Privacy Policy

This site is operated by Amino Plus Labs LLC, registered at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110 (“we”, “us”). For any question about this policy or about data we hold on you, contact help@aminopluslabs.com.

Information you give us when you order: name, email address, and shipping address. If you place an institutional or wholesale order, we also collect the company or institution name, a purchase order number where you supply one, and a tax-exemption certificate where you upload one.

Information about your order: the items, quantities, prices, order status, tracking number, and any notes or photographs we attach while packing it.

Account information if you create an account: your email address, and a record of orders linked to it. Sign-in uses a one-time link sent to your email rather than a stored password.

Information collected automatically: aggregate, privacy-preserving page analytics provided by Vercel Analytics, and product analytics provided by PostHog — which pages you visit and what you click, tied to an anonymous identifier for this browser rather than to your name or email unless you are signed in and take an action that links the two. Neither sets an advertising cookie, and neither shares data with advertisers or tracks you across other sites.

Session replays: we record how pages are used — where people click, scroll and move between pages — to find things that are confusing or broken. Replays are masked: every form field and all text on the page is hidden before it leaves your browser, so what you type, and what is on screen, is never recorded. That covers your name, address, email, and order details. Replays are not recorded in our administration area, and they are not linked to your name or email. We also build heatmaps, which show where on a page people click and how far they scroll. A heatmap is made of positions on the page, not of what the page says or what anyone typed, and it is not built from our administration area either.

Messages you send us through the support form, including anything you choose to put in them.

We do not collect or store card numbers. Card and crypto payments are handled by the processors named below, on their own systems.

We do not run advertising trackers, retargeting pixels, or third-party marketing cookies.

We do not buy personal data from data brokers, and we do not sell your personal data.

To take payment for, prepare, and ship your order, and to answer you when you ask about it. That includes checking that the address you give is one a parcel can actually be delivered to.

To send transactional email you have asked for: order confirmations, shipping notices, quotes and invoices, and one-time sign-in links.

To meet record-keeping obligations that apply to us, including tax and accounting records.

To understand in aggregate which pages are used, so the site can be improved.

Service providers who process data on our behalf, limited to what each needs to do its job:

· Vercel — website hosting and aggregate analytics.

· PostHog — product analytics, masked session replay and heatmaps (pageviews, clicks, scrolling and page layout, tied to an anonymous browser identifier).

· US Census Bureau — a free public geocoder we use to check that a shipping address exists. At checkout your street address, city, state and ZIP are sent from our server to the Census Bureau, without your name or email.

· Neon — the database holding orders and accounts.

· Resend — sending transactional email.

· Our payment processors — handling payment. They receive what they need to process the transaction, and we receive confirmation of it.

· Shipping carriers — the delivery address, so your order can be delivered.

We also disclose information where the law requires it, or to establish or defend a legal claim.

We do not share your information with advertisers.

We store a small amount of information in your own browser:

· Your cart contents, so they survive a page reload. This never leaves your browser.

· Your light or dark theme preference. This never leaves your browser.

· The fact that you have acknowledged the age and research-use gate, and dismissed the announcement bar, so you are not asked repeatedly. This never leaves your browser.

· An anonymous identifier used by our product analytics (PostHog), so that your pageviews, clicks and masked session replays on this site can be grouped together. Unlike the items above, this identifier is sent to PostHog attached to the pages you visit and the buttons you click — but not to your name, email, or order history unless you are separately signed in and something links the two.

None of this uses an advertising cookie, and none of it is shared with or sold to advertisers. A cookie in the ordinary sense is set only after you sign in, to keep you signed in. Clearing your browser data removes all of it.

Order and transaction records are retained for [RETENTION PERIOD, e.g. 7 YEARS] to meet tax and accounting requirements.

Account records are kept until you ask us to close the account, after which we retain only what the order records above require.

Support correspondence is kept for [SUPPORT RETENTION PERIOD].

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Where a deletion request conflicts with a record we are legally required to keep, we will tell you which record and why.

When an account is deleted — whether you do it yourself or ask us to — we keep one record of the deletion itself: the date, whether you or we actioned it, and how many orders were retained. Your email address is stored in that record only as a one-way hash, so the log can confirm that a particular address was deleted without holding a readable list of people who asked to be forgotten.

You can unsubscribe from any non-transactional email using the link in it. Transactional messages about an order you placed are not marketing and cannot be switched off while the order is open.

Depending on where you live, you may have additional rights under [APPLICABLE PRIVACY LAW, e.g. GDPR / UK GDPR / CCPA]. To exercise any of these, contact help@aminopluslabs.com. We respond within [RESPONSE WINDOW, e.g. 30 DAYS].

The site is served over HTTPS. Administrative access is password-protected and supports two-factor authentication. Payment card data never reaches our systems.

No system is perfectly secure. If a breach affects your personal data, we will notify you and any regulator we are required to notify, within the time limits that apply to us.

This site is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact help@aminopluslabs.com and we will delete it.

Our hosting and service providers may process data in the United States. Where data leaves your country, we rely on [TRANSFER MECHANISM, e.g. STANDARD CONTRACTUAL CLAUSES].

We will update this page when our practices change and revise the date at the top. Material changes will be announced on the site.