Privacy Policy

MySpaLive ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, order research-grade peptide products, or interact with our services. This policy applies to all visitors, customers, distributors, and authorized research professionals who access our platform.

This Privacy Policy is designed to comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) for EU residents, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), the Virginia Consumer Data Protection Act (VCDPA), and other applicable state, federal, and international regulations.

By accessing or using our Site, you agree to the practices described in this Privacy Policy.

We collect the following categories of personal information:

• Personal Identifiers: Name, email address, phone number, billing address, shipping address, and account credentials.
• Professional Information (Aesthetic Practice Division): Medical license numbers, license type (RN, NP, PA, MD, DO), certifications, practice information, and training records. Note: These records relate solely to our separate aesthetic practice education and training programs (e.g., Botox, dermal fillers). They are not associated with our Peptide Sciences Division, which sells research chemicals strictly for in vitro laboratory use only.
• Financial Information: Payment details processed through our secure payment processor (Stripe). We do not store raw card numbers on our servers.
• Commercial Information: Purchase history, products viewed, order details, and transaction records.
• Compliance Records (Aesthetic Practice Division): Professional credential verification, training records, and compliance documentation for our aesthetic training programs. These records are maintained separately from our Peptide Sciences Division and do not pertain to research peptide orders.
• Usage Data: IP address, browser type, device information, pages visited, time on site, and referring URLs collected through cookies and analytics tools.
• Geolocation Data: General location based on IP address or provided shipping/billing address. We do not collect precise GPS-level geolocation data.
• Age Verification Data: Confirmation that you are at least 21 years of age, as required for access to our peptide products.
• Communication Data: Messages, support tickets, and correspondence with our team.
• Distributor Data: Referral codes, commission records, pre-order history, and discount code usage.

We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have collected such information inadvertently, please contact us immediately at support@myspalive.com.

We collect personal information through:

• Directly from You: When you register an account, place an order, sign up as a distributor, or contact our support team.
• Automatically: Through cookies, web beacons, and analytics tools (e.g., Google Analytics) that track your interactions with the site.
• From Third Parties: From payment processors (Stripe), shipping carriers, and analytics providers, as necessary to fulfill your orders and comply with regulations.

We use the information we collect to:

• Process orders, fulfill shipments, and manage your account
• Verify professional credentials and training records (Aesthetic Practice Division only — not applicable to Peptide Sciences orders)
• Issue certifications and maintain training records for aesthetic practice course students (Aesthetic Practice Division only)
• Send order confirmations, shipping notifications, and account updates
• Provide customer support and respond to inquiries
• Manage the distributor program, including referral tracking and commission processing
• Improve our platform and develop new features through usage analytics
• Verify age eligibility (21+) for peptide orders, and professional credentials for aesthetic practice programs (separate divisions)
• Ensure compliance with applicable regulations and state licensing requirements
• Prevent fraud, enforce our Terms, and protect platform security
• Send marketing communications with your consent (you may opt out at any time)

We will not use your personal information for purposes other than those disclosed in this policy unless required by law or with your explicit consent.

We may share your information with:

• Compliance Partners: For professional credential verification and compliance documentation
• Payment Processors (Stripe): To securely process payments; Stripe's privacy policy applies to data they handle
• Shipping Carriers: Name and address information necessary to fulfill your order
• Analytics Providers (Google Analytics): Anonymized usage data to improve platform performance
• Distributor Networks: Limited order attribution data to calculate and pay commissions
• Legal Authorities: When required by law, court order, subpoena, or to protect our rights and the safety of others
• Business Transfers: In the event of a merger, acquisition, or sale of assets, with notice to affected users as required by law

We do not sell your personal information to third parties for marketing purposes.

For users who store professional or business information on our platform, we maintain industry-standard security practices, including:

• Encrypted data transmission (SSL/TLS 1.3)
• Access controls limiting who can view sensitive records
• Business Associate Agreements (BAAs) available upon request for Aesthetic Practice Division partners who require them (not applicable to Peptide Sciences Division)
• Audit trails for access to sensitive records

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Secure cloud storage with role-based access controls
• Regular security audits and penetration testing
• Employee training on data protection and privacy best practices
• Multi-factor authentication options for sensitive account operations

No method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

We use cookies and similar technologies to enhance your experience, analyze site usage, and deliver relevant content. Types of cookies used include:

• Essential Cookies: Required for the platform to function (e.g., session management, cart storage)
• Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

Depending on your jurisdiction, you may have the following rights:

• Right to Know / Access: Request details about the categories of personal information we collect and a copy of your data
• Right to Correct: Request corrections to inaccurate personal information
• Right to Delete: Request deletion of your account and personal data (subject to legal record retention requirements)
• Right to Opt-Out of Sale: Not applicable — we do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Data Portability: Receive your personal information in a structured, machine-readable format
• Right to Withdraw Consent: For processing based on consent, withdraw at any time
• Right to Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the link in any email or by contacting us

To exercise any of these rights, contact us at support@myspalive.com. We will verify your identity before processing your request and respond within the timeframes required by applicable law (e.g., 45 days under CCPA/CPRA, 30 days under GDPR).

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Order records are retained for 7 years for tax and regulatory compliance
• Compliance and training records are retained as required by applicable regulations
• Account information is retained until you request deletion or your account is inactive for 2 years
• Analytics data is anonymized and retained indefinitely for statistical purposes

When personal information is no longer needed, we securely delete or anonymize it.

MySpaLive is based in the United States (Prosper, Texas). Your personal information may be processed or stored in the United States or other countries. We ensure any international data transfers comply with applicable privacy laws, including the use of appropriate safeguards (e.g., Standard Contractual Clauses for EU data) where required.

Our services are not intended for anyone under 18 years of age, and access to our peptide products requires verification that you are at least 21 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately and we will promptly delete it.

Our platform may contain links to third-party websites (e.g., Qualiphy, Stripe). We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date, and where required by law, through direct communication such as email. Your continued use of the platform after such changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: