Privacy Policy
1. Information We Collect
Personal Identification Information
- Full name and professional title
- Business or institutional email address
- Phone number
- Billing and shipping addresses
- Institution or organization name
Payment and Transaction Information
- Payment card details — processed securely through PCI-compliant payment providers only
- Order history and purchase records
- Invoice and billing documentation
Account Information
- Account login credentials
- Account preferences and saved settings
- Communication history with our team
Automatically Collected Technical Information
- IP address and approximate geographic location
- Device type, operating system, and browser type
- Pages visited, time spent on each page, and navigation paths
- Referring website or source URL
- Cookies and similar tracking technologies
2. How We Use Your Information
- Processing, fulfilling, and managing your orders and institutional accounts
- Sending order confirmations, shipping notifications, and delivery updates
- Providing customer support and responding to inquiries or complaints
- Verifying buyer eligibility and ensuring compliance with our Research Use Only policy
- Personalizing your experience on our website based on your preferences and history
- Sending promotional communications and product updates — only with your prior consent
- Analyzing website usage patterns to improve the performance and content of our website
- Detecting, preventing, and investigating fraudulent activity or security breaches
- Complying with applicable legal and regulatory obligations
- Maintaining accurate business and financial records
3. Legal Basis for Processing Your Information
- Contractual necessity — processing is required to fulfill your purchase order or service agreement
- Legal compliance — processing is required to meet our obligations under applicable US federal and state laws
- Legitimate business interests — processing is necessary to operate, protect, and improve our business
- Your consent — where you have explicitly provided consent for specific processing activities such as marketing communications
4. Information Sharing and Disclosure
Upgrade Bio Labs does not sell, trade, rent, or share your personal information with any unauthorized third party. We may share your information only in the following limited circumstances:
Service Providers
We may share necessary information with trusted third-party service providers who assist us in operating our website, processing payments, fulfilling orders, and delivering customer support. All service providers are contractually required to keep your information confidential and use it only for the specific purpose for which it was shared.
Legal and Regulatory Requirements
We may disclose your information when required by applicable law, court order, government authority, regulatory agency, or where we believe disclosure is necessary to protect the rights, property, or safety of Upgrade Bio Labs, our customers, or the public.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or part of our business assets, your personal information may be transferred as part of that transaction. You will be notified of any such change through a prominent notice on our website.
Fraud Prevention and Security
We may share information with fraud prevention agencies, payment processors, or law enforcement where we reasonably believe it is necessary to investigate or prevent fraudulent activity, unauthorized access, or illegal use of our website or products.
5. Data Security
- SSL/TLS encryption for all data transmitted between your browser and our website
- Secure payment processing through fully PCI-DSS compliant payment providers
- Encrypted storage of sensitive account and transaction data
- Regular security assessments, vulnerability testing, and system updates
- Strict internal access controls limiting data access to authorized personnel only
- Secure, access-controlled data storage environments
While we take all reasonable precautions to protect your personal information, no method of data transmission or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to use strong passwords and protect your account credentials at all times.
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, remember your preferences, and analyze website traffic and performance. The types of cookies we use include:
- Essential cookies — required for the website to function properly and process transactions
- Preference cookies — used to remember your settings and improve your experience
- Analytics cookies — used to collect anonymous data about how visitors use our website
- Marketing cookies — used to deliver relevant content, only with your prior consent
You can manage, restrict, or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
7. California Consumer Privacy Act (CCPA) Rights
If you are a resident of the State of California, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) regarding your personal information:
- Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete — you may request deletion of your personal information, subject to certain legal exceptions
- Right to Correct — you may request correction of inaccurate personal information we hold about you
- Right to Opt-Out — you may opt out of the sale or sharing of your personal information at any time
- Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights
To exercise any of these rights, please contact us directly using the contact information provided at the end of this policy. We will respond to all verifiable requests within 45 days as required by law.
8. Your Privacy Rights
Regardless of your location, you have the following rights regarding your personal information held by Upgrade Bio Labs:
- Access — you may request a copy of the personal information we hold about you
- Correction — you may request that we correct any inaccurate or incomplete information
- Deletion — you may request deletion of your personal information, subject to our legal and regulatory obligations
- Restriction — you may request that we restrict the processing of your personal information in certain circumstances
- Portability — you may request a structured, machine-readable copy of your personal information
- Objection — you may object to specific processing activities where we rely on legitimate interests
- Opt-Out — you may unsubscribe from marketing communications at any time using the unsubscribe link in any email or by contacting us directly
All rights requests will be reviewed and responded to within a reasonable timeframe and in accordance with applicable law.
9. Data Retention
- Order and transaction records are retained for a minimum of seven years for financial and legal compliance purposes
- Account information is retained for the duration of your active account and for a reasonable period thereafter
- Marketing preferences and consent records are retained until you withdraw consent or request deletion
- Technical and analytics data is retained in anonymized or aggregated form for website improvement purposes
When personal information is no longer required, it is securely deleted or anonymized in accordance with our internal data retention procedures.
10. Third-Party Links and Services
Our website may contain links to third-party websites, payment processors, or external research references. Upgrade Bio Labs does not control, endorse, or assume any responsibility for the privacy practices or content of any third-party website or service. We strongly recommend that you review the privacy policy of any third-party website you visit through a link on our website. Your interactions with third-party websites are governed solely by their own privacy policies.
11. Children’s Privacy
Our website and services are strictly intended for adults aged 21 years and older. We do not knowingly collect, store, or process any personal information from individuals under the age of 21. If we become aware that personal information has been collected from a minor without appropriate consent, we will take immediate steps to delete that information from our systems. If you believe we may have inadvertently collected information from a minor, please contact us immediately.
12. International Users
Upgrade Bio Labs operates from and fulfills all orders within the United States. Our website is intended for use by US-based research institutions and laboratories only. If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our website from outside the United States, you consent to the transfer and processing of your information in the United States in accordance with this Privacy Policy.
13. Do Not Track Signals
Some browsers include a Do Not Track (DNT) feature that signals websites not to track your browsing activity. Our website currently does not respond to DNT signals. However, you can manage tracking preferences through your browser settings and by managing cookie preferences as described in Section 6 of this policy.
14. Changes to This Privacy Policy
Upgrade Bio Labs reserves the right to update, modify, or replace this Privacy Policy at any time. The most current version will always be available on our website with the effective date clearly indicated at the top of the page. We will notify you of any significant changes by posting a prominent notice on our website or by contacting you directly where required by applicable law. Your continued use of our website or services following any updates constitutes your acceptance of the revised Privacy Policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us directly:
We are committed to resolving all privacy-related inquiries promptly and in full compliance with applicable data protection laws.