Majesty Holdings Pty Ltd (ACN 140 407 236) trading as Silverback Peptides
PO Box 212, Moorebank NSW 1875, Australia

Effective date: 01 November 2025
Last reviewed: 26 May 2026

1. About this policy

This Privacy Policy explains how Majesty Holdings Pty Ltd (ACN 140 407 236) trading as Silverback Peptides (“we”, “us”, “our”) collects, uses, discloses, stores and protects personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We operate silverbackpeptides.com.au, an Australian online supplier of reference compounds and research peptides for laboratory and in vitro research use only.

2. Research-use-only — important customer declaration

All products supplied through silverbackpeptides.com.au are sold strictly for laboratory research and in vitro experimental use only. They are not therapeutic goods, are not approved for use in humans or animals, and are not intended for human or veterinary consumption, ingestion, injection, inhalation, or any clinical, diagnostic or cosmetic application.

By creating an account, placing an order, or otherwise providing personal information to us, you warrant and represent that:

  • You are 18 years of age or older;
  • You are a qualified researcher, research organisation, or otherwise lawfully entitled to purchase research chemicals in your jurisdiction;
  • You will use the products solely for legitimate laboratory research purposes;
  • You will not on-sell or supply the products for human or animal consumption.

This declaration forms part of our terms of supply and underpins the lawful basis on which we collect and process your personal information.

3. What personal information we collect

We collect only the personal information reasonably necessary for our business functions:

  • Identity & contact data — name, shipping and billing address, email, phone number, and your research-purpose declaration at checkout.
  • Account data — username, securely hashed password, order history, saved addresses.
  • Transaction data — products ordered, order value, transaction reference, and partial card details (last 4 digits, card brand, expiry) returned from our payment processor.
  • Technical data — IP address, browser type and version, device identifiers, referrer URL, pages viewed, timestamps, and cookies (see Section 9).
  • Communications data — records of correspondence, support tickets, and consent records.

We do not store full payment card numbers, CVV codes, or full card track data. Payment card information is collected directly by our PCI-DSS compliant payment processor and is never transmitted through or stored on our servers.

4. How we collect personal information

We collect information directly from you when you:

  • create an account or place an order;
  • contact us by email, contact form, or social media;
  • subscribe to marketing communications;
  • complete the research-use declaration at checkout.

We also collect technical information automatically through cookies, server logs, and analytics tools when you use our website.

5. Why we use and disclose your information

We use your personal information to:

  • process and fulfil your orders, including shipping and customs documentation;
  • verify your research-purpose declaration and age;
  • prevent and detect fraud, chargebacks, and unauthorised transactions;
  • comply with our legal obligations, including taxation, anti-money-laundering, and consumer law;
  • respond to your enquiries and provide customer support;
  • send transactional communications (order confirmations, shipping updates);
  • send marketing communications where you have consented, in accordance with the Spam Act 2003 (Cth);
  • improve our website, products, and services through analytics;
  • maintain business records and audit trails.

6. Who we disclose your information to

We disclose personal information only to the following categories of recipient, and only to the extent necessary:

  • Payment processors — our nominated PCI-DSS compliant payment service provider for card processing and fraud screening (provider name disclosed at checkout).
  • Shipping & logistics providers — Australia Post and any courier required to deliver your order.
  • Hosting & infrastructure providers — Vercel Inc. (frontend hosting) and our WordPress CMS hosting provider.
  • Analytics & marketing platforms — Google Analytics, Google Tag Manager, Meta Pixel (where applicable), and our nominated email marketing platform (provider disclosed at the point of subscription).
  • Professional advisors — accountants, auditors, and legal advisors under confidentiality obligations.
  • Government & regulatory bodies — where required by Australian law, court order, or lawful request.
  • Successors in business — in the event of a sale, merger, or restructure, subject to equivalent privacy protections.

We do not sell your personal information.

7. Overseas disclosure (APP 8)

Some of our service providers store or process data outside Australia. The likely countries where your information may be disclosed include:

  • United States — Vercel, Google, Meta, and payment processor infrastructure;
  • European Union — certain backup, CDN, and email service infrastructure.

Where information is disclosed overseas, we take reasonable steps to ensure the recipient handles the information consistently with the Australian Privacy Principles.

8. Data security

We implement reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, modification, or disclosure, including:

  • TLS/SSL encryption of all data transmitted between your browser and our site;
  • PCI-DSS compliant payment processing handled exclusively by our payment provider;
  • access controls, role-based permissions, and audit logging on backend systems;
  • regular software updates and security patching;
  • secure password hashing for user accounts.

In the event of an eligible data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

9. Cookies and tracking

Our website uses cookies and similar technologies:

  • Essential cookies — required for cart, checkout, account login, and security. These cannot be disabled.
  • Analytics cookies — Google Analytics, to understand site usage. You may opt out via the Google Analytics Opt-out Browser Add-on.
  • Marketing cookies — used for retargeting and measuring advertising effectiveness, only with your consent.

You can manage or disable cookies through your browser settings, but parts of our site may not function correctly without them.

10. Marketing communications

We send direct marketing only where you have provided consent (e.g. subscribing to our newsletter or opting in at checkout). Every marketing email contains a one-click unsubscribe link. You can also unsubscribe by emailing privacy@silverbackpeptides.com.au.

11. How long we retain your information

We retain personal information only as long as necessary, or as required by law:

  • Customer account information — for the life of your account, plus 12 months after closure.
  • Transaction and tax records — 7 years, as required by Australian Taxation Office record-keeping rules.
  • Marketing subscriber data — until you unsubscribe, plus 30 days for processing.
  • Website analytics data — typically 14 months.
  • Support correspondence — 3 years.

Once no longer required, information is securely deleted or de-identified.

12. Your rights — access, correction, and complaints

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate, out of date, or incomplete;
  • Withdraw consent to marketing at any time;
  • Request deletion of your data, subject to our legal retention obligations;
  • Lodge a complaint if you believe we have mishandled your information.

To exercise these rights, email privacy@silverbackpeptides.com.au. We respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992

13. Children

Our products and services are not intended for individuals under 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at silverbackpeptides.com.au/privacy-policy. Material changes will be notified by email or a prominent notice on our website.

15. Contact us

For privacy enquiries, access requests, corrections, or complaints:

Privacy Officer
Majesty Holdings Pty Ltd (ACN 140 407 236) trading as Silverback Peptides
PO Box 212, Moorebank NSW 1875, Australia
Email: privacy@silverbackpeptides.com.au
General support: support@silverbackpeptides.com.au