Genesis Biomapping: card checkout live in 2 days, then a custom store

genesisbiomapping.com ↗ is live. Go place an order and look at the checkout.

The starting point

Genesis started on WordPress and WooCommerce, like most peptide stores. The two big problems were the ones every founder in this space hits: getting card payments working reliably in a high-risk category, and a store that was getting harder to extend and slower with every plugin.

Phase 1: card payments that keep card data off the store

We built the card checkout first, while the store was still on WooCommerce, and had it live in 2 days. The goal was a checkout that customers never leave, that keeps card numbers away from the website entirely, and that the team can manage from their normal order screen.

• Cards are tokenized in the browser. The card fields use the payment gateway's own script, which turns the card into a one-time token. The store never receives a card number.
• Secret keys live on a separate payment backend. The public store sends signed requests to a locked-down backend that holds the processor credentials. The storefront can take orders but can't charge a card on its own.
• No double charges. Each charge is tied to its order, so a double-click or a dropped connection can't bill a customer twice.
• Refunds from the order screen. The team refunds or voids from the admin, and the system picks the right one based on whether the charge has settled.
• Clean logs. Logs record order IDs and results, never card data.

We tested it against a full sandbox matrix (approvals, declines, refunds, voids, retries) before switching it on for real customers, and the old checkout stayed up until the new one was proven. More on this approach in how a peptide store checkout should work.

Phase 2: migrating from WooCommerce to a custom store

With payments solid, we rebuilt the store as a custom Next.js site on Vercel. Products, content and the checkout moved over, and the WordPress plugin stack went away.

• COA lookup by batch number, so buyers can check the certificate for the exact lot they received
• Research stacks with bundle pricing
• Build-your-order volume discounts
• A custom admin panel built around how the team actually runs orders, products and COAs
• Email and SMS signup with a first-order offer

Phase 3: email, SMS and search

• Omnisend email and SMS with the core automated flows and campaigns
• SEO, AEO + GEO: server-rendered pages, structured data, answer-first content and AI crawler access, written to stay clear of health claims (what that means)

What made it work

1. Payments first. A beautiful store that can't take cards makes nothing. We proved the checkout before touching the design.
2. Never break a live checkout. Every change ran alongside the working version until it was tested.
3. One team for everything. The same people built the payments, the store, the email and the SEO, so nothing got lost between vendors.