Last updated: August 5, 2026
Privacy policy scope
This privacy policy (also referred to as our privacy notice) describes what personal information this site collects, why it is collected, how it is used, who it is shared with, how long it is retained, and what choices you have. The privacy policy applies to every interaction you have with this site, including account creation, browsing, checkout, customer-support contact, and any compliance evidence collected for processor or audit review.
Information we collect
We collect the information you submit during account creation, checkout, and customer-support contact. This typically includes name, billing and shipping address, email, phone, payment method tokens, additional checkout fields, stated research purpose, institution or lab name, optional ORCID iD, and any research-use acknowledgements collected at checkout.
We collect technical data automatically when you use the site: IP address, browser, device, referring URL, session activity, age-gate confirmation records, and evidence showing whether research-use notices were visible during the order flow. This data is used for security, fraud prevention, order verification, processor review, and dispute response, all consistent with this privacy policy.
How we use information
We use your information to fulfill orders, communicate about your order, prevent fraud, maintain COA and lot-traceability records, document Terms/Privacy/RUO acceptance, comply with legal and processor requirements, and improve the site. We do not sell personal information.
Researcher verification and compliance evidence
If optional researcher-verification features are enabled, an ORCID iD supplied at checkout may be checked against the public ORCID registry when external checks are enabled. Stored buyer-verification evidence uses hashed references, a short suffix, and summary status rather than a full public-record copy.
Compliance evidence may include checkout acknowledgment snapshots, intent attestation records, render-capture hashes, COA metadata, buyer-class summaries, and pre-dispute event records retained according to the site retention policy.
Sharing with service providers
We share information only with the service providers necessary to operate the store: a PCI DSS-compliant third-party payment processor, standard tracked carriers within the United States, and standard order, fraud-prevention, and email service providers. Each is contractually limited to the data needed to perform its role.
Your choices and your rights
You can request a copy or deletion of your personal information by emailing service@amarisbiolabs.com. We respond within the timeframe required by applicable law (for example, 30-45 days under CCPA, CPRA, or GDPR). Your rights include access, correction, deletion, and the right to opt out of any sale or sharing of personal information.
Information retention and deletion
We retain personal information only as long as needed to fulfill the purpose for which it was collected and to meet legal, processor, and audit requirements. Order, fulfillment, and dispute records are retained for the period required by tax and consumer-protection law (typically 4-7 years). Compliance evidence records (checkout acknowledgments, intent attestations, render-capture hashes, COA metadata) are retained for the period needed to defend the order against later regulator or processor review.
Personal information not subject to those retention obligations is deleted on request or when no longer needed. You can request deletion by contacting service@amarisbiolabs.com; we will confirm the deletion within the timeframe required by applicable law.
Cookies and tracking
The site uses essential cart, checkout, and authentication cookies. Optional analytics cookies can be disabled in your browser preferences.
