NutraBiotech LLC is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website or engage with our services.
NutraBiotech LLC ("NutraBiotech," "Company," "we," "us," "our") is committed to respecting and protecting your privacy. This Privacy Policy ("Policy") describes how we collect, use, disclose, store, transfer, and otherwise process personal information when you access or use our website located at www.nutrabiotechchem.com (the "Website"), including all related subdomains, mobile versions, and integrated services, as well as when you communicate with us via email, social media, telephone, or any other channel (collectively, the "Services").
This Policy applies to all users of the Website and Services, including but not limited to individual researchers, laboratory personnel, institutional purchasers, corporate clients, website visitors, and any other person whose personal information we process ("you," "your").
This Policy is incorporated into and forms an integral part of our Terms of Service. Capitalized terms not defined in this Policy shall have the meanings ascribed to them in the Terms of Service. In the event of any conflict or inconsistency between this Policy and the Terms of Service regarding privacy matters, this Policy shall prevail.
For purposes of this Policy, the following terms shall have the meanings set forth below:
We may collect the following categories of personal information, depending on your interactions with the Website and Services:
| Category | Examples | Source |
|---|---|---|
| Identifiers | Full name, email address, postal address, telephone number, company name, job title, account username, unique personal identifier, IP address | Directly from you; automatically via Website |
| Contact & Communication Data | Email correspondence, contact form submissions, inquiry content, live chat transcripts, telephone call records, social media direct messages | Directly from you |
| Transaction Data | Order history, product preferences, purchase amounts, payment method type (not full payment card numbers), billing and shipping addresses, invoice records | Directly from you; generated during transactions |
| Technical & Device Data | IP address, browser type and version, operating system, device type, screen resolution, referring/exit URLs, time zone setting, language preferences, Internet service provider (ISP) | Automatically via Website |
| Usage & Behavioral Data | Pages visited, time spent on pages, click patterns, scroll depth, search queries, products viewed, navigation paths, interaction with Website features, download activity | Automatically via Website; analytics providers |
| Account & Preference Data | Account credentials (hashed and salted), account settings, saved preferences, wishlist items, notification preferences, marketing consent status | Directly from you; generated during account use |
| Professional & Institutional Data | Institutional affiliation, laboratory name, research field, professional qualifications, regulatory certifications, purchasing authority documentation | Directly from you; institutional records |
| Compliance & Verification Data | Identity verification documents, export control end-use statements, age verification data, legal compliance records, sanctions screening results | Directly from you; third-party verification services |
You may provide personal information directly to us when you:
When you visit the Website, we and our authorized third-party service providers automatically collect certain technical and usage information using cookies, web beacons, pixel tags, log files, and similar tracking technologies. This includes:
While much of this information is not personally identifying on its own, it may become personally identifying when combined with other data we hold about you.
We may receive personal information about you from the following third-party sources:
We collect personal information through the following methods and channels:
When you voluntarily provide information through Website forms, account registration, order placement, email correspondence, telephone calls, social media interactions, or any other direct communication with us.
Through cookies, web beacons, server logs, and other tracking technologies when you browse the Website. For detailed information, see Section 7 (Cookies & Tracking Technologies).
From our service providers, business partners, and other third-party sources as described in Section 3.4. We require that any third party from whom we receive personal information has obtained appropriate consent or other lawful basis for sharing such information with us.
We may combine information we collect from different sources (e.g., information you actively provide with data collected automatically or from third parties) to create a unified profile. This combined data helps us provide more relevant communications, improve our Services, detect fraudulent activity, and fulfill our legal obligations.
