Privacy Policy

Before you enter the store, we ask you to complete a Researcher Access confirmation. For it we collect your email address, your field of research, your confirmations that you are 21 or older and purchasing solely for in vitro laboratory research and that you accept our Terms and this Privacy Policy, whether you chose to receive marketing emails from us, the version of the confirmation you saw and the date.

When you place an order, we collect:

• your name, email address and phone number;
• your shipping address and, if different, your billing address;
• a company name, if you choose to provide one;
• the products, quantities, prices, shipping charge, tax and total for your order; and
• your checkout confirmations that you are 21 or older and that you understand our products are for research use only.

If you contact us, we keep your message and the contact details you used. When you pay, we record the details needed to match your payment to your order, such as the payment method, amount and payment note. We do not collect card or bank account details on this website.

Like most websites, our hosting provider processes standard technical information such as your IP address, browser type and the pages you request in order to deliver and secure the site.

To protect checkout from abuse, we limit how often orders and tax quotes can be requested. For this we store keyed, one-way hashes (HMAC) of your IP address and of an order's recipient details rather than the values themselves, along with request counts.

• Your cart (the products and quantities you add) is saved in your browser's local storage so it is still there when you return. You can clear it by emptying your cart or clearing your browser's site data.
• During checkout, your browser's session storage holds a checkout reference and, after you order, your order number and amount due, so the confirmation survives a page reload. Session storage is cleared when you close the tab.
• After you complete the Researcher Access confirmation, a cookie remembers it in this browser so you aren't asked again on every page. It holds the confirmation version, the date and a security signature — not your email or other personal details. Clearing your cookies shows the confirmation again.
• Cookies are also used to keep authorized GVG Labs staff signed in to our internal order system. Shoppers do not need an account, and we do not use cookies to track customers.

We do not currently use analytics services, advertising cookies or tracking pixels.

• to process, fulfill and ship orders and to confirm payments;
• to calculate sales tax for your delivery address;
• to send transactional messages about your order, such as confirmations, payment information and tracking;
• to respond to your questions and support requests;
• to confirm eligibility and enforce our Terms of Sale and Research Use Notice, including keeping a record of Researcher Access confirmations;
• to send marketing emails only if you chose to receive them — you can withdraw that choice at any time by contacting us;
• to prevent fraud and abuse and to keep the website secure; and
• to meet legal, tax and accounting obligations and to protect our rights.

We share personal information with service providers only as needed to operate the store, fulfill orders, calculate taxes, send transactional communications and prevent abuse:

• Vercel — website hosting and infrastructure;
• Supabase — our order and Researcher Access records database and staff sign-in;
• TaxJar — sales tax calculation, which uses your shipping address and order amounts;
• Shippo — shipping labels and address validation, which uses recipient details such as name, address, phone and email; the carrier (such as USPS) receives the details printed on the label;
• Resend — delivery of transactional order emails, when email delivery is enabled.

Payments are made directly through Zelle or Cash App, outside our website; those services handle your payment information under their own privacy policies.

We may also disclose information when required by law or legal process, to protect the rights, property or safety of GVG Labs, our customers or others, or as part of a merger, acquisition or sale of all or part of our business.

We do not sell or rent personal information. We do not send marketing text messages and do not collect SMS marketing consent.

We keep personal information for as long as reasonably necessary for business, legal, tax, accounting, security and operational purposes, such as maintaining order records.

We use reasonable administrative and technical safeguards to protect personal information, such as restricting order data to authorized staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

To ask about, correct or request deletion of your personal information, email Support@GVGLabs.com. We may need to verify your identity, and we may keep information we are required to retain for legal, tax or accounting purposes. We will respond as required by applicable law.

Our website and products are intended only for adults 21 and older. We do not knowingly collect personal information from children.

We may update this policy from time to time. Changes take effect when posted on this page with a new "last updated" date.

Privacy questions and requests can be sent to Support@GVGLabs.com.