Information We Collect
We collect only the information described below. We do not collect date of birth, government identifiers, or biometric information.
- Account application information. To request an account, you provide: contact name, email address, and password; and optionally phone number, institution name, institution type, contact role, and a description of intended research use. Purchases require an approved account — see "Account Review" below.
- Technical information collected automatically at registration. When you submit an account application, we record the Internet Protocol (IP) address and browser user-agent string from which it was submitted. We use this for fraud prevention, abuse detection, and to maintain a record of the application.
- Order information. When you place an order, we collect your name, shipping address, billing address, phone number, and email address, along with order contents, amounts, and shipping details.
- Terms acceptance records. When you accept our Terms and Conditions at checkout, we record the version of the Terms accepted, the date and time of acceptance, and the IP address from which acceptance was submitted. This record evidences your agreement to the version governing that order.
- Payment information. We do not collect or store payment card numbers. Card details are submitted directly to our third-party payment processor, which handles them under its own security and privacy practices.
- Support communications. If you contact support, we collect the information you provide in that message, including any file you choose to attach.
- Account activity. We record login activity and last-active timestamps for your account.
How We Use Your Information
- To review and decide account applications, and to administer approved accounts
- To process, fulfill, and ship orders, and to provide order-related communications
- To provide customer support and respond to inquiries
- To detect, prevent, and investigate fraud, abuse, and violations of our Terms
- To maintain records of Terms acceptance and account decisions
- To comply with legal obligations and to establish, exercise, or defend legal claims
- To operate, secure, and improve the Website
We do not sell or rent personal information. We do not use personal information to infer characteristics about you. We do not use personal information for third-party marketing.
Account Review
Purchases may only be made through an approved organizational account. Each application is individually reviewed by a Carbon Biosupply administrator, who may approve or deny it at Carbon Biosupply's sole discretion. Denial reasons are recorded internally. We may suspend or terminate an account at any time in accordance with our Terms.
Service Providers and Disclosure
We share personal information only as described here. Our service providers process information on our behalf and are not permitted to use it for their own purposes:
- Hosting and application infrastructure — hosting and delivery of the Website
- Database and authentication — storage of account, order, and application records and management of sign-in credentials
- Payment processing — card payment handling; the processor receives payment and order details directly
- Transactional email delivery — sending order confirmations, shipping notices, and account notices
- Address lookup — when you type a shipping address, address text is sent to a third-party geocoding service to return address suggestions
- Spam and abuse prevention — CAPTCHA and rate-limiting services, which receive technical request information including IP address
- Error monitoring and analytics — diagnostic and usage information used to operate and improve the Website
- Shipping carriers — name, address, and contact details needed to deliver your order
We may also disclose personal information to legal or regulatory authorities where required by law, or where necessary to enforce our Terms, protect our rights, or investigate suspected fraud or misuse.
Third-Party Websites and Links
The Website may link to sites operated by third parties. We are not responsible for the privacy or security practices of those sites, and we encourage you to review their policies.
Data Security and Retention of Your Information
We implement and maintain reasonable safeguards designed to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. Any information you transmit to us is at your own risk. We recommend that you do not transmit sensitive or confidential information through unsecured channels.
Your Rights and Choices
Depending on your location and applicable law, you may have some or all of the following rights. These rights are not absolute, and we may decline a request where permitted or required by law — for example, where we must retain information to comply with a legal obligation or to establish, exercise, or defend legal claims. If we decline, we will explain why to the extent required.
You have the right to:
- Access / Know — request access to the personal information we hold about you, and information about how we use and share it
- Delete — request deletion of personal information we maintain about you
- Correct — request correction of inaccurate personal information
- Portability — request a copy of your personal information, and in certain circumstances that we transmit it to a third party
- Restrict processing — request that we stop or limit certain processing
- Withdraw consent — where we rely on consent, withdraw it
- Appeal — appeal a decision to decline a request
- Communication preferences — opt out of non-transactional communications
How to exercise these rights. Email support@carbonsupply.bio with your request. We handle these requests manually; there is no self-service deletion or export function on the Website. We may need to verify your identity before responding, and may require an authorized agent to provide proof of authorization. We will respond within the time required by applicable law — typically thirty (30) to forty-five (45) days — and will notify you if we need additional time. We will not discriminate against you for exercising these rights.
Children
The Website is not directed to children, and we do not knowingly collect personal information from anyone under 18. Accounts are available only to organizations and qualified researchers.
Changes to This Policy
We may update this Policy. Material changes will be reflected in the version and effective date shown on this page, and we may provide notice by email to the address associated with your account. Your continued use of the Website after an update constitutes acceptance of the updated Policy.
Contact
Questions or requests regarding this Privacy Policy: support@carbonsupply.bio