Privacy Policy

We collect information you provide to us, information generated as you use our site and tools, and information we receive from the service providers that help us operate. Broadly, this includes:

• Account and contact details: such as name, email, phone, organisation or affiliation, and the research context you describe to us.
• Order and fulfilment details: such as shipping and billing information, items ordered, and batch or lot identifiers.
• Payment details: handled by our payment processor; we do not store full card numbers.
• Usage and device information: such as pages and products viewed, searches, filters, features and calculators used, session identifiers, approximate location derived from IP, device and browser characteristics, and referral or campaign parameters.
• Content you enter: including workspace entries, requests, form submissions, uploads, and messages to us or to our assistant.
• Information from partners: such as analytics, hosting, email, shipping, and payment providers, and other similar sources.

The specific fields we collect may change over time as we add or retire features.

We use information for purposes including:

• Operating, securing, and maintaining the site, accounts, and research tools.
• Verifying purchaser eligibility, processing orders, and maintaining supplier documentation.
• Providing certificates of analysis, notifications, and customer support.
• Understanding how our site and tools are used, and measuring demand, performance, and feature adoption.
• Improving, developing, and personalising our products, content, catalogue, and tooling.
• Producing aggregated or de-identified statistics and insights, which we may retain and use indefinitely.
• Sending service messages and, where permitted, updates and offers you can opt out of at any time.
• Detecting fraud, misuse, and violations of our terms, and complying with legal, tax, and record-keeping obligations.

We do not sell personal information, and we do not disclose it to third parties for their own independent advertising purposes.

We share information with service providers acting on our behalf — for example payment processors, shipping carriers, analytics and measurement platforms, communication and email providers, cloud hosting and infrastructure providers, and independent laboratories that issue certificates of analysis. Providers are engaged under terms that limit use of the information to the services they perform for us. Aggregated or de-identified information may be shared without restriction.

We may also share information in connection with a merger, financing, acquisition, or similar transaction, and we may disclose information when required by law, subpoena, or legitimate regulatory inquiry, or when necessary to protect the rights, property, or safety of Pure Helix or others.

We use cookies, local storage, session identifiers, and similar technologies to keep you signed in, remember cart contents and preferences, and measure how the site and tools are used. This includes first-party analytics and, where used, measurement services provided by partners. You may disable non-essential cookies in your browser; essential cookies (authentication, cart) are required for the site to function.

Upon a verified request, personal data is erased within thirty (30) days, except where retention is required by law, regulation, tax or supplier-documentation rules, or to establish, exercise, or defend legal claims. Where an exception applies, we retain only the minimum records necessary and delete the remainder within the same window.

Order and chain-of-custody records are retained for a minimum of seven (7) years to satisfy tax and supplier-documentation requirements. Account data is retained while the account is active and for a reasonable period thereafter. Usage and measurement records are retained for as long as they remain useful for operating and improving our services. Aggregated or de-identified information, which cannot reasonably be linked back to you, may be retained indefinitely. Residual copies in encrypted backups are purged on our normal backup rotation.

We use industry-standard technical and organizational safeguards including TLS in transit, encryption at rest for sensitive fields, access controls, and audit logging. No system is perfectly secure; we cannot guarantee that unauthorized access will never occur, and we encourage purchasers to use strong, unique passwords.

Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

California residents have specific rights under the CCPA/CPRA. Residents of the European Economic Area and the United Kingdom have rights under the GDPR/UK GDPR. We will honor verified requests regardless of residence, subject to legal record-retention requirements.

Pure Helix operates from the United States. If you access the site from outside the US, your information will be transferred to and processed in the US, which may have data-protection laws different from those of your jurisdiction.

The site and its products are not directed to individuals under 21. We do not knowingly collect information from minors. If you believe a minor has provided us information, contact us and we will delete it.

Questions about this policy or requests to exercise your rights can be sent to privacy@purehelix.bio. Include enough information for us to verify your identity before we act on a request.