Research supply · Policies
Privacy Policy
These are the policies that govern accounts, orders and supply. Read them alongside the research-use-only terms that appear on every page.
What we collect
Effective 12 September 2026. We update these policies as the business changes, and account holders are notified of material changes before they take effect.
We collect account and contact details, company information, and order records. The marketing lead form collects your name, email, phone, business status, website, monthly revenue range, supply budget, compounds of interest, and whether you are actively sourcing. Marketing attribution may include campaign tags, click identifiers, browser identifiers, IP address, and browser information. We do not collect or store your bank account or card numbers: payment is handled by our payment provider and we receive only a reference and a status.
Why we use it
Effective 12 September 2026. We update these policies as the business changes, and account holders are notified of material changes before they take effect.
To review and approve accounts, respond to wholesale enquiries, take and fulfil orders, produce certificates of analysis, send transactional messages such as payment links and shipping confirmations, meet recordkeeping obligations, and measure marketing performance. We do not sell your information and we do not use your order data to advertise to you.
What referral partners can see
Effective 12 September 2026. We update these policies as the business changes, and account holders are notified of material changes before they take effect.
Where a referral partner introduced your account, that partner can see that you are a customer, your order dates, status and volumes, and their own commission. They cannot see your pricing, your addresses, your contacts, your purchase order numbers, or your documents. This restriction is enforced by the database, not only by the interface.
How long we keep it
Effective 12 September 2026. We update these policies as the business changes, and account holders are notified of material changes before they take effect.
Order, invoice and certificate records are kept as long as required for tax, accounting and lot-traceability purposes. Order, invoice and payment records are kept for seven years after the end of the tax year they fall in. Lot records and certificates of analysis are kept for at least seven years and, where a lot has shipped, for as long as we need them to identify every recipient of that lot if it is ever recalled; traceability is the reason these outlive an account. Account records are kept while the account is open and for seven years after it closes, so that the order history behind those invoices remains intelligible. Marketing lead records are kept for twenty-four months after the last contact. When a retention period ends, records are deleted or irreversibly anonymised on our next scheduled review. A deletion request is honoured except where a record is inside one of the periods above or is subject to a legal hold, and we will tell you which applies.
Security
Effective 12 September 2026. We update these policies as the business changes, and account holders are notified of material changes before they take effect.
Access is restricted by account. Customer data is separated at the database level so one account cannot read another's. Documents are stored privately and served through short-lived links. Payment and payout banking details are held by our providers, not by us. No system is perfectly secure and we cannot guarantee absolute security.
Your choices
Effective 12 September 2026. We update these policies as the business changes, and account holders are notified of material changes before they take effect.
You can update your account and company details in the portal at any time. To request a copy of what we hold, or ask us to correct or delete it, contact us using the details below. Some records must be kept for legal reasons even after an account closes. You can stop marketing email using the unsubscribe link; transactional messages about your orders are not marketing and continue while an account is active. Depending on where you live you may have the right to access the personal information we hold, to correct or delete it, to receive a portable copy, and to appeal if we refuse a request; residents of California, Colorado, Connecticut, Texas, Utah and Virginia have these rights under their own state laws, and we apply them to everyone who asks. We do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined under California law. Our marketing pages use the Meta Pixel and send hashed contact details to the Meta Conversions API for advertising measurement; you can prevent this by declining non-essential cookies on the marketing site or by using your browser and Meta ad settings. The portal itself sets only the cookies needed to keep you signed in and your cart intact. We verify your identity before acting on a request and will respond within forty-five days, extending once where a request is complex.