Privacy Policy
Versionprivacy-v0.4No effective date
What we collect
We collect only what is needed to sell to research entities and to document that we did so responsibly:
- Account details: name, email address, institution, and declared role
- Order details: items, amounts, billing and delivery addresses
- Research-use confirmation: which wording you accepted, when, and the IP address it came from
- Verification records: information supplied about the purchasing entity, and the decision taken
- Technical data needed to operate the site securely
Why we collect it
To process and deliver orders, to operate accounts, and to keep a record that materials were supplied for research use. That last one is not optional for us: being able to show who we sold to, and on what basis, is what makes a research-use-only business defensible.
Research-use confirmations
When you confirm research use, we record the exact wording you agreed to, the time, and the originating IP address. The wording is versioned, so a change to it asks everyone again rather than assuming agreement to text nobody saw.
Who we share it with
We share data with the providers needed to run the service, and only what each needs to do its job. Today that is two: our email provider, which sends the mail your account and orders generate, and our hosting provider, which runs the site and its database. No payment processor and no delivery service is connected today, so nothing is shared with either. We do not sell personal data.
We may disclose information where we are legally required to.
How long we keep it
Order and verification records are kept for as long as needed to meet our record-keeping obligations. Account data is kept while the account is open.
Your choices
You can ask us what we hold about you, ask for corrections, and ask for deletion where we are not required to keep it. The privacy section of your account does this directly: it exports your data and carries out the deletion, without waiting on anyone.
Security
There is no payment processor connected to this site today, and no card details are collected: the checkout does not ask for them. When a processor is contracted, this section will be rewritten to describe what it handles.
Access to account, order, and verification records is limited to the people who need it in order to operate the service.