Privacy Policy
What we collect when you open an account or send us a sample, what we do with it, and the things we deliberately refuse to do.
Version 1.0 · Effective 21 August 2026
The short version
We never sell your data
No sale, no sharing for advertising, no data brokers, and no telling a vendor who tested their product.
Results stay private
There is no public list of certificates. Your suppliers and lots are nobody else’s business.
Lookups are anonymous
Anyone with a certificate number can verify it without an account and without identifying themselves.
This summary is for orientation only. The numbered sections below are the policy.
1Who we are
The controller
Test My Research LLC, trading as TestMyResearch, is responsible for the personal information described here. You can reach us at support@testmyresearch.com or by post at the address published on this site.
What this covers
This policy covers testmyresearch.com and the testing service ordered through it. It does not cover sites we link to, or the separate privacy practices of a payment provider you choose at checkout.
2What we collect
Account information
Your name, email address, password (stored only as a hash we cannot reverse), and whether the account is individual or business. Business accounts also carry the company name that appears on certificates and invoices.
Order and sample information
The peptide name as you labeled it, the lot or batch number, where you told us the material came from, which tests you ordered, the turnaround you chose, and the address you asked us to send results to. The ‘where it came from’ field is optional and is never published.
Payment information
We never see or store your card number. Card and pay-later payments are handled by Stripe, through WooPayments, and by Klarna, Afterpay or Affirm if you choose one. We receive only the outcome, the last four digits, the card brand and the billing address needed to reconcile the order.
Records of what you agreed to
The version of the Terms you accepted, the date and time you accepted it, and your research-use declaration for each order. We keep these because we may need to show what you agreed to and when.
Technical information
Server logs with your IP address, browser user agent, requested pages and timestamps. Failed certificate lookups are counted against a hashed form of your IP address for ten minutes, to stop anyone guessing certificate numbers at speed.
What we do not collect
We do not ask for and do not want your date of birth, government identifiers, health information, or any information about why you are testing a sample. Do not send it to us.
3Why we use it, and on what basis
To perform the contract
Matching an incoming package to the right order, running the analysis, issuing the certificate, taking payment and answering your emails. Without this information there is no service to provide.
To meet legal obligations
Tax and accounting records, and any report we are legally required to make about a submitted sample.
For our legitimate interests
Keeping the site secure, preventing fraud and abuse of the certificate lookup, keeping proof of what was agreed, and fixing things that break. We balance these against your interests and keep the data minimal.
With your consent
Analytics cookies, and any marketing email you have specifically opted into. You can withdraw consent at any time and it does not affect processing already carried out.
4What we deliberately do not do
We do not sell or share your personal information
Test My Research LLC does not sell personal information, and does not share it for cross-context behavioural advertising, as those terms are defined under California law. We have never done so.
We do not publish who tested what
There is no public list of certificates on this site, and that is deliberate. A result belongs to the customer who paid for it. Publishing every peptide we tested would expose your suppliers, your lots and your purchasing to anyone curious enough to look.
Certificate lookup is anonymous
Anyone holding a certificate number can verify it without an account, without giving us an email address, and without us learning who they are. Lookups are submitted as form posts, so a valid certificate number never lands in a URL, a browser history, a referrer header or our access logs.
We do not profile you
We make no automated decisions that produce legal or similarly significant effects about you.
5Who we share it with
Payment processors
Stripe, and whichever of Klarna, Afterpay or Affirm you choose. They act as independent controllers for the payment itself and their own privacy policies apply.
Hosting and email
Hostinger hosts this site and delivers our email. They process data on our instructions.
If you sign in with Google, Google confirms your identity to us and we receive your name and email address. We use Google Site Kit for aggregate site analytics.
Nobody else
We do not share your information with peptide vendors, suppliers, marketplaces, data brokers or advertisers. If a supplier asks us who tested their product, the answer is no.
When the law requires it
We disclose information where we are legally compelled to, or where it is necessary to establish, exercise or defend a legal claim. Where we are permitted to tell you, we will.
6How long we keep it
Your sample
Leftover material is retained for 30 days after we release your certificate, then destroyed. We do not return samples.
Certificates
Certificate records are kept indefinitely. A certificate that stopped verifying would be worthless to the customer holding it, and to anyone they showed it to.
Orders and financial records
Kept for seven years, which is what tax and accounting rules require.
Account data
Kept while your account is open, and for seven years after closure where it forms part of an order record.
Logs
Server logs are kept for a short operational period. Certificate lookup rate-limit counters expire after ten minutes.
7Your rights
Everyone
You can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email support@testmyresearch.com and we will respond within 30 days.
California residents
Under the CCPA as amended by the CPRA you may request disclosure of the categories and specific pieces of personal information we collected, the purposes, and the categories of third parties we disclosed it to; request deletion; request correction; and opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but the right exists and we will honour a request. We will not discriminate against you for exercising any of these rights.
Limits
We may not be able to delete information we are legally required to keep, such as financial records, or information that forms part of an issued certificate. Where we cannot delete something, we will tell you why.
Complaints
If you think we have handled your information badly, tell us first — we would rather fix it. You may also complain to your local data protection authority.
8Cookies
Strictly necessary
WooCommerce sets cookies to keep your cart and your signed-in session working. The site cannot function without these and they are not optional.
Performance
LiteSpeed Cache may set a cookie to serve the right cached version of a page. It does not identify you.
Analytics
Google Site Kit sets analytics cookies where you have consented. Decline and the site works exactly the same.
Your browser
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will break the cart and sign-in.
9Security, and its limits
What we do
The site is served over HTTPS. Passwords are stored as hashes. Card details never touch our servers. Certificates are not enumerable and lookups are rate limited. Access to customer data is limited to people who need it to run the lab.
What we cannot promise
No system is perfectly secure, and we cannot guarantee that transmission over the internet is free from interception. If a breach affects your personal information and the law requires it, we will notify you and the relevant authority.
10Changes and contact
Changes
We will post any change here and update the version. Material changes are notified by email. This is version 1.0, effective 21 August 2026.
Contact
Privacy questions, or to exercise any right above: support@testmyresearch.com, or write to Test My Research LLC at the address published on this site.
Verifying a certificate does not identify you
If someone offered you a vial and gave you a COA number, you can check it here without an account and without telling us who you are. We do not log the number you looked up against you, and the lab is never told that a certificate was checked.