What we collect

• Information you give us: name, email, phone, billing and shipping address, institution or company, and research-account verification details you submit.
• Order information: what you bought, order value, lot allocated, and correspondence about your order.
• Payment information: processed through our website’s secure, PCI-compliant checkout by our payment gateway provider. We do not store full card numbers, CVV codes, or full payment credentials on our own servers.
• Technical information: IP address, browser and device type, pages viewed, and referring page, collected automatically through cookies and similar technologies.

Why we use it

• To process, fulfill, and ship your orders and handle returns
• To verify research accounts and administer account terms
• To respond to your questions
• To detect and prevent fraud and to enforce our Terms of Sale
• To meet legal, tax, and recordkeeping obligations
• To operate and improve the site

We do not sell your personal information.

Who we share it with (subprocessors)

We share personal information only with service providers who need it to do their job for us, and only for that purpose: payment processing, shipping carriers, web hosting, and email delivery. Each is contractually bound to handle data only as we direct. Today that means Hostinger (hosting), WooCommerce and our payment gateway (orders and payments), Hostinger Reach (email), and national parcel carriers (USPS, UPS, FedEx).

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Cookies

Core-function cookies maintain cart status, login sessions, and checkout security. We use limited analytics cookies to understand site usage. You can block cookies in your browser, but checkout will not work correctly without the necessary ones.

How long we keep it

Tax and legal records are retained for as long as required by tax and consumer-protection law in our operating jurisdictions. Account verification data is retained for the duration of your account. Marketing subscribers may request removal at any time.

Security

We use commercially reasonable safeguards, including encrypted transmission and restricted internal access, to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

Your choices and rights

Depending on where you are located, you may have rights under data protection laws such as the GDPR (EEA and UK) or the CCPA and CPRA (California) to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can exercise these rights, or unsubscribe from marketing communications at any time, by writing to contact@oxianlabs.com.

We respond within a reasonable timeframe consistent with applicable law, and we will not discriminate against you for exercising these rights. Some information, such as tax and order records, may be retained where required by law even after a deletion request.

Children

This site is not directed to anyone under 18, and our products are not sold to anyone under 21.

Changes

We may update this policy from time to time. Updates appear on this page with a revised “last updated” date above.

Contact

Questions about this policy: contact@oxianlabs.com.