Where data protection laws require a specific legal basis for processing personal information (including under the GDPR and UK GDPR), we rely on one or more of the following lawful bases:
| Legal Basis | Description |
|---|---|
| Consent | You have given clear, affirmative consent for us to process your personal information for a specific purpose (e.g., subscribing to marketing emails, accepting non-essential cookies). |
| Contractual Necessity | Processing is necessary for the performance of a contract with you (e.g., processing your order, delivering Products, managing your account) or to take steps at your request before entering into a contract. |
| Legal Obligation | Processing is necessary to comply with a legal or regulatory obligation to which NutraBiotech is subject (e.g., tax record-keeping, export control compliance, responding to lawful requests from public authorities). |
| Legitimate Interests | Processing is necessary for our legitimate business interests or those of a third party, provided your fundamental rights and freedoms do not override those interests. These interests include: improving and personalizing our Website and Services, conducting business analytics, preventing fraud and ensuring network security, marketing our Products to existing business customers, and enforcing our Terms of Service. |
| Vital Interests | Processing is necessary to protect the vital interests of you or another natural person (applicable only in emergency situations). |
In jurisdictions where specific legal bases are not mandated by statute, we collect and process your personal information based on principles of transparency, fairness, and reasonable necessity. We do not process personal information in jurisdictions where such processing would be unlawful.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, please contact us using the information in Section 22.
We collect, hold, use, and disclose your personal information for the following purposes:
We may aggregate, de-identify, or anonymize personal information so that it can no longer be linked to you or your device ("De-Identified Data"). De-Identified Data is not personal information and may be used for any lawful purpose, including but not limited to research, product development, statistical analysis, and publication, without notice or compensation to you. We undertake to maintain and use De-Identified Data in de-identified form and not to attempt to re-identify the data except as permitted by applicable law.
A cookie is a small text file placed on your device (computer, smartphone, tablet, or other electronic device) by a web server when you visit a website. Cookies cannot be used to run programs or deliver viruses to your device. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you. We also use similar tracking technologies such as web beacons (also known as tracking pixels, pixel tags, or clear GIFs), local storage objects (LSOs), and server logs to collect information about your interactions with the Website.
| Cookie Type | Purpose | Duration | Consent Required |
|---|---|---|---|
| Strictly Necessary | Essential for website operation. Enable core functionality such as security, network management, session management, shopping cart persistence, and accessibility. Without these cookies, the Website cannot function properly. | Session to persistent | No |
| Performance & Analytics | Collect anonymous, aggregated data about how visitors use the Website (pages visited, time on site, navigation paths, error encounters). Help us measure and improve Website performance and user experience. Examples: Google Analytics, server performance monitoring. | Session to 2 years | Yes |
| Functional | Remember choices you make to enhance your experience. Enable the Website to provide enhanced functionality and personalization such as remembering your language preference, region, login status, and previously viewed products. | Session to 1 year | Yes |
| Marketing & Advertising | Track your browsing habits across websites to deliver advertising that is more relevant to you and your interests. Measure the effectiveness of advertising campaigns. May be set by third-party advertising networks with our permission. | Up to 2 years | Yes |
| Social Media | Enable sharing of content on social media platforms and track interactions with embedded social media features. Set by third-party social media services (e.g., Facebook, Twitter, Instagram, YouTube) when you interact with their widgets on our Website. | Varies by platform | Yes |
Some cookies on our Website are placed by third-party service providers whose services we have integrated. These third parties may use cookies, web beacons, and similar technologies to collect information about your online activities over time and across different websites. NutraBiotech does not control these third-party cookies and is not responsible for their operation. The collection, use, and disclosure of information by these third parties are governed by their respective privacy policies, which we encourage you to review. Third-party services integrated into our Website may include:
You have several options to manage or disable cookies:
In addition to cookies, we may use web beacons (small transparent graphic images embedded in web pages or HTML emails), embedded scripts, and similar technologies to: (a) count users who have visited specific pages; (b) deliver or communicate with cookies; (c) understand usage patterns; (d) track email open rates and click-through rates; and (e) measure the effectiveness of marketing campaigns.
We may share your personal information with trusted third-party service providers who perform services on our behalf and under our instructions. These providers are contractually bound to: (a) process personal information solely in accordance with our documented instructions; (b) implement appropriate technical and organizational security measures; (c) not use personal information for their own purposes; and (d) not disclose personal information to other parties without our authorization.
