Privacy Policy
Last updated: April 24, 2026.
Who we are
Arkon Medical operates arkonmed.com. We supply research-grade peptides to verified licensed practitioners and qualified research institutions in the United States. Contact: [email protected].
What we collect
- Account info: name, email, NPI number, state license, DEA registration (if applicable), organization, specialty.
- Order info: billing/shipping addresses, order history, products purchased.
- Technical data: IP address, user-agent, session cookies, referral source.
- Communications: support inquiries, application materials, COA requests.
NPI verification via NPPES
We verify provider NPI numbers against the public HHS NPPES registry at application and on a daily basis. We do not share NPI data with third parties beyond NPPES.
Payment processing
Payments are processed by Stripe. We do not store credit card numbers. See Stripe’s privacy policy.
Third parties
- Stripe (payments)
- Postmark / SendGrid (transactional email — provider TBD)
- Cloudflare (CDN + WAF)
- NPPES (NPI verification)
Cookies
Session and login cookies (essential). WooCommerce cart and checkout cookies (essential). No third-party analytics or marketing trackers.
Your rights (CCPA + general)
You may request access to, correction of, or deletion of your personal data by emailing [email protected]. We respond within 30 days. Some data may be retained as required by law (orders: 7 years; tax/audit; controlled substance recordkeeping if applicable).
Data security
Transport encryption (TLS 1.2+), HSTS, two-factor authentication on administrator accounts, server-side rate limiting, and Cloudflare WAF. Limited admin access on a need-to-know basis.
Data retention
- Order records: 7 years (US tax + compliance)
- NPI verification logs: 3 years
- Marketing consent: until withdrawn
- Account data: until account deletion request
Updates to this policy
We update the “last modified” date at the top of this page. Material changes will be communicated via email to active accounts.