Research supply · Policies
Privacy Policy
Draft for counsel review. The sections below require approval before publication as final policies.
What we collect
TODO(counsel)
We collect account and contact details, company information, and order records. The marketing lead form collects your name, email, phone, business status, website, monthly revenue range, supply budget, compounds of interest, and whether you are actively sourcing. Marketing attribution may include campaign tags, click identifiers, browser identifiers, IP address, and browser information. We do not collect or store your bank account or card numbers: payment is handled by our payment provider and we receive only a reference and a status.
Why we use it
TODO(counsel)
To review and approve accounts, respond to wholesale enquiries, take and fulfil orders, produce certificates of analysis, send transactional messages such as payment links and shipping confirmations, meet recordkeeping obligations, and measure marketing performance. We do not sell your information and we do not use your order data to advertise to you.
What referral partners can see
TODO(counsel)
Where a referral partner introduced your account, that partner can see that you are a customer, your order dates, status and volumes, and their own commission. They cannot see your pricing, your addresses, your contacts, your purchase order numbers, or your documents. This restriction is enforced by the database, not only by the interface.
How long we keep it
TODO(counsel)
Order, invoice and certificate records are kept as long as required for tax, accounting and lot-traceability purposes. Account and lead records are kept while the account is open and for a period afterwards. TODO(counsel): state actual retention periods, especially for lot traceability, and confirm deletion procedures.
Security
TODO(counsel)
Access is restricted by account. Customer data is separated at the database level so one account cannot read another's. Documents are stored privately and served through short-lived links. Payment and payout banking details are held by our providers, not by us. No system is perfectly secure and we cannot guarantee absolute security.
Your choices
TODO(counsel)
You can update your account and company details in the portal at any time. To request a copy of what we hold, or ask us to correct or delete it, contact us using the details below. Some records must be kept for legal reasons even after an account closes. You can stop marketing email using the unsubscribe link; transactional messages about your orders are not marketing and continue while an account is active. TODO(counsel): confirm applicable state privacy rights and consent requirements for marketing technologies.