Categories of service providers we may engage include:
We may share personal information with our parent company, subsidiaries, affiliates, and related entities for purposes consistent with this Policy. All such entities are required to comply with the terms of this Policy in their handling of personal information.
We may disclose your personal information if we believe in good faith that such disclosure is necessary to:
With your consent where required by law, we may share personal information with carefully selected business partners for co-marketing initiatives, joint webinars, collaborative research, or other mutually beneficial business activities. You will be informed of such sharing at the point of data collection and given the opportunity to opt out.
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with any third party for any purpose, including research, publication, industry analysis, and marketing.
As stated in Section 6.2, NutraBiotech does not sell personal information to third parties. We do not and will not sell personal information as defined under the CCPA, CPRA, or any similar state or international privacy law. We do not have actual knowledge that we sell the personal information of consumers under 18 years of age.
We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, as described in this Policy, or as required or permitted by applicable law. The specific retention period for each category of data depends on the nature of the data, the purpose of processing, and any legal or regulatory obligations that require us to retain the data for a specified period.
| Data Category | Typical Retention Period | Basis for Retention |
|---|---|---|
| Account Information | Duration of account + 2 years after account closure or last activity | Service provision; legal claims defense; reactivation convenience |
| Transaction & Order Records | 7 years from transaction date | Tax and accounting compliance; warranty fulfillment; legal claims defense |
| Communication Records | 3 years from last communication | Service continuity; dispute resolution; business record-keeping |
| Marketing Consents & Preferences | Duration of consent + 2 years after withdrawal | Regulatory compliance; consent audit trail |
| Website Logs & Analytics | 26 months from collection | Business analytics; security; performance optimization |
| Identity Verification Documents | Duration of account + 5 years | Regulatory compliance; fraud prevention |
When personal information is no longer required for the purposes for which it was collected, we will take reasonable steps to securely delete, destroy, or permanently anonymize it. Anonymized data may be retained indefinitely for research, statistical, and business analysis purposes, as it no longer constitutes personal information.
We implement and maintain commercially reasonable administrative, technical, and physical security measures designed to protect the personal information we collect and process against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, access, or use. These measures include but are not limited to:
You are responsible for:
NutraBiotech shall not be liable for any loss, damage, or unauthorized access arising from your failure to fulfill these security responsibilities.
NutraBiotech does not store complete credit card numbers, CVV codes, or full financial account credentials on our servers. All payment transactions are processed by PCI-DSS compliant third-party payment processors through encrypted connections. The security of your payment information during processing is governed by the respective payment processor's security policies.
NutraBiotech is headquartered in the United States. The personal information we collect may be stored, processed, and transferred to facilities located in the United States and other countries where we, our affiliates, or our service providers maintain operations. These countries may have data protection laws that differ from — and may be less protective than — the laws of the country in which you reside.
When we transfer personal information across international borders, we implement appropriate safeguards in accordance with applicable data protection laws, including:
By using the Website and providing personal information to us, you acknowledge and consent to the transfer, storage, and processing of your personal information in the United States and other countries as described in this Policy. If you do not consent to such international transfers, you must not use the Website or provide personal information.
Depending on your jurisdiction of residence, you may have certain rights regarding your personal information. This section provides a general overview of the rights that may be available to you. Specific rights for EEA/UK residents are detailed in Section 13. Specific rights for California residents are detailed in Section 14.
| Right | Description |
|---|---|
| Right to Know / Access | You may request access to the personal information we hold about you, including details about the categories of data, purposes of processing, and third parties with whom we share it. |
| Right to Rectification | You may request correction of inaccurate, incomplete, or outdated personal information we hold about you. |
| Right to Erasure / Deletion | You may request deletion of your personal information, subject to certain exceptions (e.g., legal retention obligations, pending disputes). |
| Right to Restrict Processing | You may request restriction of processing in certain circumstances (e.g., contesting accuracy, unlawful processing). |
| Right to Data Portability | You may request a copy of your personal information in a structured, commonly used, machine-readable format and, where technically feasible, request its transfer to another controller. |
| Right to Object | You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds. |
| Right to Withdraw Consent | Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your privacy rights (e.g., by denying services, charging different prices, or providing a different level of quality). |
To exercise any of the rights described above, please submit a verifiable request by contacting us using the information in Section 22. We may need to verify your identity before processing your request, which may require you to provide additional information (such as name, email address, and proof of identity). We will respond to your request within the timeframes required by applicable law, typically within 30 to 45 calendar days.
