Privacy Policy

Information you give us. When you create an order or contact us, we collect the name you supply, your email address, your telephone number if you give one, the billing and delivery addresses for the order, any institution or laboratory name you provide, and the content of messages you send us — including certificate of analysis requests and support correspondence.

Order information. We keep a record of what you ordered, the lot numbers supplied, the order value, the shipping method and the tracking reference, and the research-use acknowledgment you gave at checkout, together with the date and time it was given.

Technical information. Like most websites, our servers and analytics receive your IP address, browser type and version, device and operating system, referring page, the pages you viewed and the times you viewed them. We use this in aggregate to keep the site working, to detect fraud and abuse, and to understand which pages are useful.

We do not collect special category data. Do not send us health information, or any other sensitive personal data, through this site — we do not need it and we do not want it on our systems.

Card payments are processed by our third-party payment processor, [PAYMENT PROCESSOR — TO BE SUPPLIED]. Card details are entered into and handled by that processor on its own systems. We never receive, see or store your full card number, expiry date or security code.

What we do receive back from the processor is limited to what we need to run the order and meet our accounting obligations: whether the payment succeeded or failed, a transaction reference, the amount, the card brand and the last four digits, and the billing name and address for verification. The processor handles your card data as an independent controller under its own privacy notice and its card-network obligations.

• To accept, process, fulfil and ship your order, and to keep you informed about its status.
• To verify eligibility, screen for fraud, and check that we may lawfully ship to your destination.
• To answer your questions, supply certificates of analysis, and provide support after an order.
• To keep the records that tax, accounting, export-control and product-traceability rules require us to keep.
• To protect the site, investigate faults and improve how the catalog and checkout work.
• To send service messages about an order. We only send marketing email where you have opted in, and every marketing email carries an unsubscribe link.

We use a small number of cookies and similar browser storage mechanisms. Strictly necessary cookies keep your cart contents and your session working and cannot be turned off without breaking the site — your cart, for example, is held in your own browser’s local storage on your device, not on our servers.

We also use analytics to count visits and understand which pages are used. Analytics identifiers are used to measure traffic in aggregate, not to build an advertising profile about you. We do not sell personal information, and we do not share it with advertising networks for cross-context behavioural advertising.

You can block or delete cookies in your browser settings, and most browsers offer a “do not track” signal. Blocking strictly necessary cookies or clearing site data will empty your cart and may stop checkout from working.

We do not sell your personal information. We share it only with the parties we need to in order to run the business, and only with what they need:

• Our payment processor, to take and reconcile payment and to investigate chargebacks.
• Shipping carriers and fulfilment partners, to deliver your order and provide tracking.
• Technology providers who host the website, send transactional email and provide analytics, acting on our instructions under contract.
• Our accountants, auditors and professional advisers, where they need it to do their work.
• A regulator, law-enforcement agency or court, where we are legally required to disclose, or where disclosure is necessary to protect our rights, our customers or the public.
• A buyer or successor, if the business or its assets are sold or reorganised, subject to this policy continuing to apply.

Some of these providers operate outside your country. Where information is transferred internationally we take reasonable steps to ensure an appropriate level of protection under the applicable transfer mechanism.

We keep personal information only for as long as we need it for the purpose it was collected, and then for as long as a legal, tax or traceability obligation requires.

• Order, invoice and shipping records, including the research-use acknowledgment: retained for the period required by applicable tax and product-traceability rules, which is typically seven years.
• Support correspondence and certificate requests: retained for up to three years after the matter is closed.
• Marketing contact details: retained until you unsubscribe, and then suppressed so we do not re-add you.
• Website analytics: retained in aggregated or de-identified form, typically for up to 26 months.

When a retention period ends, information is deleted or irreversibly de-identified.

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you:

• To ask what we hold and to receive a copy of it.
• To have inaccurate information corrected.
• To ask us to delete information, where we are not required to keep it.
• To object to, or ask us to restrict, a particular use.
• To receive information you gave us in a portable, machine-readable format.
• To withdraw consent at any time, where we relied on consent — for example, for marketing email.
• To be free from discrimination for exercising any of these rights.

To exercise a right, write to [SUPPORT EMAIL — TO BE SUPPLIED] from the address associated with your orders, or use the contact form. We may need to verify your identity before we act, and we will respond within the period the applicable law allows. You may also complain to your local data protection authority.

The site is served over encrypted connections, access to order data is restricted to personnel who need it, and payment data never reaches our systems. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we take reasonable technical and organisational measures to protect what we hold and we will notify you and the relevant authority where the law requires it after a breach.

This website is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page with its effective date. Where a change is material we will take reasonable steps to bring it to your attention.

[LEGAL ENTITY NAME — TO BE SUPPLIED] is the controller of the personal information described in this policy. Email: [SUPPORT EMAIL — TO BE SUPPLIED]. Telephone: [SUPPORT PHONE — TO BE SUPPLIED]. Post: [BUSINESS ADDRESS — TO BE SUPPLIED].