1. Information we collect
We collect information you provide directly — your name, email address, phone number, shipping address, and order details — and limited technical information automatically, such as your browser type, device information, and pages viewed, to operate and improve the site. A phone number is required at checkout because delivery carriers require one.
If you create an account you may also add a lab or institution name to your profile. That field is optional and you can change or clear it at any time from your account page.
If you join our affiliate programme we additionally collect the details needed to pay you: your payout method (a payment-app handle, or a cryptocurrency address together with the asset and network you chose). A payout address is financial information, and we use it only to send you money you have earned. We keep only your current payout details — if you change an address, the previous one is overwritten rather than kept as history.
We do not seek to collect sensitive personal information, and we ask that you not send it to us.
2. Cookies & local storage
This site uses your browser’s local storage to remember your cart, recently viewed materials, your Research-Use acknowledgment, and display preferences. This data stays in your browser and is not, by itself, transmitted to us. You can clear it any time through your browser settings. We use only essential, first-party storage of this kind and do not use it for cross-site advertising.
3. How we use information
- To process and ship orders and provide documentation
- To verify eligibility and prevent prohibited or fraudulent use
- To respond to inquiries and support requests
- To maintain the security and integrity of the site
- To comply with legal, tax, and regulatory obligations
5. Payment information
We do not collect or store card numbers. Card payments are handled entirely by a third-party payment processor, on its own secure page; no card number is entered on this site, transmitted to us, or stored by us or on our behalf. From that processor we receive only the outcome of the payment, the amount, and the identifiers needed to match it to your order. A card charge appears on your statement as FLOW GRADE, not as Elyria Bio — that is the processor’s billing name, and it is shared with other merchants it serves.
Payments are otherwise made in cryptocurrency (Bitcoin, Ethereum, USDT or USDC on the Ethereum, Tron, Solana or Base networks) or through a peer-to-peer payment service such as Venmo, Cash App or X Money. In those cases the transfer happens on that network or in that service’s own app, not on this site.
To confirm a payment we ask you for a reference — a transaction hash or a payment-app handle — and, optionally, a screenshot of the completed transfer. What is required depends on how you pay. For Venmo, the @handle you sent from is required and we do not ask for a screenshot: the handle is what lets us match your transfer to your order. For Cash App the same applies to your $cashtag — it is required, and no screenshot is asked for. For X Money we need either a confirmation ID or a screenshot. For cryptocurrency neither is required, because the payment is matched on-chain. For a card payment we ask you for nothing at all: the processor confirms the payment to us directly. We record the reference, the amount received, the asset and network, and the exchange rate at the time. We keep that record for as long as tax and accounting rules require.
Screenshots are treated differently from that record. You are never required to upload one for a Venmo, Cash App or cryptocurrency payment, and most orders do not involve one at all. A screenshot you do upload is stored privately, is never publicly reachable, is viewed only by us and only to confirm your payment, and is deleted 90 days after you submit it. The payment record survives that deletion; the image does not.
A screenshot may also contain information we never asked for — a wallet address, a payment-app handle, a display name, an account balance, or unrelated transactions visible in the same view. We do not read, extract, index, or retain anything from an image beyond confirming your payment, and the 90-day deletion applies to the whole image regardless of what it happens to show. You are welcome to crop or redact a screenshot before uploading it, or to send a reference only.
6. Analytics & third-party services
We may use privacy-respecting analytics to understand aggregate site usage and improve performance. Where used, these services process limited technical data on our behalf. We do not permit them to use your information for their own advertising purposes.
7. Security
We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the authorities as required by law.
8. Your choices & rights
You may request access to, correction of, or deletion of your personal information, and may opt out of non-essential communications, subject to legal limits, by contacting us. You can also manage cookies and local storage through your browser. We will not discriminate against you for exercising these rights.
9. California privacy rights
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to request access to or deletion of it, to request correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, contact us using the details below; we will verify your request and respond within the time required by law. You may use an authorized agent to submit a request.
10. Children’s privacy
This site is intended only for qualified researchers who are at least 21 years of age, and access requires confirming that. It is not directed to children or to anyone under 21, and we do not knowingly collect personal information from anyone under that age. If you believe someone under 21 has provided us information, contact us and we will delete it.
11. Do Not Track
Because there is no common industry standard for responding to browser “Do Not Track” signals, we do not currently respond to them. We do not track you across third-party websites for advertising regardless of any such signal.
12. Retention
We retain order and documentation records as needed to fulfill the purposes described here and to meet legal, tax, and accounting requirements, after which we delete or de-identify them. Elyria Bio operates in the United States, and information is processed and stored there.
13. Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the current version, and material changes will be posted on this page. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.
14. Contact
Data controller. Elyria Bio LLC is the controller responsible for the personal information described in this policy.
Questions about this policy or to exercise your rights: support@elyriabio.com or via our contact page.