Privacy Policy
Version privacy-v0.2 · No effective date
What we collect
We collect only what is needed to sell to research entities and to document that we did so responsibly:
- Account details: name, email address, institution, and declared role
- Order details: items, amounts, billing and delivery addresses
- Research-use confirmation: which wording you accepted, when, and the IP address it came from
- Verification records: information supplied about the purchasing entity, and the decision taken
- Technical data needed to operate the site securely
Why we collect it
To process and deliver orders, to operate accounts, and to keep a record that materials were supplied for research use. That last one is not optional for us: being able to show who we sold to, and on what basis, is what makes a research-use-only business defensible.
Research-use confirmations
When you confirm research use, we record the exact wording you agreed to, the time, and the originating IP address. The wording is versioned, so a change to it asks everyone again rather than assuming agreement to text nobody saw.
Who we share it with
We share data with the providers needed to run the service — payment processing, delivery, email, and hosting — and only what each needs to do its job. We do not sell personal data.
We may disclose information where we are legally required to.
How long we keep it
Order and verification records are kept for as long as needed to meet our record-keeping obligations. Account data is kept while the account is open.
Your choices
You can ask us what we hold about you, ask for corrections, and ask for deletion where we are not required to keep it. Contact us and we will respond.
Security
Payment details are handled by our payment provider and are not stored on our systems.
Access to account, order, and verification records is limited to the people who need it in order to operate the service.