Privacy Policy

Information We Collect

We collect information that you provide directly, information generated automatically when you use the site, and information we receive from the service providers that help us operate our storefront and checkout.

• Contact and account details: name, email address, password (stored in hashed form by our account provider), and any preferences you set on your account.
• Order and shipping information: products purchased, billing address, shipping address, recipient name, institution or organization name (if provided), and order history.
• Payment information: payment is processed by Shopify and its payment partners. We do not collect or store full payment card numbers on our own systems. We may receive limited transaction details such as the card brand, the last four digits, and an authorization result.
• Communications: messages, support requests, and other information you send to openlabsus@gmail.com or through site forms.
• Gate and consent records: confirmation that you have attested you are 21 or older and that you are acquiring products for research use only, including the date of that attestation.
• Device and usage analytics: IP address, browser type, device identifiers, pages viewed, referring pages, and similar technical data collected through cookies and analytics tools.
• Cookies and similar technologies: small files and identifiers used to keep you signed in, remember your cart, store your gate confirmation, and measure site performance.

How We Use Your Information

We use personal information for the following purposes:

• To process, fulfill, and ship your orders, and to send order confirmations and shipping updates.
• To create and maintain your customer account and authenticate your sign-in.
• To provide customer support and respond to your questions and requests.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To enforce eligibility requirements, including the 21+ age gate and the researcher consent gate.
• To comply with applicable laws, regulations, and lawful requests, and to keep records related to research-use-only sales.
• To operate, maintain, analyze, and improve the site, including measuring performance and understanding how the storefront is used.

How We Share Information

We share personal information with service providers that perform functions on our behalf, and only as needed to provide those services. We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for value.

The categories of recipients include:

• Shopify: powers our storefront, checkout, and customer accounts, and processes order and account data on our behalf.
• Payment processors: handle payment authorization and settlement through Shopify. Full card details are processed by these PCI-compliant providers, not stored by us.
• Shipping carriers: receive the recipient name and delivery address needed to ship and deliver your cold-chain order.
• Analytics providers: receive device and usage data to help us measure and improve site performance.
• Professional advisors and authorities: we may disclose information to legal, accounting, or security advisors, or to government authorities, when required by law, to enforce our terms, or to protect our rights, users, and the safety of others.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Cookies and the Age and Consent Gate

We use cookies and similar technologies to operate the site, keep you signed in, remember your cart, and analyze usage. We also store a record of your confirmation that you are 21 or older and a qualified researcher acquiring products for research use only, so that you are not asked to re-confirm on every visit.

You can control cookies through your browser settings. Blocking some cookies may limit core functions, such as staying signed in, completing checkout, or passing the entry gate. Where required by law, we present cookie or consent choices and honor recognized browser privacy signals.

Data Retention

We keep personal information for as long as needed to fulfill the purposes described in this policy, including providing the site and your account, completing transactions, and meeting our legal, tax, accounting, and recordkeeping obligations.

Retention periods vary by data type and context. For example, we may keep order and transaction records, including age and researcher attestations, for the period required by applicable law. When information is no longer needed, we delete it or anonymize it.

Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. Payment and checkout are handled in a PCI-compliant environment provided by Shopify and its payment partners.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized use.

Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information. These can include the right to access, correct, update, or delete your information, the right to request a copy of certain data in a portable format, the right to limit or object to certain processing, and the right to withdraw consent where processing is based on consent.

For residents of jurisdictions with laws such as the EU and UK GDPR or the CCPA and CPRA in California, additional rights may apply, including the right not to be discriminated against for exercising your rights. Because we do not sell personal information, there is no sale to opt out of, though we still honor applicable opt-out requests.

To exercise any of these rights, contact us at openlabsus@gmail.com. We will verify your request and respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

The site is restricted to qualified researchers who are 21 years of age or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 21. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact us at openlabsus@gmail.com.

International Data Transfers

We are based in the United States, and our service providers may process information in the United States and other countries. If you access the site from outside the United States, your information may be transferred to, stored in, and processed in a country whose data protection laws differ from those in your location.

Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect personal information transferred across borders.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the effective date below and, where appropriate, provide additional notice. Your continued use of the site after an update means you accept the revised policy.

Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our handling of your personal information, contact us at:

• Email: openlabsus@gmail.com
• Company: [Company legal name]
• Mailing address: [Company mailing address]