Consumer Health Data Privacy Policy
Effective date: November 6, 2026
Peptide Scanner is run by Spanify Limited, a company registered in England and Wales (company number 16788776). This policy covers consumer health data we collect on peptidescanner.co. That means data that is linked or can be linked to a person and that may show something about their health, such as a medicine they take or a treatment they look for.
Washington’s My Health My Data Act and Nevada’s consumer health data law require a policy like this. You can use the rights in Section 6 wherever you live.
This policy adds to our Privacy Policy, which covers all personal data on the site. We do not sell consumer health data.
1. What we collect and how we use it
Prices you add in the US prescription compare tool
The tool works in your browser. When you move on to results from the price question, we save your price. A notice above the button says this first, and you can see results without saving. We store the provider, state, city if you gave one, peptide, how you take it, amount, price, how often you pay and what the price covers. We also store a scrambled one-way code made from your IP address. We do not store the IP address itself, and we do not ask for a name or email.
We use this to work out customer price totals and to stop repeat entries. We publish a total for a provider once 2 different people have reported it, and we never publish a single entry. A provider name you typed that is not on our list is never published. We keep an entry until you ask us to remove it or we no longer need it for these totals.
Price alerts
If you ask for a price alert, we store your email, the peptide, how you take it, amount, state and the words you agreed to. This can show a treatment you are interested in. It is optional and has no price or IP code with it. Alerts have not started, so we send nothing for now. When they start, the first email will ask you to confirm. Remove your email at any time on the removal page.
Lab test orders and testing requests
We store the products you name, your name, email, country, order and payment status, and any file you upload, such as a proof-of-purchase photo. If you ask for 2 or more tests or a call back, we also store your first name and phone number. With a form we store your browser’s User-Agent string and IP address. A product you want tested may relate to your health. We use this data to deliver the test or answer your request, and the IP address to stop abuse.
Reviews and accounts
We store your email, and for a review your rating, text, display name and IP address. A review can mention your health if you write about it. We use your email to sign you in. We publish the rating, text and display name once we approve the review. We use the IP address to spot repeated reviews.
Email sign-ups
If you sign up for email, we store your address, the peptide or supplier you chose if any, and a scrambled code made from your IP address as a record of your consent. We use these to send the emails you asked for.
Pages you view and links you click
The pages you read can suggest a treatment you are looking at. We count page views for every visitor with Vercel Web Analytics, which sets no cookies and does not store your IP address. If you accept analytics cookies, Google Analytics and PostHog also record your page views, clicks and device details. A page address can include the provider you came from. When you click a link to a retailer, we store the retailer, the product, a scrambled code made from your IP address, your User-Agent string and the page you came from. We use this to see how the site is used and to keep it working.
Ad measurement
If you reach an order page from a Google ad and then order, our server reports the ad click id, time, order value and our order reference to Google Ads. It does not send your name, email or what you ordered. If you accept marketing cookies, the Meta, Reddit and X pixels record page views and order events on our ad landing pages only. The compare tool does not use these pixels. We use this to measure our ads.
2. Where the data comes from
- You, when you fill in a form, save a price, write a review or sign up.
- Your browser or device, when you use the site.
- The link you arrived on, such as an ad click id or campaign tag.
- Revolut, which tells us whether a card payment went through and the amount.
4. Tracking across other websites
If you accept analytics or marketing cookies, Google, PostHog, Meta, Reddit and X may collect data over time and across different websites. Without that consent these tools do not load. You can change your choice at any time with “Cookie preferences” in the site footer.
5. How we process it
We store this data in our database and handle it with automated code and by hand when our team reviews a request or a review. The scrambled IP code uses a secret key, so outsiders cannot turn it back into an address. We can still match it against an IP address we are given, so we treat it as personal data.
6. Your rights and how to use them
You can ask us to:
- Confirm whether we collect, share or sell your consumer health data, and give you a copy.
- List the third parties and affiliates that received it, with a way to contact them.
- Stop collecting and sharing it, by withdrawing your consent.
- Delete it. We also tell the companies that received it to delete it.
- Correct it, where we can find the record.
Email compliance@peptidescanner.co with “Health data request” in the subject line. You do not need an account. We may ask for details to confirm the request is yours. We will not treat you worse for using these rights.
A saved price has no name or email with it, so we may not be able to find yours or confirm it is yours.
We answer within 45 days. If we need longer, we will tell you why within those 45 days and take at most 45 more. If you ask us to delete, we delete within 30 days after we confirm the request is yours. Answers are free. We may charge a fair fee or refuse only if requests are clearly unfounded, excessive or repetitive. If deleted data is also in a backup, it may stay there for up to six months.
If we say no
You can appeal. Reply to our decision, or email the address above with “Appeal” in the subject line. We will answer in writing within 45 days and give our reasons. If we still say no, you can complain to the Washington Attorney General, the Nevada Attorney General or the attorney general of your own state.
7. Changes to this policy
We post any change on this page and update the effective date. For a significant change, we email registered users at least 14 days before it takes effect. We ask for your consent before we collect, use or share consumer health data in a new way that this policy does not describe.