Privacy Policy

SynthLab Research ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact information (email address, phone number, mailing address)
• Billing and shipping addresses
• Payment information (processed securely through our payment processor)
• Account credentials if you create an account
• Organization or institution name
• Communication preferences

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Geographic location (country/region level)

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Respond to your inquiries and provide customer support
• Send promotional communications (with your consent)
• Improve our website and services
• Detect and prevent fraud
• Comply with legal obligations

3. Information Sharing

We may share your information with:

• Service Providers: Third parties that help us operate our business (payment processors, shipping carriers, email services)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure payment processing through PCI-compliant providers
• Access controls and authentication requirements
• Regular security assessments

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our website. These may include:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser. Note that disabling certain cookies may affect website functionality.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Request data portability
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Order records may be retained for tax and compliance purposes.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). This section describes those rights and how to exercise them.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, postal address, phone number, IP address, account name
• Commercial Information: Products purchased, order history, purchasing tendencies
• Internet Activity: Browsing history on our site, interactions with our website
• Geolocation Data: Approximate location based on IP address
• Professional Information: Organization or institution name (when provided)

Sources of Personal Information

We collect personal information from:

• Directly from you when you make a purchase or create an account
• Automatically through cookies and similar technologies when you visit our website
• From our service providers (payment processors, analytics providers)

Business Purposes for Collection

We collect personal information for the following business purposes:

• Processing and fulfilling orders
• Providing customer service and support
• Improving our website and services
• Detecting security incidents and preventing fraud
• Complying with legal obligations

Categories of Third Parties

We may share personal information with the following categories of third parties:

• Payment processors
• Shipping carriers
• Email service providers
• Analytics providers
• Cloud hosting providers

Sale of Personal Information

We do not sell your personal information. We have not sold personal information in the preceding 12 months and do not have plans to do so.

Your California Privacy Rights

As a California resident, you have the right to:

• Right to Know: Request disclosure of the personal information we have collected about you in the past 12 months, including the categories, sources, purposes, and third parties with whom we share it
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information (note: we do not sell personal information)
• Right to Limit: Limit the use and disclosure of sensitive personal information
• Right to Non-Discrimination: You will not be discriminated against for exercising any of your CCPA rights

How to Exercise Your Rights

To exercise your California privacy rights, please contact us at contact@synthlabresearch.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

We will respond to verifiable consumer requests within 45 days. If we require additional time (up to 90 days total), we will inform you of the reason and extension period in writing.

11. Additional State Privacy Rights

In addition to California, residents of other states may have specific privacy rights under their state laws. This section addresses rights under the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).

Your Rights Under State Privacy Laws

If you are a resident of Virginia, Colorado, Connecticut, or Utah, you may have the following rights:

• Right to Access: Confirm whether we are processing your personal data and access that data
• Right to Correction: Correct inaccuracies in your personal data
• Right to Deletion: Delete personal data you have provided or that we have obtained about you
• Right to Data Portability: Obtain a copy of your personal data in a portable and readily usable format
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data (if applicable), and profiling in furtherance of decisions that produce legal or similarly significant effects

How to Exercise Your Rights

To exercise any of these rights, please contact us at contact@synthlabresearch.com. We will respond to your request within the timeframes required by applicable law (typically 45 days, with possible extensions).

Right to Appeal

If we decline to take action on your request, you may appeal our decision by contacting us at contact@synthlabresearch.com with "Privacy Appeal" in the subject line. We will respond to your appeal as required by applicable law. If your appeal is denied, you may have the right to contact your state's attorney general to submit a complaint.

12. International Users

If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from your country.

13. Third-Party Service Providers

We work with the following categories of third-party service providers who may process your personal information on our behalf:

• Payment Processing: Stripe, Inc. - processes payment transactions securely. View their privacy policy at stripe.com/privacy
• Hosting & Infrastructure: Vercel, Inc. - hosts our website and provides cloud infrastructure
• Database Services: Supabase, Inc. - provides database and authentication services
• Email Services: Our email service provider handles transactional emails such as order confirmations and shipping updates
• Analytics: We may use analytics services to understand how visitors use our website

These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

14. Do Not Track Disclosure

Some browsers have a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating you do not wish to be tracked. Our website does not currently respond to DNT signals. However, you can manage your privacy preferences through your browser settings and by controlling cookies as described in Section 5 above.

15. Data Retention Periods

We retain different categories of personal information for different periods:

• Account Information: Retained while your account is active and for 3 years after account closure
• Order Records: Retained for 7 years for tax and legal compliance purposes
• Communication Records: Customer service communications are retained for 3 years
• Website Analytics: Aggregated analytics data is retained for 26 months
• Marketing Preferences: Retained until you opt out or request deletion

16. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. For material changes, we will provide notice through our website or by email. We encourage you to review this policy periodically.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights, please contact us:

Email: contact@synthlabresearch.com
Subject Line: Privacy Inquiry

We will respond to privacy-related inquiries within 30 days. For state-specific privacy requests (CCPA, VCDPA, CPA, CTDPA, UCPA), we will respond within the timeframes required by applicable law.