects information through jdbioworks.com.

Information We Collect

• Contact and account information, including name, email address, organization, login details, and addresses.
• Research-use acknowledgments, account status, consent records, and information submitted through forms.
• Cart, order, product, shipping, support, refund, and transaction records when those features are used.
• Device, browser, IP address, server-log, cookie, security, and fraud-prevention information.
• Communications sent to support and optional marketing preferences.

Shopping and Checkout Diagnostics

For signed-in research accounts, JD BioWorks keeps a limited record of shopping steps linked to the account: products and quantities added to or removed from the cart, cart and checkout visits, the payment option selected at checkout, validation error codes, and order or bank-return status signals. We use these records to diagnose checkout problems and assist customers. Only store administrators can view them. The diagnostic records are deleted after 90 days or when the account is deleted. They do not contain passwords, bank account or routing numbers, IP addresses, or Finagy return tokens, and are not sent to advertising platforms.

How We Use Information

We use information to operate and secure the site; create and manage accounts; provide product, documentation, cart, and order functions; send account and service messages; respond to support; prevent fraud and misuse; comply with legal obligations; maintain records; and improve site performance. Optional marketing messages are sent only when the recipient has opted in and may be stopped at any time.

Service Providers and Disclosures

Information may be disclosed to providers that support hosting, website operation, security, email, forms, analytics, payments, shipping, accounting, and customer service; to professional advisers; in connection with a business transaction; when required by law; or when reasonably necessary to protect rights, safety, accounts, or systems. Payment and transaction information is handled through the method disclosed at checkout. For Pay by Bank orders, Finagy hosts bank-data entry and returns transaction status information needed to process and reconcile the order. JD BioWorks does not request bank-account or payment-card details by email and does not intentionally store complete bank-account or card-security data.

Cookies

Essential cookies support login, cart, security, and preferences. Other cookies are controlled as described in the Cookie Policy and the site’s cookie-preference tool.

Analytics, Advertising, Consent, and Referral Technologies

Subject to your cookie choices, Google Analytics and WooCommerce attribution help us understand visits, traffic sources, shopping-session performance, and completed-order measurement. Meta Pixel may measure site visits and advertising performance only when marketing consent is active. TrustedSite provides the site trustmark and associated visit reporting, and Cloudflare supplies security and bot-management services.

Cookiez, an Elementor service, operates the cookie-preference interface and may process the selected consent categories, page URL, site identifier, browser user-agent information, and related consent-event data to record and apply the choice. Site-side WP Consent API cookies communicate those categories to compatible WordPress integrations. Preference and provider records are retained according to the periods described in the Cookie Policy and the providers’ configured retention terms.

With marketing consent, first-party referral cookies can store a pseudonymous referral identifier and capture time for up to 30 days, and limited completed-order or refund attribution may be reported as described below. JD BioWorks honors Global Privacy Control and also treats DNT: 1 as a site-owned opt-out from nonessential processing. You can also reject or withdraw nonessential consent through the Cookies control.

Retention and Security

Information is retained for as long as reasonably necessary for the purpose collected, including account operation, customer support, tax and business records, fraud prevention, dispute resolution, and legal compliance. We use reasonable administrative and technical safeguards, but no online system can be guaranteed completely secure.

Your Choices and Requests

You may update account information through My Account, unsubscribe from optional marketing using the message link, adjust nonessential cookies through the site control, or request access, correction, or deletion by emailing support@jdbioworks.com. Some records may be retained when required for security, transaction, tax, dispute, or legal purposes. California residents should also review the California Privacy Notice.

Children

The site is not directed to children, and research-account registration requires the user to confirm that they are at least 21 years old.

Referral Attribution and Peptides.SO Reporting

If you arrive through an eligible Peptides.SO referral link and accept marketing cookies, JD BioWorks records a pseudonymous referral identifier and its capture time. When an order is created, the applicable referral source is fixed on that order so later browser activity cannot change which referral program receives credit.

Only completed or refunded orders attributed to Peptides.SO are reported to Peptides.SO. The report contains the JD BioWorks store URL, WooCommerce order identifier, order status, currency, discounted merchandise amount or refund delta, referral identifier and capture time, and a unique event identifier. It does not contain the customer’s name, email address, billing or shipping address, IP address, payment or bank details, or card information.

We use this limited information to preserve referral attribution, measure referred-order conversions, prevent duplicate reporting, and reconcile referral credit and reversals. The browser referral cookies last for up to 30 days. Order-level attribution and delivery records may be retained with transaction and business records as described under Retention and Security. You can withdraw marketing consent through the site’s cookie-preference control.

ChatGPT advertising measurement

With your marketing-cookie permission, we use OpenAI’s ChatGPT Ads Pixel and, when enabled, a server connection to measure visits and completed purchases. The Pixel stores an ad-click reference (__oppref, up to 30 days) and a browser reference (__obref, up to 365 days). It can detect customer information, such as an email address entered on the site, and normalize and hash it in your browser before sending it to OpenAI to help match a purchase to an ad. Raw customer information is not sent through this automatic matching.

Our server connection sends the ad/browser references, an opaque purchase reference, the payment time, currency, and merchandise value after discounts, excluding tax and shipping. It does not include names, raw contact details, or product lists. Browser and server events share a reference to prevent duplicate purchase counts. You can withdraw marketing consent through our cookie preferences; we honor Global Privacy Control and Do Not Track. Withdrawal stops future measurement and prevents pending server delivery for the browser references we can identify. It cannot undo events already delivered. See OpenAI’s Privacy Policy.