This policy explains what personal information Wholesome Labs collects, why we collect it, and what we do with it. We have tried to write it in the same plain language as the rest of the site.
Who we are
Wholesome Labs operates this site and is responsible for the personal information described here. You can reach us about anything in this policy at hello@wholesomelabs.co.
What we collect
We collect the following, and nothing beyond it:
- Account details. Your name, email address and a password. An account is required to order, so we hold this for every customer.
- Order details. Billing and delivery addresses, what you ordered, and your order history.
- Your stated research field. Checkout asks which laboratory or academic setting the order is for. We keep the answer with the order.
- Your research-use acknowledgment. Recorded against the order as a note, so there is a record of what was agreed at the time of purchase.
- Payment information. Handled by our payment processor. Card numbers are entered on their systems, not ours. We never see or store a full card number.
- Correspondence. Messages you send through the contact form or by email, and our replies.
- Newsletter subscription. Your email address, if you subscribe. Only if you subscribe.
- Technical data. IP address, browser and device information, and the pages you visit, from cookies and ordinary server logs.
We do not ask for, and have no use for, any health information. Please do not send us any.
Why we use it
- To perform our contract with you — taking payment, dispatching orders, handling returns, and answering support requests.
- To meet legal and regulatory obligations — keeping order and tax records, and evidencing that the research-use and age confirmations were made.
- For our legitimate interests — preventing fraud and abuse, keeping the site secure and working, and improving how it runs.
- With your consent — sending the newsletter, which you can stop at any time using the link in any message.
We do not use your information to build a profile of you, and we do not make automated decisions about you.
Cookies
The site sets a small number of cookies. None of them are advertising cookies.
- Shopping cart and session. Set by WooCommerce so your cart and login survive between pages. Necessary for the store to work.
- Research-use acknowledgment. Records that you completed the entry confirmation, so you are not asked again on every page. Lasts 30 days.
- Announcement dismissal. Remembers that you closed the notice at the top of the page. Lasts 90 days, and is keyed to the message, so a new announcement appears again.
Sharing
We do not sell your personal information, and we do not share it for advertising. We share it only with the providers who make the store work, and only with what they need:
- Payment processing — to take payment and handle refunds and disputes.
- Shipping and fulfillment — the delivery address and contact details needed to get the parcel to you.
- Hosting — our web host stores the site and its database.
- Email delivery — for order notifications and, if you subscribe, the newsletter.
We may also disclose information where the law requires it, to establish or defend legal claims, or to protect our rights, our customers or the public.
If the business is ever sold or reorganized, customer records may transfer as part of it. Anyone receiving them would be bound by this policy.
How we protect it
The whole site runs over an encrypted connection. Card details are entered directly with our payment processor and never reach our systems. Access to customer records is limited to the people who need it to run the business, and accounts are protected by passwords we store only in hashed form, so we cannot read them.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal information, we will tell you and the relevant regulator where the law requires it.
How long we keep it
- Order and payment records — kept for as long as tax and accounting law requires, then deleted.
- Account details — kept while your account is open. Ask us to close it and we will delete or anonymize what we are not required to keep.
- Support correspondence — kept while it is useful for handling your query and any follow-up.
- Newsletter subscription — kept until you unsubscribe.
- Server logs — kept for a short period for security and troubleshooting.
Your rights
Depending on where you live, you may have the right to ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. You can also withdraw consent to the newsletter at any time.
To exercise any of these, email hello@wholesomelabs.co. We will not charge you for it and we will not treat you differently for asking. We may need to verify who you are before acting, which usually means replying from the email address on the account.
If you are unhappy with how we have handled a request, you can complain to your local data protection authority.
California privacy rights
If you are a California resident, you may request the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of third parties we disclose it to. You may also request deletion or correction.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past twelve months. There is therefore nothing to opt out of, but you are welcome to ask us to confirm that.
You may use an authorized agent to make a request. We will not discriminate against you for exercising any of these rights. Requests go to hello@wholesomelabs.co.
Age of customers
This site is not intended for children, and we do not knowingly collect personal information from anyone under 13. Beyond that, our products are supplied only to purchasers who are at least 21 years old, and entry to the site requires that confirmation.
If you believe a child has given us personal information, email hello@wholesomelabs.co and we will delete it.
Links to other sites
Some pages link to documents or sites we do not control, including certificates of analysis hosted by testing laboratories. This policy does not cover them, and we are not responsible for how they handle your information.
Changes to this policy
If we change this policy we will publish the updated version on this page and change the date below. Where a change materially affects how we use your information, we will tell account holders by email.
Contact
Questions, requests and complaints about this policy all go to the same place: hello@wholesomelabs.co.
