Privacy Policy

1. Who We Are

Allfather Supplements ("we", "us", "our") operates the website https://allfathersups.com. We supply research-grade peptides, bioregulators, and liposomal compounds for research purposes. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our site or place an order.

2. Information We Collect

We may collect the following categories of personal information: identity and contact data (name, email address, phone number, and date of birth collected at site entry for age verification); order and payment data (billing address, shipping address, and order history — payment card details are processed directly by Stripe and are never stored on our servers); usage data (IP address, browser type, pages visited, referral source, and session duration); referral data (if you generate or use a referral code, we record the code and associated email address); and any communications you send us via contact forms or email.

3. How We Use Your Information

We use your personal information to process and fulfil your orders and send order confirmations; verify that you meet the minimum age requirement to access our site; administer discount and referral programmes; respond to your enquiries and provide customer support; improve our website, products, and services; comply with legal obligations including Australian Consumer Law and applicable tax requirements; and detect and prevent fraud or misuse of our platform. We do not sell your personal information to third parties.

4. Legal Bases for Processing

Where the Australian Privacy Act 1988 (Cth) and, where applicable, the EU General Data Protection Regulation (GDPR) apply, we process your data on the following bases: Contract — to fulfil orders you place with us; Legitimate interests — to operate and improve our business, prevent fraud, and communicate with you about your account; Legal obligation — to comply with applicable laws and regulations; Consent — where you have explicitly agreed, such as subscribing to marketing communications.

5. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember cart contents, and analyse site traffic. You can control cookie preferences through your browser settings. Disabling cookies may affect certain site functionality, including checkout.

We use Stripe's client-side libraries, which may set their own cookies for fraud prevention purposes. Please refer to Stripe's Privacy Policy at https://stripe.com/privacy for details.

6. Sharing Your Information

We may share your information with: Stripe (our payment processor, to handle transactions securely); shipping carriers (to deliver your orders); service providers (hosting, analytics, and email providers who process data on our behalf under confidentiality obligations); and law enforcement or regulators (where required by law or to protect our legal rights).

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order records are typically retained for seven years for tax and accounting purposes. You may request deletion of your data at any time (see Section 9).

8. Security

We implement industry-standard security measures including HTTPS encryption, access controls, and regular security reviews. Payment data is handled exclusively by Stripe's PCI-DSS-compliant infrastructure — we never store raw card numbers. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); object to or restrict certain processing activities; data portability — receive your data in a structured, machine-readable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our site is intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. Our entry gate requires date-of-birth verification before access is granted. If you believe a minor has provided us with personal information, please contact us immediately.

11. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of our site after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected].