Privacy Policy

1. Information We Collect

We collect the following categories of personal data:

Account Information: Name, email address, phone number, organization or institution name, designation, and account credentials when you create an account or place an order.

Order and Transaction Data: Billing and shipping addresses, payment method details (processed securely by third-party payment gateways — we do not store full card numbers), order history, and purchase preferences.

Technical Data: IP address, browser type, operating system, device information, referring URLs, and browsing behavior on our website, collected automatically through cookies and similar technologies.

Communication Data: Records of correspondence when you contact our support team, submit inquiries, or provide feedback.

Research Verification Data: Institutional affiliation, research credentials, and related documentation that may be required to verify eligibility for purchasing research-grade products.

2. How We Use Your Information

We process your personal data for the following purposes:

• Order Fulfillment: Processing, shipping, and delivering your orders, including sending order confirmations, shipping notifications, and invoices.
• Account Management: Creating and maintaining your account, authenticating your identity, and providing customer support.
• Compliance and Verification: Verifying that purchasers meet our Research Use Only requirements and complying with applicable legal and regulatory obligations.
• Website Improvement: Analyzing usage patterns to improve our website functionality, product offerings, and user experience.
• Communications: Sending transactional emails, product updates, and — with your consent — promotional materials about new products or research resources.
• Legal Obligations: Fulfilling tax reporting, fraud prevention, and other applicable legal requirements.

3. Legal Basis for Processing

We process your personal data based on the following lawful grounds, in alignment with international data protection standards:

• Consent: Where you have provided explicit consent, such as for marketing communications or optional data collection. You may withdraw consent at any time.
• Legitimate Uses: Processing necessary for the performance of a contract (fulfilling your order), compliance with legal obligations, or responding to medical/safety emergencies as permitted under the DPDPA.

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in payment processing, shipping and logistics, email delivery, website hosting, and analytics — under strict contractual data protection obligations.
• Legal Requirements: When required by law, court order, or governmental authority, or to protect the rights, safety, or property of TrueStandard Labs, our customers, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity under equivalent data protection commitments.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Specifically:

• Account data is retained for the duration of your active account and for 3 years following account closure.
• Transaction and order data is retained for up to 8 years to comply with applicable tax and accounting regulations.
• Communication records are retained for 2 years from the date of last interaction.
• Technical and analytics data is retained in anonymized form and may be kept indefinitely for statistical analysis.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest for sensitive information.
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Regular security assessments and vulnerability testing of our systems.
• PCI-DSS compliant payment processing through certified third-party gateways.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a summary of the personal data we hold about you and how it is processed.
• Right to Correction and Erasure: Request correction of inaccurate data or erasure of data that is no longer necessary for the purpose it was collected.
• Right to Withdraw Consent: Withdraw consent for processing at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Request a copy of your data in a portable, machine-readable format.
• Right to Object: Object to certain types of processing, including direct marketing.

To exercise any of these rights, contact us at contact@truestandardlabs.com. We will respond within 30 days of receiving your request.

8. International Data Transfers

As a global brand serving customers in 50+ countries, your data may be transferred to and processed in jurisdictions different from where you are located. We use service providers (hosting, payment processing, shipping) that comply with international data protection standards and ensure appropriate safeguards are in place wherever your data is processed.

9. Cookies Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. We use:

• Essential Cookies: Required for core website functionality such as authentication, shopping cart, and checkout.
• Analytics Cookies: Help us understand how visitors interact with our website to improve performance and content.
• Preference Cookies: Remember your settings and preferences for a personalized experience.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

10. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete such information promptly. As required under applicable laws, we will obtain verifiable parental consent before processing any data of a child, should such a situation arise.

11. Contact Information

If you have questions or concerns about this Privacy Policy, or wish to exercise your data rights, please contact us:

TrueStandard Labs
Email: contact@truestandardlabs.com
Website: truestandardlabs.com