Privacy Policy

1. Who we are

Synthrex Biotech LLC operates https://synthrexbiotech.com. Questions: support@synthrexbiotech.com.

2. Information we collect

You provide: email address, password (stored only as a salted hash by our authentication provider — never in plaintext and never visible to us), research entity type, research protocol type, age and research-use attestations with timestamps, contact name, shipping address, and order contents.

Automatically: IP address, browser and device data, pages viewed, and referring URL, used for security, rate limiting, fraud prevention and aggregate analytics.

We do not collect payment card numbers, CVV codes, or bank account numbers through this website. Payment is arranged manually outside the site.

3. How we use it

To create and administer accounts; verify eligibility and maintain compliance records; process, fulfil and ship orders; provide support; send transactional email; detect and prevent abuse; meet legal obligations; and — only with your consent — send research updates and restock notices you may withdraw at any time.

4. Legal bases

Where applicable law requires a legal basis, we rely on performance of a contract (orders and accounts), our legitimate interests (security, fraud prevention, service improvement), consent (marketing email), and compliance with legal obligations (records and reporting).

5. Sharing

We share personal data only with service providers acting on our instructions — hosting and database infrastructure, email delivery, and shipping carriers — and where required by law or to protect our rights. We do not sell or share personal information, and we do not use it for targeted advertising.

The providers we use are: Supabase (database, authentication and file storage), Cloudflare (hosting, security and cookieless web analytics), PostHog (aggregate product analytics), Resend (transactional email delivery), and Coinbase Commerce (cryptocurrency payment pages, where you choose that method). Each processes data only on our instructions.

6. Retention

We retain account, order and compliance-attestation records for as long as your account is active and thereafter for the period required to meet legal, tax and regulatory obligations.

7. Security

We use encryption in transit (HTTPS/TLS), database row-level access controls that restrict each account to its own records, secret credentials held only server-side, rate limiting on authentication and checkout, and least-privilege administrative access. No system is perfectly secure, but we do not store the categories of data most attractive to attackers — notably payment card data.

8. Your rights

Depending on where you live you may have rights to access, correct, delete, port, or restrict processing of your personal data, to withdraw consent, and to opt out of marketing. California residents have rights under the CCPA/CPRA including the right to know, delete, correct, and to opt out of sale or sharing (we do neither). Texas residents have rights under the Texas Data Privacy and Security Act, including the right to know, correct, delete and obtain a copy of their personal data, and to opt out of targeted advertising, sale, or profiling — none of which we carry out. To exercise any right, contact support@synthrexbiotech.com. We will respond within 45 days and we will not discriminate against you for asking.

9. Cookies and analytics

Strictly necessary storage. We store your research verification, your sign-in session, your cart contents and any referral code you arrived with. The site does not function without these.

Analytics. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you between sites, and PostHog for aggregate traffic and funnel analysis. PostHog also records anonymised session replays on the checkout and account pages to help us diagnose usability problems; input fields (name, email, address, payment reference) are masked and are never transmitted. We do not run advertising pixels, and we do not use analytics to build advertising profiles. Full detail, including how to opt out, is in our Cookie Policy.

10. Children

The site is not directed to anyone under 21 and we do not knowingly collect their data.

11. Changes

We will post any update here and revise the “last updated” date.