1. Information we collect
We collect information you provide directly — your name, email address, phone number, shipping address, and order details — and limited technical information automatically, such as your browser type, device information, and pages viewed, to operate and improve the site. A phone number is required at checkout because delivery carriers require one, and it is used for marketing texts only if you separately opt in.
If you create an account you may also add a lab or institution name to your profile. That field is optional and you can change or clear it at any time from your account page.
If you join our affiliate programme we additionally collect the details needed to pay you: your payout method (a payment-app handle, or a cryptocurrency address together with the asset and network you chose). A payout address is financial information, and we use it only to send you money you have earned. We keep only your current payout details — if you change an address, the previous one is overwritten rather than kept as history.
We do not seek to collect sensitive personal information, and we ask that you not send it to us.
2. Cookies & local storage
This site uses your browser’s local storage to remember your cart, recently viewed materials, saved delivery addresses, a referral code you arrived with, your sign-in, your Research-Use acknowledgment, and display preferences. It stays in your browser until you use it: when you place an order, your cart, the delivery address you choose and any discount or referral code are sent to us as part of that order, and while you are signed in, your browser sends your sign-in with each request to your account. You can clear it any time through your browser settings. We use only essential, first-party storage of this kind and do not use it for cross-site advertising.
3. How we use information
- To process and ship orders and provide documentation
- To verify eligibility and prevent prohibited or fraudulent use
- To respond to inquiries and support requests
- To maintain the security and integrity of the site
- To comply with legal, tax, and regulatory obligations
- To send marketing and promotional messages by email, and by text message where you have given express written consent
- To operate the Daily Deals text program, including sending the confirmation message, honouring STOP and HELP, and keeping a record of your consent
We do not sell your information, and we never share your phone number or your consent record with anyone for their own marketing. You can stop marketing email with the unsubscribe link in any message, and stop texts by replying STOP at any time.
5. Payment information
Card payments are temporarily unavailable. This section continues to describe them because we still hold these records for card orders placed before they were suspended.
We do not collect or store card numbers. Card payments are handled entirely by a third-party payment processor, on its own secure page; no card number is entered on this site, transmitted to us, or stored by us or on our behalf. From that processor we receive only the outcome of the payment, the amount, and the identifiers needed to match it to your order. A card charge appears on your statement as FLOW GRADE, not as Elyria Bio — that is the processor’s billing name, and it is shared with other merchants it serves.
Payments are otherwise made in cryptocurrency (Bitcoin, Ethereum, USDT or USDC on the Ethereum, Tron, Solana or Base networks) or through a peer-to-peer payment service such as Venmo, Cash App or X Money. In those cases the transfer happens on that network or in that service’s own app, not on this site.
To confirm a payment we ask you for a reference — a transaction hash or a payment-app handle — and, optionally, a screenshot of the completed transfer. What is required depends on how you pay. For Venmo, the @handle you sent from is required and we do not ask for a screenshot: the handle is what lets us match your transfer to your order. For Cash App the same applies to your $cashtag — it is required, and no screenshot is asked for. For X Money we need either a confirmation ID or a screenshot. For cryptocurrency neither is required, because the payment is matched on-chain. For a card payment we ask you for nothing at all: the processor confirms the payment to us directly. We record the reference, the amount received, the asset and network, and the exchange rate at the time. We keep that record for as long as tax and accounting rules require.
Screenshots are treated differently from that record. You are never required to upload one for a Venmo, Cash App or cryptocurrency payment, and most orders do not involve one at all. A screenshot you do upload is stored privately, is never publicly reachable, is viewed only by us and only to confirm your payment, and is deleted 90 days after you submit it. The payment record survives that deletion; the image does not.
A screenshot may also contain information we never asked for — a wallet address, a payment-app handle, a display name, an account balance, or unrelated transactions visible in the same view. We do not read, extract, index, or retain anything from an image beyond confirming your payment, and the 90-day deletion applies to the whole image regardless of what it happens to show. You are welcome to crop or redact a screenshot before uploading it, or to send a reference only.
6. Analytics & third-party services
We may use privacy-respecting analytics to understand aggregate site usage and improve performance. Where used, these services process limited technical data on our behalf. We do not permit them to use your information for their own advertising purposes.
7. Security
We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the authorities as required by law.
8. Your choices & rights
You may request access to, correction of, or deletion of your personal information, and may opt out of non-essential communications, subject to legal limits, by contacting us. You can also manage cookies and local storage through your browser. We will not discriminate against you for exercising these rights.
9. California privacy rights
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to request access to or deletion of it, to request correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, contact us using the details below; we will verify your request and respond within the time required by law. You may use an authorized agent to submit a request.
10. Children’s privacy
This site is intended only for qualified researchers who are at least 21 years of age, and access requires confirming that. It is not directed to children or to anyone under 21, and we do not knowingly collect personal information from anyone under that age. If you believe someone under 21 has provided us information, contact us and we will delete it.
11. Do Not Track
Because there is no common industry standard for responding to browser “Do Not Track” signals, we do not currently respond to them. We do not track you across third-party websites for advertising regardless of any such signal.
12. Retention
We retain order and documentation records as needed to fulfill the purposes described here and to meet legal, tax, and accounting requirements, after which we delete or de-identify them. Elyria Bio operates in the United States, and information is processed and stored there.
We keep each record of your consent to receive texts, and of any withdrawal, for four years after the last text we send you, to match the time limit for claims about texts under US law. A deletion request removes you from the Daily Deals program immediately, but the consent record itself is kept for that period.
13. Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the current version, and material changes will be posted on this page. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.
14. Contact
Data controller. Elyria Bio LLC is the controller responsible for the personal information described in this policy.
Questions about this policy or to exercise your rights: support@elyriabio.com or via our contact page.