01Who we are
Ethos Bio, LLC, a Montana LLC with its principal place of business in Scottsdale, Arizona, is the data controller for personal information collected through ethosbioresearch.com.
02What we collect
We collect only what we need to fulfill orders, verify researcher status, and operate a compliant research-supply business:
- Account & order information — name, email, phone, institutional affiliation, shipping and billing address.
- Payment information — handled by our merchant processor; we never store full card numbers or CVV.
- Researcher verification — institutional email, role, and any verification documents you submit.
- Order history & research-portal data — purchases, lot assignments, COA downloads, continuity preferences.
- Technical data — IP address, browser type, device, pages visited, referrer (via Cloudflare logs, GA4, Microsoft Clarity).
- Communications — messages you send to our support, science, or compliance teams.
03How we use it
- To process orders, ship reagents, and provide post-sale documentation.
- To verify researcher status under our RUO compliance program.
- To operate the Researcher Portal (Continuity Program, COA mirroring, batch pinning).
- To send transactional emails (order confirmations, shipping, COA releases).
- To send marketing emails — only with consent — and only about research compounds, never lifestyle products.
- To detect fraud, prevent abuse, and comply with applicable law.
- To improve the catalog, journal content, and site performance.
04Who we share it with
We share data with a short list of vetted processors, each contractually bound to RUO compliance and data security:
- Payment processor (Easy Pay Direct / NMI) — for card processing only.
- Hosting (Cloudways / DigitalOcean / Cloudflare) — to operate the site.
- Email service (Postmark, Klaviyo) — to deliver transactional and consented marketing emails.
- Shipping carriers (UPS, FedEx) — to deliver cold-chain shipments.
- Analytics (Google Analytics 4, Microsoft Clarity, Meta Pixel) — aggregated traffic data.
We do not sell your personal information. We do not share researcher identity with third parties for marketing.
05Cookies & tracking
We use first-party cookies for cart persistence, login sessions, and researcher portal state. We use third-party cookies for analytics (GA4, Clarity) and advertising attribution (Meta Pixel, Google Ads). You can opt out of all non-essential cookies via the banner on first visit, or by clearing your browser cookies. The Researcher Portal requires essential cookies to function.
06Your rights
Depending on your jurisdiction, you may have rights to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete data, subject to legal retention requirements (compliance records, order history for tax purposes).
- Opt out of marketing communications (every email includes an unsubscribe link).
- Restrict or object to certain processing.
- Receive a portable copy of your data.
- Lodge a complaint with a supervisory authority (EU/UK residents).
To exercise any of these rights, email privacy@ethosbioresearch.com. We respond within thirty (30) days.
07Data retention
We retain order, COA, and compliance records for seven (7) years after the relevant transaction, as required by U.S. tax and research-supply compliance regulations. Marketing-only data is retained for three (3) years after your last engagement. Analytics data is aggregated and anonymized after thirteen (13) months.
08Security
We protect researcher data with industry-standard measures: TLS encryption in transit, encrypted database storage at rest, Cloudflare WAF + DDoS protection, restricted administrative access, regular security audits, and Wordfence monitoring. No system is perfectly secure — if we discover a breach affecting your data, we will notify you and any required regulators per applicable law.
09Children
Ethos Bio does not knowingly collect data from anyone under 21. Researcher access is age-gated.
10International transfers
Our servers and most processors are in the United States. If you contact us from outside the U.S., your data will be transferred to and processed in the U.S. We use standard contractual clauses where required for cross-border transfers.
11California residents (CCPA / CPRA)
California residents have the right to know what personal information is collected, used, shared, or sold; the right to delete; the right to opt out of "sale" or "sharing" of personal information; and the right to non-discrimination. Ethos Bio does not sell personal information. To exercise California rights, email privacy@ethosbioresearch.com or use our Do Not Sell / Share form.
12Updates
We may revise this policy from time to time. We will post a revised version at ethosbioresearch.com/privacy and, for material changes, notify registered researchers by email.
13Contact
Privacy questions: privacy@ethosbioresearch.com. Ethos Bio, LLC · Scottsdale, Arizona · United States.