AKESISLAB WEBSITE PRIVACY NOTICE
Effective date: [Insert date of publication]
This Privacy Policy explains how AkesisLab ("AkesisLab," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, create an account, contact us, or place an order (collectively, the "Services"). It applies to information collected through the Services and related customer communications.
AkesisLab supplies products designated for laboratory and research use only. Our Services are not intended to collect medical records or information about a person’s health, diagnosis, treatment, or use of a product by a human or animal. Please do not submit health information or medical records to us.
1. Personal Information We Collect
The information we collect depends on how you interact with the Services. Categories may include:
- Contact and identity information: name, email address, telephone number, billing address, shipping address, and other information you provide when contacting us or placing an order.
- Order and transaction information: products viewed or ordered, quantities, order number, purchase and refund history, shipping status, delivery details, and customer-service records.
- Payment and billing information: payment method, transaction status, payment processor reference, billing details, and limited payment-card details that a payment provider may return to us (such as card brand or last four digits). Payment credentials are collected and processed through the payment method or processor presented at checkout.
- Account and preference information: account identifiers, login information, saved addresses, communication preferences, and settings, if account features are enabled.
- Research-use and eligibility records: age or eligibility confirmation, research-use acknowledgements, the version of the terms or notices accepted, and related time, transaction, device, or network records used to document checkout and help prevent misuse.
- Communications: messages, support requests, and attachments you choose to send us, including photographs submitted to document a shipment or fulfillment issue. Do not send medical records or sensitive health information.
- Device, log, and usage information: IP address, browser and device type, operating system, approximate location derived from IP address, pages viewed, referring page, time spent, clicks, and interactions with the Services.
- Cookie and similar technology information: identifiers and events collected through cookies, pixels, tags, SDKs, and similar technologies, depending on the tools enabled on the website and your preferences.
We do not ask customers to provide a social security number, government identification, or other sensitive identity data as a routine part of an ordinary order. If additional information is requested for fraud prevention, age/eligibility verification, or legal compliance, we will use it for that stated purpose and retain it only as reasonably necessary, subject to applicable law.
2. How We Collect Information
- Directly from you when you browse, create an account, place an order, complete a checkout acknowledgement, subscribe to communications, or contact customer support.
- Automatically from your browser or device through server logs, cookies, pixels, analytics tools, and similar technologies.
- From service providers that support payment processing, shipping, fraud prevention, website operation, analytics, customer support, or communications.
- From other sources where permitted by law, such as fraud-prevention providers, shipping carriers, or public sources used to verify information or protect our Services.
3. How We Use Information
- Operate the website, maintain accounts, process orders and payments, arrange fulfillment, and provide order status and delivery updates.
- Respond to questions, handle cancellations, investigate damaged, missing, incorrect, or disputed orders, and provide customer support.
- Record research-use and age acknowledgements, verify eligibility where appropriate, enforce our Terms of Service, and assess whether an order should be accepted, held, or declined.
- Protect the Services, detect and prevent payment fraud, account abuse, security incidents, unlawful activity, and violations of our policies.
- Maintain business, accounting, tax, transaction, consent, and other records; comply with legal obligations; respond to lawful requests; and establish, exercise, or defend legal claims.
- Understand website performance, troubleshoot errors, improve website functionality, and measure the effectiveness of communications and advertising, subject to applicable law and your choices.
- Send marketing communications where permitted by law and, where required, with your consent or opt-in. You may opt out as described below.
4. How We Disclose Information
We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this Policy:
- Website, ecommerce, hosting, cloud-storage, and IT providers that operate or secure the Services.
- Payment processors, payment gateways, banks, and fraud-prevention providers that authorize, process, secure, or investigate transactions.
- Shipping carriers, fulfillment providers, warehouses, and delivery services that prepare, route, or deliver orders.
- Email, SMS, customer-support, and account-notification providers that send messages or help us respond to you.
- Analytics, advertising, and measurement providers, if those tools are enabled and permitted by applicable law and your privacy choices.
- Professional advisers, including legal, accounting, insurance, and compliance providers, who need the information to provide services to us.
- Government agencies, regulators, courts, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, property, or the Services.
- A successor or transaction participant in connection with an actual or proposed merger, financing, reorganization, acquisition, sale of assets, or similar business transaction, subject to appropriate safeguards.
We do not authorize service providers acting on our behalf to use personal information for their own unrelated marketing purposes. Their handling of information is also governed by their own privacy notices and contractual obligations, where applicable.
5. Sale, Sharing, and Targeted Advertising
AkesisLab does not sell personal information for money. Some privacy laws define "sale," "sharing," or targeted advertising broadly enough to include certain disclosures through advertising pixels, cookies, or analytics tools, even when no money is exchanged. If we enable technologies or disclosures that are treated as a sale, sharing, or targeted advertising under a law that applies to us, we will provide the opt-out rights, controls, and notices required by that law. Where required, this may include a "Your Privacy Choices" link or recognition of a supported browser opt-out preference signal such as Global Privacy Control.
The precise treatment of analytics and advertising tools depends on which tags, pixels, and integrations are installed and how they are configured. We will describe and manage those tools in accordance with our actual website setup and applicable law.
6. Cookies and Similar Technologies
We and our service providers may use strictly necessary cookies and similar technologies to operate the website, remember cart or account activity, protect against fraud, and maintain security. If enabled, analytics and advertising technologies may help us understand traffic, measure performance, or personalize advertising.
