Legal

Privacy Policy

Effective September 10, 2026

Who we are

Peptivik is a patient intake and care coordination platform operated by Storm Strong, LLC (“Peptivik,” “we,” “us”). Peptivik is not a licensed medical provider, pharmacy, or healthcare practice. Medical services are provided by Beluga Health, P.A., an independent medical group.

This policy describes what information we collect through peptivik.com, how we use it, who we share it with, and the choices you have. Questions at any time: support@peptivik.com.

Information we collect

Contact and identity details you provide during intake — name, date of birth, sex, email, phone, and shipping address.

Health information you submit for provider review — your questionnaire answers, medications, allergies, medical conditions, and any photos you choose to upload.

Payment card details are collected and stored by Stripe, our payment processor, through a Stripe-hosted form. Your card number never touches Peptivik’s servers; we retain only a Stripe reference to the saved payment method.

Technical data generated by using the site — such as IP address, device and browser type, and access logs kept for security and reliability.

How we use your information

To route your intake to Beluga Health, P.A. so a licensed provider can review your request; to coordinate pharmacy fulfillment and shipping if treatment is approved; to process payment only after provider approval; to send transactional emails about your visit, order, and account; to respond to support requests; and to meet our legal and security obligations.

We do not use your health information for advertising. We do not sell your personal information.

How your information is shared

With Beluga Health, P.A. and its licensed providers, who conduct the medical review and make all clinical decisions.

With the state-licensed 503A compounding pharmacies that fill approved prescriptions and the carriers that deliver them.

With service providers that run our infrastructure: Stripe for payments and Amazon Web Services for secure hosting and email delivery.

With authorities if required by law. We do not share your information with data brokers or advertising networks.

Security

All traffic to Peptivik is encrypted in transit (TLS), and data is encrypted at rest on our AWS infrastructure. Access to health information is limited to what is needed to coordinate your care. Health information is handled in accordance with applicable law, including HIPAA where it applies.

Retention

We keep personal information for as long as it is needed to coordinate your care, maintain accurate records of visits and orders, and meet legal, billing, and security obligations — and no longer.

Cookies

Peptivik sets essential cookies only — for example, the session cookie that keeps you signed in to the patient portal. We do not use advertising cookies or third-party tracking pixels.

Your choices and rights

You can request access to, correction of, or deletion of your personal information by emailing support@peptivik.com. Depending on where you live, state law may give you additional rights; we honor applicable requests. Deletion requests may be limited where records must be kept by law — for example, records of prescriptions.

Eligibility

Peptivik is intended for United States residents aged 18 and older. Availability varies by state.

Changes to this policy

If we change this policy, we will post the updated version here with a new effective date.

Contact

Storm Strong, LLC · Patient support: support@peptivik.com