You may designate an authorized agent to submit a privacy rights request on your behalf. We will require: (a) written proof of the agent's authorization, signed by you; and (b) direct verification of your identity with us. We may deny requests from agents who do not provide adequate proof of authorization.
This section applies if you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, and supplements the general provisions of this Policy with information specific to the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection (FADP).
For the purposes of the GDPR and UK GDPR, the Data Controller is:
As detailed in Section 5, we process your personal data on the following legal bases: consent, contractual necessity, legal obligation, and legitimate interests. Where we rely on legitimate interests, we have conducted a Legitimate Interests Assessment (LIA) and concluded that our interests do not override your fundamental rights and freedoms.
In addition to the rights described in Section 12, EEA and UK residents have the following specific rights under GDPR:
As described in Section 11, personal data from the EEA and UK is transferred to and stored in the United States. We ensure adequate protection for such transfers through European Commission-approved Standard Contractual Clauses (SCCs), supplemented by technical and organizational measures as appropriate. A copy of the relevant SCCs may be requested by contacting us.
To the extent required by UK GDPR, we may appoint a UK representative for data protection matters. Current representative contact details can be obtained by emailing privacy@nutrabiotechchem.com.
This section applies solely to residents of the State of California, United States ("California Consumers"), and supplements the general provisions of this Policy as required by the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and any implementing regulations ("California Privacy Laws").
In the preceding twelve (12) months, we have collected the following categories of personal information about California Consumers and disclosed them for business purposes to the categories of third parties listed below:
| Category (CCPA) | Collected? | Disclosed for Business Purposes To | Sold or Shared? |
|---|---|---|---|
| Identifiers (name, email, IP, etc.) | Yes | Service providers, payment processors, shipping carriers | No |
| Personal information categories (Cal. Civ. Code 1798.80(e)) | Yes | Service providers | No |
| Commercial information (transaction records) | Yes | Service providers, payment processors, shipping carriers | No |
| Internet or electronic network activity | Yes | Analytics providers, advertising partners | No |
| Geolocation data (city/country level) | Yes | Analytics providers | No |
| Professional or employment-related information | Yes | Service providers | No |
| Inferences from personal information | Yes | Service providers | No |
We disclose each of the above categories of personal information to our service providers, contractors, and third parties for the business purposes described in Section 6 of this Policy. These purposes include: auditing, security, debugging, short-term transient use, performing services on our behalf, internal research, and quality/safety verification.
As stated throughout this Policy, NutraBiotech does not sell personal information as defined under California Privacy Laws. We also do not share personal information for cross-context behavioral advertising purposes. We do not have actual knowledge that we sell or share the personal information of consumers under 18 years of age.
California Consumers have the following specific rights under California Privacy Laws:
To exercise your CCPA/CPRA rights, please contact us using one of the following methods:
We will verify your identity before processing your request. Verification may involve matching at least two pieces of information you provide with information we maintain about you. We will respond within 45 calendar days (extendable by an additional 45 days with notice). If we cannot verify your identity, we may deny the request or request additional information.
NutraBiotech does not offer financial incentives or price or service differences in exchange for the retention or sale of personal information.
Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents may request, once per calendar year, information regarding our disclosure of personal information to third parties for their direct marketing purposes. As we do not disclose personal information to third parties for their direct marketing purposes, this provision is not applicable.
