01
Information we collect
We collect three categories of information:
Information you provide
Name, email, phone, shipping address, billing address, institutional affiliation, and any sequence or research-use details you submit through forms or quote requests.
Information collected automatically
IP address, browser type, device information, pages visited, referrer, and timestamps. Used for security, fraud prevention, and aggregate analytics only.
Information from third parties
Payment processors (transaction confirmation), shipping carriers (delivery status), and institutional verification services for wholesale accounts.
02
How we use information
We use the information we collect to:
- →Process and fulfill orders, including custom synthesis requests
- →Provide customer support and respond to inquiries
- →Verify research-professional eligibility for restricted compounds
- →Send transactional emails (order confirmations, COA notifications, shipping updates)
- →Improve site security, prevent fraud, and detect abuse
- →Comply with legal obligations and applicable export controls
03
Sharing & disclosure
We do not sell your personal information. We share data only with service providers who help us operate the business — payment processors, shipping carriers, our independent QC laboratory, and IT/email infrastructure — and only the minimum needed for them to perform their function.
We may also disclose information when required by law (subpoena, court order, regulatory request) or to protect our rights and the safety of our team.
04
Cookies & analytics
We use first-party cookies for essential site functions (cart state, login session, age/research-use confirmation) and a small set of analytics cookies to understand aggregate usage. We do not use third-party advertising cookies.
You can disable cookies in your browser settings; some site functions (cart, login) will not work without them.
05
Data security
All data in transit is protected by TLS encryption. Payment information is processed by PCI-DSS-certified providers and never touches our servers in raw form. Account credentials are stored as salted hashes.
No system is perfectly secure. If we discover a security incident affecting your data, we will notify you by email within 72 hours of confirming the scope.
06
Your rights
Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal information. California residents have additional rights under the CCPA; EU/UK residents have rights under the GDPR/UK GDPR.
To exercise any of these rights, email [email protected]. We will respond within 30 days. We may need to verify your identity before processing the request.
07
Children's privacy
Our website and products are not intended for users under 21. We do not knowingly collect information from minors. If you believe a minor has provided information through our site, contact us and we will delete it.