← Home / Legal
Last updated: [date]
This describes what the site actually does today. It still needs a lawyer to confirm the regimes that apply where you operate and where you ship. A policy you do not follow is worse than no policy, so if you change how data is handled, change this too.
This policy covers [selling entity legal name] and this website. We supply materials for laboratory research use. We are not a healthcare provider, we do not hold medical records, and we do not collect health information. If you send us health information anyway, we would rather you did not.
We do not collect or store card numbers or any payment details. No payment form exists on this site. Payment happens through a link we send you, and the payment provider handles those details under its own policy.
Your cart is stored in your own browser and is not sent to us until you place an order. Clearing your browser data clears it.
Orders are completed on WhatsApp. When you place an order, your order details are prepared as a message and you send it to us. From that point the conversation lives in your WhatsApp account and ours, and it is subject to WhatsApp's own privacy terms as well as this policy. If you would rather not use WhatsApp, do not place an order through this site.
To take, process, pack and ship your order; to send you a payment link and tracking; to answer you when you contact us; to keep accounting and tax records; and to prove what terms were agreed if an order is ever disputed. We do not sell your data and we do not share it for anyone else's advertising.
Order and consent records are kept for [retention period, set this against your tax and limitation periods]. Account details are kept until you ask us to delete the account. Compound finder submissions are kept for [period].
Depending on where you live you may have the right to see what we hold about you, correct it, delete it, or object to how it is used. Ask us at [privacy contact address] and we will respond within [period].
Deleting an account does not delete the order records attached to it, because we are required to keep transaction records and because the consent record is the evidence of what was agreed. [Counsel: confirm this balance is defensible in the regimes that apply to you.]
This site currently runs no third-party analytics and no advertising pixels. It sets a small number of items in your own browser storage: your cart, whether you have acknowledged the entry notice, and your sign-in session if you have an account. None of those are sent to a third party.
This site is not directed to anyone under 18 and we do not knowingly collect data from anyone under 18.
If this policy changes we will update the date at the top. Contact us at [privacy contact address and postal address].
The moment you add an advertising pixel to a site like this, you are transmitting to a third party the fact that a named person looked at a specific compound. That pattern has produced regulatory action and class litigation against health-adjacent companies, and it is a bigger realised risk in this sector than any intrusion. If you add analytics, keep it server side, keep compound names out of URLs you share with it, and have counsel look at it before launch rather than after.