Privacy policy

What we collect

• Order data: name, shipping address, email, phone, and order contents — collected at checkout, used to fulfill and support your order.
• Messages: what you send through the contact form.
• Newsletter: your email, if you subscribe.
• Checkout details: the email and (optionally) phone number entered at the start of checkout or when you email yourself your cart, and your organization type, so we can follow up on an unfinished order and send reminders you opted in to.
• Reorder email: if you tick the marketing box when you order, we may email you once, a few weeks after that order ships, with the items from it at current prices and a link that puts them back in your cart. Unsubscribe any time.
• Welcome offer: your email, if you ask for the 10% first-order code, used to send that code and up to two reminders while it's unused, and to check it at checkout.
• First visit: with a checkout email, a welcome-offer signup or an order, the link that first brought you to the site (for example an ad campaign name or a referring site), so we can see which campaigns bring signups and orders.
• Referral program: while the program is running, when an order is paid we give that customer a personal referral code. For an order placed with someone's code or after opening their link, we record which code it was, and for every order a one-way keyed hash of the network (IP) address it was placed from, so we can check that a referral isn't the referrer ordering from their own email, address or network. If a referred order earns a reward, we email the referrer a one-time code; we never tell them who placed the order.
• Support chat: what you type into the on-site chat assistant.
• Anonymous site steps: which pages are viewed and whether a visit reached the cart or checkout, recorded under a random id that lasts only while the browser tab is open. No name, email, IP address or cookie is attached, and this record is not shared with anyone. We use it to see where the site is confusing.
• Ad measurement (Meta Pixel): most pages load Meta's pixel, which sets Meta's cookies and tells Meta about page views (with the page's address, which on a product page names the compound), viewing a product (with its price), adding to cart (with the amount), starting checkout (with the cart total and number of items), and asking for the welcome code or emailing yourself a cart. It is not loaded on the checkout and payment pages, order lookup and unsubscribe pages, site search and lot lookups, or the pages and guides of some compounds, and our pages pass only the site's name, never a full page address, to the next page. Meta's automatic collection of buttons, page details and form fields (automatic advanced matching) is turned off. If you place an order after the pixel has run in your browser, we keep Meta's cookie values, your IP address and your browser's user-agent string from checkout. When the order is paid we send Meta the order total, a one-way hashed (SHA-256) copy of your email address and those details, so Meta can tell us whether an ad led to the order and show our ads to people likely to buy. That report never includes your name, address, phone number, the items ordered, or payment details. We delete those checkout details once the report is sent, or after 30 days if the order isn't paid. Browsers that send a Global Privacy Control signal don't load the pixel, and their orders aren't reported.

Who we are

This site is operated by Otab Limited Liability Company, doing business as PepsMartUSA, 2810 North Church Street, Wilmington, DE 19802. Contact: support@pepsmartusa.com.

What we don't do

• No ad trackers other than the Meta Pixel described above.
• No sale or rental of personal data. The Meta ad measurement above may count as "sharing" for advertising under some state privacy laws; a Global Privacy Control signal opts you out of it.
• No card numbers touch this site — payment happens on our processor's hosted page.

Processors we rely on

Each of these receives only what it needs to perform its function:

• Card and ACH payments — 3thix. Your email and shipping details are passed to 3thix's hosted checkout so the payment can be matched to your order. 3thix and its payment partner (Stripe) collect card or bank account details and may perform identity verification on their own pages under their own privacy policies; that information never reaches this site.
• Bank transfers — Zelle. Handled entirely between your bank and ours; we see the transfer confirmation and the order number you include.
• Email — Resend. Delivers order confirmations, shipping notices, reminders, offer codes you request, and newsletters.
• Text messages — Twilio. Only if you opt in to text reminders at checkout. Reply STOP to any message to opt out. See the SMS terms.
• Support chat — Chatbase. Chat conversations are processed and stored by Chatbase to generate responses. Do not enter card numbers or other sensitive information into the chat.
• Ad measurement — Meta Platforms. Receives the pixel events and paid-order details described above, under Meta's privacy policy. You can manage how Meta uses this for ads in your Facebook or Instagram ad settings.
• Hosting — Railway. Runs the site and its database in the United States.

Retention and your rights

Order records are retained as required for accounting and dispute handling. You may request a copy or deletion of your personal data (subject to legal retention requirements) via the contact form. Newsletter emails include one-click unsubscribe.