Privacy

1. The short version

We collect the minimum information required to ship you a vial and answer your questions. We do not sell your data. We do not share it with advertisers. We do not run third-party trackers. The cookie banner is a small set of cookies for the cart and for analytics we run ourselves.

2. What we collect

1. Order data. Name, shipping address, billing address, email address, phone number, payment confirmation reference. Used to fulfill your order and respond to support inquiries.
2. Communication data. The contents of any email or contact form submission you send us. Used to respond to you.
3. Site analytics. Pageviews, referrers, anonymized IP, device type, language. Used to understand how researchers use the site. Run on our own servers; no third-party analytics SDKs.
4. Cookies. A session cookie for cart state and a small analytics cookie that does not contain identifying information. No advertising cookies, no cross-site trackers.

3. What we don't collect

We do not collect or store payment card numbers, bank account numbers, or government identification numbers on our own systems. Payment data is handled by our payment processor under their PCI-compliant infrastructure.

4. How we use your data

We use the information above only to (a) fulfill orders, (b) respond to your communications, (c) maintain order history and COA archives accessible to you, and (d) improve the site based on aggregate analytics. We do not use any of it for advertising, marketing automation, or third-party data brokering.

5. Who we share with

We share order information with our shipping carrier (name and address only, for delivery), with our payment processor (for payment authorization), and with tax and accounting service providers as required by law. We do not share with anyone else, except where compelled by valid legal process.

6. Retention

Order records and COA archives are retained indefinitely (the COA archive is part of the brand promise — nothing leaves it). Personal information attached to your account is retained for as long as your account remains active and for a reasonable period afterward to comply with tax and recordkeeping requirements. You may request deletion of your personal information; certain order records may need to be retained for legal compliance.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, port, restrict, or delete your personal information; to object to processing; and to lodge a complaint with a supervisory authority. To exercise any of these rights, email privacy@ledgerbioscience.com from the address associated with your order. We respond within 30 days.

8. Security

We use industry-standard transport encryption, access controls, and least-privilege internal access. No system is perfectly secure. If we ever experience a breach affecting your personal information, we will notify you in accordance with applicable law and through the email associated with your account.

9. International transfers

If you are located outside {{ Country }} and place an order, your information will be transferred to and processed in {{ Country }}. By placing an order you consent to that transfer. Specific terms governing transfers under GDPR (and equivalent regimes) will be drafted with counsel before launch.

10. Children

Our site and products are not directed to children. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact privacy@ledgerbioscience.com and we will delete it.

11. Changes

We will post any updates to this policy on this page with a new "Last updated" date. Material changes will be communicated by email to active customers.

12. Contact

Privacy questions: privacy@ledgerbioscience.com.