Privacy Policy
How we collect, use, and retain your information.
What we collect
We collect only what running a research-supply store requires:
- Account details — your name, email address, organization, and organization type.
- Order and shipping information — what you ordered, the lot numbers shipped, and the delivery address.
- Payment — processed by Stripe, our payment provider. We do not receive or store full card numbers.
- Consent records — the entry gate, the researcher-account attestation, and the checkout certification, each with its timestamp, IP address, and the exact wording you agreed to.
How we use it
We use this information to:
- fulfil and ship your orders, and record the lot numbers shipped to you
- manage your account
- verify your research-use qualification
- prevent fraud
- meet our legal and regulatory obligations, including lot traceability
- answer your support requests
Sharing
We do not sell or share your personal information. We do not use cross-platform advertising trackers or third-party advertising pixels. Your information is disclosed only to the service providers named below, each receiving what its service needs, and to authorities where the law requires it.
Service providers
These are the providers we use, and what each receives:
- Stripe — payments. Your payment details, billing and shipping address, email address, IP address, and device and browser signals. Stripe processes the payment, and also uses this information for its own fraud prevention across its network and to meet its legal obligations, under the Stripe Privacy Policy. We never receive full card numbers. If you choose Link, Stripe's own saved-payment service, Stripe stores the payment details and contact information you give it under the same policy. If you pay with Apple Pay or Google Pay, Apple's or Google's own terms also apply to that payment.
- Mailgun — email delivery. Your name and email address, and the content of the emails we send you: order confirmations, shipping updates, and account and sign-in messages.
- Purelymail — support mailbox. The emails you send to our support address, and our replies: your email address, name and whatever you write.
- MailerLite — welcome-offer sign-up. The email address you enter in the welcome-offer form, if you choose to sign up. The form is loaded from MailerLite on the pages that show it, so MailerLite receives your IP address and browser type on those pages.
- Hostinger — hosting. Hosts the website and its database. The information described in this policy is stored on its servers.
- Cloudflare — domain name service and backups. Answers lookups for our domain name, and stores encrypted backups of order and consent records, which only we can decrypt.
- Pirate Ship — shipping labels. Your name, delivery address, email address, phone number if you gave one, and the contents of your order, to create the shipping label. The carrier (USPS or UPS) receives the name and address on the label.
Retention
We keep information for as long as it is needed for the purpose it was collected, and for the periods the law and our lot-traceability obligations require:
- Order and transaction records — 7 years.
- Consent records (entry gate, attestation, checkout) — 7 years, as evidence of compliance.
- Account data — until you ask us to delete it.
Your rights
You may ask to see the personal information we hold about you, to correct it, or to delete it. Write to support@boundbio.com from the email address on your account. We will confirm receipt within one business day and tell you what we will do and when.
We may be unable to delete records we are required to keep — order, transaction, and consent records are retained for 7 years for lot traceability and regulatory compliance — and we will tell you if that applies to your request.
Cookies
We set strictly necessary cookies and no advertising cookies. The Cookies policy lists every cookie, who sets it and how long it lasts.
Privacy requests
Questions about this policy or about your data: support@boundbio.com.