Privacy Policy

Privacy Policy

What we collect, why we collect it, how long we keep it, and the choices you have.

LAST UPDATED 4 SEPTEMBER 2026

On this page

1. Introduction

This policy explains how PureX Bio LLC handles personal information collected through purexbio.com and through orders placed with us. We have written it in plain language rather than legalese, because a policy nobody reads protects nobody.

We are the data controller for this information. Contact us at support@purexbio.shop with any question about it.

2. What we collect

Information you give us. Name, institution or business name, shipping and billing address, email address, telephone number, account credentials, order history, and any message you send us. For institutional accounts we may also collect a tax identification number, purchase-order references and evidence of institutional affiliation.

Payment information. Card details are entered into and processed by our payment processor. We never receive or store your full card number, expiry date or security code. What we do store, and keep for as long as the order record itself, is the last four digits, the card brand, the authorisation result and the processor's transaction reference — enough to reconcile payments, answer billing questions and defend chargebacks.

Information collected automatically. IP address, approximate location derived from it, browser and device type, referring page, pages viewed, cart contents and timestamps. This comes from cookies and similar technologies described in section 5.

We do not intentionally collect health information, and you should not send it to us. We are not a healthcare provider and our services are not covered by HIPAA.

3. Why we use it

• To take and fulfil your order — processing payment, screening for fraud, producing shipping labels, sending order, dispatch and delivery notifications, and handling returns or claims. Legal basis: performance of our contract with you.
• To operate your account — authentication, order history, saved addresses and password resets. Legal basis: performance of our contract with you.
• To provide support — answering emails, chat messages and documentation requests, including sending you the certificate of analysis for a lot you received. Legal basis: performance of our contract, and our legitimate interest in supporting customers.
• To meet legal and tax obligations — keeping transaction records, verifying that purchasers are 21 or older, and complying with sanctions, export and product-compliance rules. Legal basis: legal obligation.
• To keep the site secure and prevent abuse — rate limiting, fraud scoring, and investigating misuse. Legal basis: our legitimate interest in protecting the service.
• To measure and improve the site — understanding which pages and checkout steps work, and diagnosing errors. Legal basis: your consent, through the analytics category in cookie settings.
• To market to you — sending email or SMS updates you have asked for, reminding you about an abandoned cart, and measuring or targeting advertising. Legal basis: your consent, which you can withdraw at any time by unsubscribing or through cookie settings.

We do not sell your personal information for money, and we do not share it with third parties for their own independent marketing. If you turn on the advertising category in cookie settings, the resulting sharing with advertising platforms may count as a “sale” or as “sharing for cross-context behavioural advertising” under some US state privacy laws — turning that category off, or sending a Global Privacy Control signal, opts you out.

We do not use your personal information for automated decision-making that has a legal or similarly significant effect on you.

4. Who we share it with

We use a small number of service providers, each bound by contract to process data only on our instructions:

• Payment processing — our payment processor, to authorise and settle card payments and screen for fraud. They receive your card and billing details directly.
• Fulfilment and shipping — our shipping and label-generation platform, plus the carrier you select (USPS, FedEx or UPS). They receive your name, delivery address, telephone number, email address and package details so your order can be delivered and tracked.
• Transactional email — our transactional email provider, which delivers order confirmations, dispatch notices, password resets and support replies.
• Marketing email and CRM — our marketing email and CRM provider, which holds your email address, name, order and cart activity so we can send updates you have subscribed to and abandoned-cart reminders.
• SMS notifications — our SMS provider, which receives your telephone number and message content when you have opted in to text updates.
• Analytics — Google Analytics 4, loaded through Google Tag Manager. Only with your consent, and configured with IP addresses redacted where that setting is available.
• Advertising — Google Ads and Meta advertising tags for conversion measurement and remarketing. Only with your consent.
• Address autocomplete — Google Places, which receives the partial address you type into a checkout address field in order to suggest completions.
• Hosting and infrastructure — our hosting, database and file-storage providers, which necessarily process everything above as part of running the site.
• Professional advisers — accountants and lawyers, where necessary.
• Authorities — where we are legally required to disclose, or where disclosure is necessary to protect our rights or someone's safety.

Some of these providers process data in the United States and other countries. Where we transfer personal information out of the UK or EEA, we rely on the European Commission's standard contractual clauses or an equivalent safeguard.

If PureX Bio is involved in a merger, acquisition or asset sale, personal information may transfer as part of that transaction. We will give notice before your information becomes subject to a materially different policy.

5. Cookies and your choices

Strictly necessary. Keeping you signed in, remembering your cart, protecting checkout against fraud, and recording that you have accepted the age and research-use acknowledgement. These are always on — the site cannot function without them — and they are not used for advertising.

Analytics (optional). Google Analytics 4 via Google Tag Manager: pages viewed, referral source, and how far visitors get through checkout.

Advertising (optional). Google Ads and Meta tags used to measure conversions from our advertising and to show you our products elsewhere.

The optional categories are switched off until you turn them on. Until you make a choice, our tag manager is not loaded at all and analytics and advertising storage are set to “denied”, so no analytics or advertising cookie is written. You can accept, reject or change individual categories at any time using the Cookie settings link in the footer of every page; your choice is stored on your device and re-applied on each visit. Most browsers also let you block or delete cookies directly.

6. Do Not Track and Global Privacy Control

We honour the Global Privacy Control signal and the legacy Do Not Track header. If your browser or extension sends either one, we treat it as an opt-out of analytics and advertising: those categories stay off, no consent banner is shown, and we do not share your information for cross-context behavioural advertising. You can still switch a category on yourself through Cookie settings if you want to, and that explicit choice takes precedence over the signal.

An opt-out signal does not stop strictly necessary processing — we still need to take payment, ship your order and keep transaction records.

7. How long we keep it

• Order and transaction records — seven years, for tax and accounting purposes. This includes the payment metadata described in section 2.
• Account records — for as long as your account is active, then two years.
• Support correspondence — three years from the last message.
• Marketing consent records — until you withdraw consent, plus two years to evidence the withdrawal.
• Cookie consent records — stored on your device until you clear it or change your choice; we keep a record of the choice for two years.
• Analytics data — 24 months.

8. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to processing, to receive it in a portable format, to opt out of the sale or sharing of it for targeted advertising, and to withdraw consent at any time. California residents may also ask us to limit the use of sensitive personal information, though we do not collect any for that purpose. UK and EEA residents may complain to their supervisory authority, including the Information Commissioner's Office.

To exercise any right, email support@purexbio.shop. We will respond within 30 days and we will not discriminate against you for asking. We may need to verify your identity before acting, and you may use an authorised agent to make a request on your behalf.

9. Security

We use TLS encryption in transit, access controls, and restricted staff permissions. Payment card data is handled by a PCI-DSS compliant processor.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authorities as required by law.

10. Children

This site is not directed to anyone under 21, and our terms of sale require purchasers to be 21 or older. We do not knowingly collect information from minors. If you believe a minor has given us personal information, contact us and we will delete it.

11. Changes to this policy

We will post any revision here and update the date at the top of the page. Where changes are material, we will give notice by email or by a prominent notice on the site before they take effect.