PRIVACY POLICY

1. INFORMATION WE COLLECT

When you use our website or place an order, we may collect the following categories of information:

a) Personal Information You Provide

• Account & Order Information: Full name, email address, phone number, billing address, and shipping address provided during checkout or account creation.
• Contact Information: Name, email, and message content submitted through our contact form.
• Newsletter: Email address if you subscribe to our newsletter.

b) Payment Information

Payment details (credit/debit card numbers, billing information) are collected and processed directly by our third-party payment processor. ThriveBioWorks does not store, access, or retain your full credit card numbers on our servers. We only receive transaction confirmation data (e.g., last four digits, transaction ID, payment status).

c) Automatically Collected Information

• Device & Browser Data: IP address, browser type and version, operating system, screen resolution, and device type.
• Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths.
• Location Data: Approximate geographic location derived from your IP address.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for:

• Processing and fulfilling orders for research compounds.
• Communicating with you about order status, shipping updates, and inquiries.
• Verifying buyer eligibility (age and research purpose verification).
• Improving our website functionality and user experience.
• Preventing fraudulent transactions and ensuring security.
• Complying with legal obligations and enforcing our Terms & Conditions.
• Sending marketing communications (only if you opt in via newsletter signup).

3. COOKIES & TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device that helps us provide and improve our services.

Types of Cookies We Use:

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect site functionality. Most browsers allow you to: view cookies, delete cookies, block third-party cookies, and block all cookies.

4. THIRD-PARTY SHARING

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share your information only with the following categories of service providers, strictly as necessary:

• Payment Processor: Your payment and billing information is transmitted directly to our secure third-party payment processor to process transactions. They operate under their own privacy policy and are contractually obligated to protect your data.
• Shipping Carriers: Your name, shipping address, and phone number are shared with carriers (USPS, UPS, FedEx) to deliver your order.
• Email Service Provider: Your email address may be shared with our email service to send order confirmations, shipping updates, and (if opted in) marketing communications.
• Legal Requirements: We may disclose information when required by law, subpoena, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Fraud Prevention: We may share transaction data with fraud detection services to prevent unauthorized or fraudulent transactions.

5. DATA SECURITY

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmissions
• Payment processing handled by a secure third-party provider
• Encrypted database storage for personal information
• Restricted access to personal data on a need-to-know basis
• Regular security audits and monitoring

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes described in this policy:

• Order records: Retained for 7 years for tax, accounting, and legal compliance.
• Contact form submissions: Retained for 2 years or until resolved.
• Newsletter subscriptions: Until you unsubscribe.
• Analytics data: Aggregated and anonymized data may be retained indefinitely.

7. YOUR RIGHTS

Depending on your jurisdiction (including GDPR, CCPA, and other applicable laws), you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request your data in a portable, machine-readable format.
• Opt-out: Unsubscribe from marketing communications at any time.
• Restriction: Request that we limit the processing of your data.

To exercise any of these rights, please contact us through our Contact page. We will respond within 30 days.

8. CHILDREN'S PRIVACY

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 18, we will take steps to delete that information promptly.

9. INTERNATIONAL TRANSFERS

If you are accessing this website from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located. By using our website, you consent to this transfer.

10. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our website after changes constitutes acceptance of the updated policy.

11. CONTACT US

For questions about this privacy policy or your personal data, please visit our Contact page or email us at [email protected].