Legal
Trust & Security
This page is maintained by FedPeps to answer common security and privacy questions about the FedPeps research-material catalog. It describes enabled controls and current practices; it is not an independent certification or audit.
Scope
FedPeps operates a qualified laboratory research-material catalog. This page covers the public website, the order-submission flow, and the internal order-review workflow used by FedPeps staff.
Access & Authentication
- The public catalog is browseable without an account.
- Order submission collects only the contact and shipping fields shown in the checkout form.
- Internal order administration is restricted to authenticated FedPeps staff with an explicit admin role; role assignment is enforced server-side.
- Staff sign-in uses email and password over TLS.
Platform & Hosting
- The application is hosted on Lovable Cloud, which provides the underlying database, authentication, and serverless runtime.
- Traffic to the site is served over HTTPS.
- Row-level security is enabled on order tables so that customer order records are readable only by authenticated FedPeps administrators.
- This page describes enabled platform capabilities factually and is not a Lovable-issued certification.
Data We Collect
- Research-request contact details: name, email, and optional phone.
- Shipping address for fulfillment.
- Order contents, quantities, and totals.
- Internal notes added by FedPeps staff during order review.
We do not collect payment-card data on the website. Payment instructions are sent privately after manual order review.
How Information Is Used
- To review, qualify, and fulfill research requests.
- To communicate with the purchaser about their order.
- To maintain order records for accounting and legal-compliance purposes.
Subprocessors & Integrations
- Lovable Cloud — application hosting, database, and authentication.
- Shipping carriers — used solely to deliver fulfilled orders.
Additional subprocessors will be listed here if introduced.
Cookies & Analytics
The site uses functional storage required to operate the research request (cart) and staff sign-in session. FedPeps does not run third-party advertising trackers on the public catalog.
Retention & Deletion
Order records are retained as needed for documentation, accounting, and legal-compliance purposes. Purchasers may request review or deletion of their contact information subject to those obligations.
Privacy Requests
Privacy and data-access requests may be sent to support@fedpeps.com. See our Privacy Policy for additional detail.
Security Contact & Vulnerability Reporting
Suspected security issues affecting FedPeps.com may be reported to support@fedpeps.com. Please include reproduction steps and avoid testing that would impact other users or order data.
Shared Responsibility
- Lovable Cloud provides the underlying platform controls described above.
- FedPeps configures the application, role assignments, order workflow, and customer-facing policies.
- Purchasers are responsible for qualifying as research-use buyers and for the secure handling of any materials received.
Compliance Statement
FedPeps materials are supplied strictly for qualified laboratory research use. FedPeps makes no representation that any material is sterile, injectable, pharmaceutical grade, GMP manufactured, FDA approved, or suitable for human or animal use unless expressly stated in a legally reviewed document. See our Research Use Agreement and Purchaser Qualification pages for full terms.