Privacy Policy

Privacy Policy

This policy explains what personal information Eterna Labs collects, why we collect it, how we protect it, and the choices you have. We collect only what we need to fulfill orders and operate responsibly.

1. Scope

This Privacy Policy applies to personal information we collect through this website, when you create an account, place an order, or contact us. It does not apply to third-party websites we may link to.

2. Information we collect

Information you provide

  • Account & contact data: name, email address, phone number, institution/organization, and password.
  • Order & shipping data: billing and shipping address, order contents, and researcher-status confirmation.
  • Communications: messages you send us via forms or email.

Information collected automatically

  • Device & usage data: IP address, browser type, pages viewed, and timestamps, used for security and traceability.
  • Cookies: small files used to keep you signed in, remember your cart, and measure site performance.

3. How we use information

  • To process, fulfill, and ship orders, and to provide Certificates of Analysis;
  • To verify eligibility and researcher status and to prevent fraud or misuse;
  • To provide customer support and respond to inquiries;
  • To send transactional messages and, where you opt in, occasional lab updates;
  • To comply with legal obligations and enforce our terms.

4. Payments & card data

We do not collect, process, or store full payment-card numbers on our own servers. Payments are handled by a PCI-DSS-compliant third-party payment processor using a secure hosted checkout. Your card details are transmitted directly to that processor and are governed by its privacy policy.

5. How we share information

We do not sell your personal information. We share it only with: (a) service providers who help us operate (payment processing, shipping carriers, hosting, email delivery) under contract; (b) authorities when required by law or to protect rights and safety; and (c) a successor entity in connection with a merger or acquisition.

6. Cookies & analytics

We use strictly necessary cookies for cart and login functionality, and may use limited analytics cookies to understand site usage. You can control cookies through your browser settings; disabling some cookies may limit functionality.

7. Data retention

We retain order and account records for as long as needed to provide services and to meet legal, accounting, and recordkeeping obligations (for example, retaining order and CoA records for 7 years). We then delete or anonymize the data.

8. Security

We use administrative, technical, and physical safeguards including encryption in transit (TLS), access controls, and a hosted PCI-compliant checkout. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of material breaches as required by law.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of marketing. To exercise these rights, email [email protected]. We will verify your identity before acting and will not discriminate against you for exercising your rights.

10. Children’s privacy

This website is intended for qualified researchers aged 21 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. International transfers

We operate from the United States. If you access the website from elsewhere, your information may be transferred to and processed in that country, which may have different data-protection laws.

12. Changes

We may update this policy. The “Last updated” date shows the latest revision. Material changes will be highlighted on this page.

13. Contact

Privacy questions or requests: [email protected], or by mail to 608 SW 13th St, Battle Ground, WA 98604, United States.