Privacy Policy

Who we are

Vialprep is a peptide supplies and education company operated by Sharmini Ratnasingham, based in Bangkok, Thailand. We sell sterile medical supplies and educational materials. We do not sell, manufacture, prescribe, or distribute peptides, hormones, or controlled substances.

Contact: hello@vialprep.com

What we collect

We collect only what we need to deliver your kit and improve the experience.

• Protocol data (peptide name, dose, frequency) entered in our dose calculator at /get-started. Used to personalize your experience and send dosing reminders. Stored in Supabase (Singapore region).
• Contact information (name, email, phone number, delivery address) provided at checkout or via the /get-started flow. Contact info is encrypted client-side before it reaches our database.
• Payment data processed by Stripe. We never see or store your full card number. Stripe's privacy policy governs payment data.
• Anonymous analytics (page views, button taps, scroll depth) tracked with a random anonymous ID. No personally identifiable information is attached to analytics events.

What we do not collect

• Medical history or health records
• Government-issued identification
• Biometric data
• Location data beyond your delivery address

How we use your data

• Delivering your kit: address, name, and phone number are shared with our courier (Grab) for same-day delivery only.
• Personalizing your experience: protocol data powers your dose calculator results and any reminders you opt into.
• Improving Vialprep: anonymous, aggregated analytics help us understand which parts of the flow work and which need fixing. Your answers stay your answers.

We never sell, rent, or trade your data. We never use health-related data for marketing without your explicit consent.

Third parties

• Stripe (payment processing, USA)
• Supabase (database, Singapore region)
• Vercel (website hosting)
• Grab (delivery, Bangkok)

Each provider is contractually bound to protect your data and use it only for the purpose we share it.

Data security

Contact information is encrypted client-side before insertion into our database. All connections use HTTPS/TLS. Access to production data is limited to the founder. We do not guarantee the security of unencrypted communications (email, SMS).

Your rights under Thailand PDPA

Under the Personal Data Protection Act B.E. 2562 (PDPA), you have the right to:

• Access your personal data and request a copy.
• Correct any inaccurate or incomplete data.
• Delete your data. One message deletes everything. We will not ask why.
• Withdraw consent for any processing you previously agreed to.
• Object to processing of your data for marketing purposes.
• Port your data to another service in a machine-readable format.

To exercise any of these rights, email hello@vialprep.com. We will respond within 30 days.

Cookies

We use localStorage (not cookies) to save your place in the /get-started flow and store your anonymous analytics ID. No third-party tracking cookies are used. No advertising pixels are installed.

Data retention

We retain your data for as long as you are an active customer. If you request deletion, we remove your data within 30 days, except where retention is required by Thai law (e.g., tax records).

Changes to this policy

We will update this page when anything changes. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about your data? Email hello@vialprep.com.