Privacy Policy

1. Information we collect

When you place an order, we collect:

• your name, institution or company, work email address, and phone number;
• your shipping and billing addresses;
• your research use attestations, together with the date and time, your IP address, your browser user agent, and the version of the Terms of Sale then in force;
• order contents, lot numbers shipped, and correspondence you send us.

We do not collect or store full payment card numbers. Card details are captured directly by our payment processor in your browser and never reach our servers. We receive only a transaction reference and the last four digits.

When you browse the site we collect standard server log information and, if you consent, limited analytics data. The research use confirmation is stored in your own browser, not on our servers.

2. Why we hold it

• To fulfil orders. Process payment, ship goods, and provide support. (Performance of a contract.)
• To meet our legal and compliance obligations. Buyer qualification records, attestation records, lot traceability, tax records, and responses to lawful requests. (Legal obligation and legitimate interest.)
• To prevent fraud and misuse. This includes detecting orders inconsistent with our Research Use Policy. (Legitimate interest.)
• To communicate with you about your order, and, only with your consent, about products and documentation. (Consent.)

We do not sell personal information, and we do not share it for cross context behavioural advertising.

3. Who we share it with

We disclose personal information only to:

• payment processors, to authorise and settle your transaction;
• shipping carriers, to deliver your order;
• service providers who host our site, send our transactional email, and keep our records, each bound by contract to handle it only on our instructions;
• professional advisers, and regulators or law enforcement where we are legally required to disclose or where disclosure is necessary to protect life or safety;
• an acquirer, in the event of a merger, acquisition, or sale of assets.

4. How long we keep it

• Attestation and buyer qualification records: seven years. These are the record that a sale was made on research use terms, and we are not able to delete them on request while that retention period runs.
• Order and financial records: seven years, for tax and audit purposes.
• Lot and analytical records: seven years from release.
• Marketing contact details: until you withdraw consent, then removed promptly.
• Server logs: twelve months.

5. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to request its deletion, to obtain a portable copy, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights.

Exercise any of these by writing to alchemyarchivellc@gmail.com. We will verify your identity before acting and respond within the period required by applicable law, generally 45 days. Where a deletion request conflicts with a retention obligation described in section 4, we will explain what we must keep and why, and delete the remainder.

California residents may designate an authorised agent to act on their behalf. Residents of jurisdictions with an applicable supervisory authority may also lodge a complaint with that authority.

6. Cookies

We use cookies and equivalent browser storage that are strictly necessary for the site to function, such as remembering your order and your research use confirmation. These cannot be switched off. Any analytics or preference storage beyond that is set only with your consent, and you can withdraw consent at any time.

7. Security

We hold personal information on access controlled systems, encrypt it in transit, limit internal access to staff who need it, and keep our payment integration out of scope for card data by design. No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal information we will notify you and the relevant authorities as required by law.

8. Children

This site is not directed to anyone under 21, and we do not knowingly collect personal information from minors. If we learn that we have, we delete it.

9. International visitors

We operate in the United States and ship only within the United States. If you access this site from elsewhere, your information is processed in the United States.

10. Changes

We may update this policy. Material changes are reflected in the version number above, and where required we will notify you directly.