Last updated: September 25, 2026
1. Who We Are and Scope of This Policy
This Privacy Policy explains how Stonegate Systems LLC, a Utah limited liability company ("Stonegate Systems," "we," "us," or "our"), collects, uses, shares, and protects information in connection with our website at stonegatesystems.co and the services we provide.
Stonegate Systems offers done-for-you website development and compliance-operations support — including a monthly compliance-monitoring subscription — for research-use-only ("RUO") peptide product brands. We build and maintain websites and operational systems for those brands. We do not sell, manufacture, ship, or handle any product, and we do not process orders or payments on behalf of the brands we serve through this Policy.
This Policy applies to information we collect through our website, our booking and intake forms, and our email and business communications with you. It does not govern the separate websites we build or maintain for our clients; those sites are operated by our clients under their own privacy policies and practices.
2. Information We Collect
We collect the following categories of information:
- Information you provide directly. When you book a call, submit an intake or contact form, or email us, you may provide your name, email address, business or brand name, website or domain, and any other details you choose to share about your project, products, or goals.
- Payment information. Payments are processed by our payment provider, Stripe. When you make a payment, your card and billing details are collected and processed directly by Stripe. We do not store full card numbers on our systems. We may retain limited records such as the last four digits of a card, the transaction amount, the date, and invoice or subscription status for accounting, tax, and account-management purposes.
- Automatically collected technical and usage data. When you visit our website, we and our service providers may automatically collect technical information such as your IP address, browser type and settings, device and operating system information, referring pages, the pages you view, and the dates and times of your visits.
- Cookies and similar technologies. We and our service providers use cookies and similar technologies to operate the site, remember preferences, maintain security, and understand how the site is used. See Section 5 for more detail.
3. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries, schedule and conduct calls, and communicate with you about your project;
- Provide, operate, maintain, and improve our services, including website builds and our compliance-monitoring subscription;
- Prepare proposals, statements of work, contracts, and invoices, and process payments and subscriptions through Stripe;
- Manage your account, send service-related and transactional messages, and provide customer support;
- Send marketing or informational messages where permitted, from which you may opt out at any time;
- Maintain the security and integrity of our website and systems, prevent fraud and abuse, and debug and troubleshoot;
- Comply with legal, accounting, tax, and regulatory obligations, and enforce our agreements.
4. How We Share Your Information
We do not sell personal information for money. With your advertising-cookie permission, we share limited website activity and conversion information with Meta, TikTok and Google to measure and improve our advertising. This advertising use may constitute sharing under some privacy laws. You can decline it or withdraw permission through . We also share information in the following circumstances:
- Service providers. We share information with vendors who perform services on our behalf, under contracts that limit their use of the information to providing those services. These include Stripe (payment processing), Railway (application hosting), Cloudflare (DNS and email routing), and Google (forms and email).
- Legal and safety requirements. We may disclose information where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, enforce our agreements, prevent fraud, or protect the safety of any person.
- Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
5. Cookies and Similar Technologies
Optional advertising and source measurement are off by default. No consent popup interrupts your visit. Use Privacy choices at the bottom of a page to allow or decline tracking; we remember that choice for up to 180 days. Advertising tags load only after you allow them. Global Privacy Control disables optional tracking. Declining or withdrawing permission clears browser tracking information and stops further tracking requests. Functional forms and bookings work without tracking permission. We count plays of our videos on this site as daily totals per page and app, without cookies. To avoid counting repeat plays we briefly keep a keyed hash of the network address, never the address itself. The view figure shown next to the video is our TikTok account's view total plus the plays counted here.
Only after you opt in, we may store and send a first-party journey reference and source information, such as referring website, campaign tags and landing page, to connect an inquiry with its visit. This source history can persist for up to 90 days. Our forms may attach permitted source context and your separately provided answer about how you heard of us to your inquiry. A journey reference does not establish that you are a customer or that an ad caused a sale. With permission, we carry this context between our website, site-scan and intake pages, without placing form answers or contact details in those links.
With advertising permission, conversion measurement may include advertising click and browser identifiers, the page visited, event time, browser information and IP address, together with an email address or other identifier transformed using a cryptographic hash when available and permitted. Hashing is not anonymization. We do not send the text of your project notes, catalog details or scan findings to advertising platforms. You can change your choice using the Privacy choices control at the bottom of our pages or use your browser to delete stored cookies and site data.
6. Data Retention and Security
We retain personal information for as long as needed to provide our services, maintain your account and our business relationship, and comply with our legal, accounting, and tax obligations. Records related to invoices, payments, and contracts may be retained for the periods required by applicable law. When information is no longer needed, we take reasonable steps to delete or anonymize it.
We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on where you live, you may have rights regarding your personal information, including the right to:
- Access the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your personal information;
- Restrict or object to certain processing of your information;
- Opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
California residents. Where applicable, you have the right to know what personal information we collect, use and disclose; to request access, deletion and correction; to opt out of sale or sharing for advertising; and to exercise your rights without discrimination. Decline advertising cookies through Privacy choices to opt out of advertising sharing. We also honor Global Privacy Control.
EU, EEA, and UK residents. Where the EU or UK General Data Protection Regulation applies, we process personal information on the legal bases of performing our contract with you, our legitimate business interests, your consent (where required, such as for certain marketing), and compliance with legal obligations. You may exercise the rights of access, rectification, erasure, restriction, objection, and data portability, and you may lodge a complaint with your local supervisory authority.
To exercise any of these rights, contact us at [email protected]. We will respond as required by applicable law and may need to verify your identity before acting on a request.
8. Children's Privacy
Our website and services are intended for businesses and the professionals who operate them. They are not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, please contact us and we will take appropriate steps to delete it.
9. Third-Party Links and Sites
Our website and the materials we provide may contain links to third-party websites and services, including those of our clients. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes may be communicated through our website or by other appropriate means. Your continued use of our website or services after an update takes effect constitutes acceptance of the revised Policy.
11. Contact Us
If you have questions or requests regarding this Privacy Policy or your personal information, contact us at [email protected].