Legal
Privacy Policy
Effective
Who we are
This website is operated by Peptaris, Inc. (“Peptaris”, “we”, “us”), Lilly Gateway Labs, 2300 Market Street, Philadelphia, PA 19103, United States. This policy explains how we handle personal information when you visit peptaris.com or contact us. For the purposes of the EU and UK General Data Protection Regulation (GDPR), Peptaris is the controller of that information.
Summary
- We have no user accounts, contact forms, or newsletter sign-ups on this site.
- We do not use advertising, tracking, or social-media cookies, and we do not sell or share personal information.
- With your consent only, we use cookieless, aggregated analytics to understand which pages are visited.
- If you email us, we use your message to reply.
Information we collect
Information you send us
When you email us (for example about a partnership, a job opening, or a press inquiry), we receive your name, email address, and anything you include in your message or attachments, such as a CV. Please do not send us confidential or personal health information.
Technical information processed by our hosting provider
Like every website, our servers receive technical data when your browser requests a page: IP address, browser and device type, the page requested, the referring page, and the date and time. Our hosting provider, Vercel Inc., processes this data on our behalf to deliver the site, keep it secure, and prevent abuse. We do not use it to identify you.
Analytics (only with your consent)
If you select “Accept analytics”, we use Vercel Web Analytics to count page views and measure performance. It does not use cookies or similar storage, and it does not track you across websites. Vercel identifies a visit with a hash created from the incoming request, which is discarded after 24 hours. We only see aggregated statistics such as page URL, referrer, country, browser, operating system, and device type. You can change your choice at any time with .
What we do not collect
We do not knowingly collect sensitive personal information through this website, and we do not use personal information for profiling, automated decision-making, or targeted advertising.
How we use information and our legal bases
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Replying to inquiries and managing partnerships | Name, email, message contents | Legitimate interests; steps prior to a contract |
| Considering job applications | Name, contact details, CV and application details | Steps prior to an employment contract; legitimate interests |
| Operating and securing the website | Technical request data | Legitimate interests |
| Aggregated website analytics | Cookieless analytics data | Consent |
| Complying with law and protecting our rights | Any of the above, as needed | Legal obligation; legitimate interests |
How we share information
We share personal information only with:
- Service providers who process it on our instructions, such as our website host and analytics provider (Vercel Inc.) and our email provider.
- Authorities or other parties where required by law, or to protect the rights, safety, or property of Peptaris or others.
- A successor in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA) and similar laws. We have not done so in the past 12 months.
Retention
We keep emails and application materials for as long as needed to respond and manage the relationship, and generally no longer than 24 months after our last contact unless a longer period is required by law. Hosting logs are kept by Vercel for a limited period for security and operations. Analytics data is aggregated and does not identify you.
US state privacy rights
Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with consumer privacy laws), you may have the right to:
- know what personal information we have collected about you and how we use and disclose it;
- access and receive a portable copy of your personal information;
- correct inaccurate personal information;
- delete personal information we hold about you;
- opt out of the sale or sharing of personal information, targeted advertising, and profiling (we do not engage in these activities); and
- not be discriminated against for exercising your rights.
Notice at collection (California). In the past 12 months we collected identifiers (such as name and email address) and professional information that you sent us by email, and internet activity information (technical request data and, with consent, aggregated analytics). The sources, purposes, recipients, and retention periods are described above.
To exercise your rights, email info@peptaris.com (opens your email app). We will verify your request using the information we hold, and we respond within the time required by law (generally 45 days). You may use an authorized agent; we may ask for proof of their authority. If we decline your request, you may appeal by replying to our decision, and you may contact your state attorney general if you are not satisfied with the outcome of your appeal.
EEA and UK visitors
If the GDPR or UK GDPR applies to you, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local data protection authority. Contact us at info@peptaris.com (opens your email app) to exercise these rights.
Global Privacy Control and Do Not Track
We honor the Global Privacy Control (GPC) signal. If your browser sends it, analytics stays off and we treat it as a valid opt-out request. Analytics is also off by default until you opt in, so it is never active for browsers that send Do Not Track without consent.
Children
This website is not directed to children under 16, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.
International transfers
We are based in the United States, and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or our providers’ certification under the EU-U.S. Data Privacy Framework.
Security
The site is served only over HTTPS with modern security headers. We limit access to personal information to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Third-party websites
Our site links to publications, news articles, and other websites that we do not control. Their privacy practices are governed by their own policies.
Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new effective date. See also our Cookie Notice.
Contact us
Peptaris, Inc., 2300 Market Street, Philadelphia, PA 19103, United States. Email: info@peptaris.com (opens your email app).