You can manage cookies through available website preference controls and your browser settings. Blocking certain cookies may affect checkout, account features, or other website functionality. Where required by applicable law, we will obtain consent before placing non-essential technologies and provide a mechanism to change your preferences.
7. Email and Text Communications
We may send transactional emails about orders, payments, shipping, accounts, security, and customer support. If we send marketing emails, you may opt out at any time by using the unsubscribe link in the message or contacting [email protected]. An opt-out from marketing does not prevent us from sending necessary transactional, legal, or service messages. Commercial email will use accurate sender and subject information, include a valid business mailing address and a clear unsubscribe method, and honor opt-out requests within the time required by applicable law.
Text messages
If AkesisLab offers an SMS program, we will request the separate consent required for the type of messages sent. Marketing SMS consent will not be a condition of purchase. Message frequency and any message/data rates will be disclosed at opt-in. You may opt out of a program by replying STOP and request help by replying HELP, where supported. We do not use an SMS opt-in as permission to send unrelated messages. Mobile numbers and SMS opt-in or consent records will not be shared with third parties for their own marketing; they may be provided to messaging service providers solely to deliver the messages you authorized, subject to applicable law.
8. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, completing transactions, maintaining order and accounting records, documenting required consent or checkout acknowledgements, preventing fraud, resolving disputes, enforcing agreements, and meeting legal obligations. Retention periods vary by information type and purpose. When information is no longer reasonably needed, we will delete, de-identify, or securely dispose of it, subject to legal, operational, backup, and dispute-related limitations.
9. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. Safeguards may include access restrictions, vendor review, staff procedures, and security controls appropriate to the information maintained. No website, network, or method of electronic storage or transmission can be guaranteed to be completely secure.
Florida Information Protection Act. To the extent Florida Statutes section 501.171 applies, AkesisLab maintains reasonable measures designed to protect and secure electronic data containing personal information. If a qualifying security breach occurs, we will provide notices to affected Florida residents and the Florida Department of Legal Affairs, and to any other required recipients, in the time and manner required by law. Florida law generally requires notice to affected individuals without unreasonable delay and no later than 30 days after determination of a qualifying breach. It also generally requires notice to the Department within 30 days when a breach affects 500 or more individuals in Florida, subject to statutory exceptions and authorized delays.
10. Your Privacy Rights and Choices
Depending on where you live and whether a particular privacy law applies to AkesisLab, you may have some or all of the following rights, subject to legal exceptions:
- Request to know or access categories and specific pieces of personal information we maintain about you.
- Request correction of inaccurate personal information.
- Request deletion of personal information, subject to exceptions for records we must retain or may retain by law.
- Request a portable copy of certain personal information.
- Opt out of the sale or sharing of personal information or processing for targeted advertising, where those rights apply.
- Limit certain uses or disclosures of sensitive personal information, where applicable.
- Appeal a decision we make regarding a privacy request, where an appeal right is provided by law.
- Withdraw consent or opt out of marketing communications, as applicable.
To submit a request, email [email protected] with the subject line "Privacy Request." Please identify the state or country where you reside and describe the request. We may ask for information reasonably necessary to verify your identity and protect your information. If a law permits an authorized agent to make a request, we may require proof of authorization and may separately verify your identity. We will respond within the timeframe required by applicable law.
We will not unlawfully discriminate against you for exercising a privacy right. Some information must be retained to complete a transaction, maintain legally required records, prevent fraud, or establish, exercise, or defend legal claims. If we deny a request in whole or in part, we will explain the basis where required and describe any available appeal process.
11. State-Specific Information
State privacy laws may provide additional rights depending on your residence, the nature of our data practices, and whether AkesisLab meets the applicable legal thresholds. This includes, where applicable, laws in California and other states with comprehensive consumer privacy statutes. A law may apply to a business based on revenue, volume of personal information processed, data-sharing activities, or other criteria; a privacy-rights description in this Policy does not mean that every law applies to every customer or transaction.
Florida. AkesisLab’s legal business entity is registered in Florida. We handle personal information in accordance with applicable Florida law, including the Florida Information Protection Act, Fla. Stat. section 501.171, where applicable. That law requires covered entities and third-party agents to take reasonable measures to protect and secure electronic personal information and establishes breach-notification duties. The scope and timing of notice depend on the facts and statutory requirements.
Florida Digital Bill of Rights. The Florida Digital Bill of Rights, Fla. Stat. sections 501.701–501.722, defines a covered controller narrowly. Among other requirements, an entity generally must have more than $1 billion in global gross annual revenue and satisfy at least one additional statutory condition. If that law applies to AkesisLab or a particular processing activity, we will provide the rights and protections it requires. This statement does not represent that every provision applies to every business or transaction.
12. Children and Age Eligibility
The Services and products are not directed to individuals under 21, and AkesisLab does not knowingly accept orders from anyone under 21. We do not knowingly collect personal information from individuals under 21 through the Services. If you believe a person under 21 has provided personal information to us, contact [email protected] so we can review and take appropriate steps. This section does not limit protections required by children’s privacy laws, including laws that apply to children under 13.
13. Third-Party Websites and Services
The Services may link to third-party websites, payment pages, social media platforms, or other services that AkesisLab does not control. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information to a third party.
14. International Processing
AkesisLab’s legal business entity is registered in Florida. Our service providers may process or store information in the United States or other countries where they or their infrastructure operate. Where applicable law requires safeguards for international transfers, we will use an appropriate transfer mechanism or other lawful basis.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technologies, services, or legal requirements. We will post the revised Policy on this page and update the effective date. Where required by law, we will provide additional notice or obtain consent for material changes.