Privacy Policy

Effective date: September 25, 2026

1. Information We Collect

Personal Information

We collect information you provide directly to us, including:

  • Name and contact information
  • Billing and shipping addresses
  • Payment information
  • Account credentials
  • Communication preferences

Professional Information

  • Medical license information
  • Institution or practice affiliation
  • Medical credentials and certifications
  • Intended medical use of products

Automatic Information

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent
  • Cookies and similar technologies

2. How We Use Your Information

Order Processing

  • Process and fulfill orders
  • Verify medical credentials
  • Communicate about orders and shipping
  • Provide customer support

Regulatory Compliance

  • Maintain records as required by law
  • Verify licensed medical professional status
  • Comply with FDA and state regulations

Business Operations

  • Maintain and improve our services
  • Conduct research and analytics
  • Comply with legal obligations

Marketing Communications

  • Send newsletters and promotional materials (with consent)
  • Provide updates about new products and services

3. Information Sharing

Third-Party Service Providers

We may share information with:

  • Payment processors
  • Shipping companies
  • Credential verification services
  • Cloud storage providers
  • Analytics services

Legal Requirements

We may disclose information when required by law or to protect our rights and safety.

Regulatory Authorities

We may share information with FDA, state medical boards, or other regulatory authorities as required.

Business Transfers

In case of merger, acquisition, or sale, your information may be transferred to the new entity.

4. Bank Account Data (Plaid)

What we connect

Stride uses Plaid Inc. (“Plaid”) to connect Stride’s own business bank account to our internal administration system, read-only. When a bank account is connected through Plaid, we receive the account name, the last four digits of the account number, balances and transaction history (date, amount and description).

How it is used

This data is used only to show incoming deposits to authorized Stride administrators and to match them to customer invoices for bookkeeping. It is not sold, used for marketing, or shared with customers or sales agents. Plaid is never used to move money.

Consent

A bank account is connected only by an authorized person who signs in through Plaid Link and expressly consents to sharing that account’s data. Plaid’s handling of your data is described in the Plaid End User Privacy Policy (plaid.com/legal).

Protection

Bank data is encrypted in transit (TLS) and at rest (AES-256). The Plaid access credential is additionally encrypted at the application level, and bank data is visible only to administrator accounts.

Disconnecting and deletion

An administrator can unlink a bank at any time; unlinking revokes Plaid access immediately and deletes the stored access credential. Transaction records already used for bookkeeping are kept under the retention periods below, then deleted.

5. Text Messages (SMS)

What we text

If you opt in, Stride Distribution LLC sends account-related text messages to the mobile number you provide: invoice and payment reminders, order and shipping updates, and account notices such as portal invitations and sign-in links. We do not send marketing texts. Message frequency varies (typically up to 4 per month). Message and data rates may apply.

Consent

Texting is optional and never a condition of purchase. You opt in by checking the texting box when you create your account, or by telling our staff you agree (we record the date and how you agreed). Reply STOP to any message to opt out, START to opt back in, or HELP for help. See our SMS Terms at stridepeptide.com/sms-terms.

No sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third party, except with our messaging provider (Twilio) solely to deliver the messages you asked for.

6. Data Security

Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of sensitive data
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments

Payment Security

Payment information is processed securely and we do not store credit card details on our servers.

Medical Information Protection

Medical credentials and professional information are protected with enhanced security measures.

7. Your Rights and Choices

Access and Correction

You may request access to or correction of your personal information.

Data Portability

You may request a copy of your data in a structured format.

Deletion

You may request deletion of your personal information, subject to legal and regulatory requirements.

Marketing Opt-Out

You may unsubscribe from marketing communications at any time.

Text Message Opt-Out

Reply STOP to any Stride text to stop receiving texts. Reply HELP for help.

8. Cookies and Tracking

Cookie Usage

We use cookies to enhance your browsing experience and analyze website traffic.

Cookie Management

You can control cookie settings through your browser preferences.

9. International Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States, where our servers are located.

10. Data Retention

We retain your information for as long as necessary to provide services and comply with legal and regulatory obligations, including medical record retention requirements.

Retention periods

  • Orders, invoices, payments and bank transactions used for bookkeeping: 7 years after the end of the fiscal year they relate to (tax and accounting record requirements), then deleted.
  • Bank connection credentials (Plaid access tokens): deleted immediately when a bank is unlinked.
  • Account and contact information: for the life of the account, and up to 7 years after closure where needed for the records above.
  • Deletion requests are honored within 30 days, except for records we are legally required to keep.

Review

This policy and our retention practices are reviewed at least once a year and whenever our data practices change.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes.

14. Contact Information

For privacy-related questions or requests, contact our Privacy Officer at support@stridepeptide.com.

Questions? Contact support@stridepeptide.com. · Privacy Policy · Terms of Service