Our Website and Services are not directed to, designed for, or intended to attract individuals under the age of eighteen (18). We do not knowingly collect, solicit, or process personal information from anyone under the age of 18. If you are under 18, you are expressly prohibited from using the Website, creating an account, submitting personal information, or purchasing any Products.
If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to us without your consent, please contact us immediately using the information in Section 22. Upon verification, we will take reasonable steps to promptly delete such information from our records. We will also terminate any account we determine to have been created by an underage user.
NutraBiotech does not sell, and has no actual knowledge of selling, the personal information of consumers under 18 years of age.
With your consent where required by law, we may send you marketing emails about our Products, promotions, news, events, and other information that we believe may be of interest to you. You may opt in to receive such communications during account registration, checkout, or through dedicated subscription forms on our Website.
You may opt out of receiving marketing communications from us at any time by:
We will process your opt-out request promptly, typically within ten (10) Business Days. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative emails related to your account, Orders, or our ongoing business relationship (e.g., order confirmations, shipping notifications, account security alerts, changes to legal terms). You cannot opt out of these essential communications while maintaining an active account or outstanding Orders.
We do not share your personal information with unaffiliated third parties for their independent marketing purposes without your explicit, opt-in consent.
Some web browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites indicating the user's preference not to be tracked across websites over time. At this time, the Website does not respond to DNT signals. This is because there is no consistent, widely adopted industry or legal standard for interpreting or responding to DNT signals.
We continue to monitor developments in DNT technology and regulatory guidance and may implement a DNT response policy in the future. In the meantime, you can exercise control over tracking through the cookie management options described in Section 7.4.
In the event that NutraBiotech, or substantially all of its assets, is acquired by, merged with, or otherwise transferred to another entity — whether by merger, acquisition, reorganization, consolidation, bankruptcy, dissolution, sale of assets, or similar transaction — the personal information we hold may be among the assets transferred to the successor or acquiring entity.
You acknowledge and consent that such transfers may occur and that the successor or acquiring entity may continue to use your personal information as described in this Policy, or under a new privacy policy of the successor entity consistent with applicable law. We will use reasonable efforts to ensure that any acquirer is contractually obligated to honor the commitments in this Policy and provide notice before personal information is processed for materially different purposes.
If the transfer results in a materially different use of your personal information not covered by this Policy, we will notify you and, where required by law, obtain your consent before such use occurs.
Our Website may contain links to external websites, platforms, and services that are not owned, operated, or controlled by NutraBiotech. This Policy applies solely to information collected by NutraBiotech through the Website and our Services. It does not apply to any third-party website, service, or application, even if linked from our Website.
We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We strongly encourage you to review the privacy policy of every website you visit before providing any personal information. The inclusion of a link on our Website does not imply endorsement, sponsorship, or affiliation with the linked site.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
Notwithstanding the above, NutraBiotech reserves the right to delay notification where: (a) a law enforcement or regulatory authority determines that notification would impede a criminal investigation or cause damage to national security; or (b) notification is not required by applicable law.
NutraBiotech reserves the right, in its sole discretion, to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, operational requirements, or for any other reason. The most current version of this Policy will always be posted on this page, identified by the "Last Updated" date.
For material changes to this Policy, we will provide reasonable notice through one or more of the following methods, at our discretion:
It is your responsibility to periodically review this Policy for any changes. Your continued use of the Website following the posting of any revised Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you must immediately discontinue all use of the Website and Services and may request deletion of your account and personal information in accordance with Section 12.
Where required by applicable law, we will obtain your affirmative consent before applying material changes to processing activities for which we previously obtained your consent.
For any questions, concerns, requests, or complaints regarding this Privacy Policy or our data protection practices, please contact us using the information below. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.
We will use reasonable efforts to acknowledge receipt of your inquiry within five (5) Business Days and to provide a substantive response within the timeframe required by applicable law, generally within thirty (30) calendar days. Complex requests may require additional time, in which case we will inform you of the delay and the reason for it.
If you are located in the EEA, UK, or another jurisdiction with a data protection supervisory authority, you have the right to lodge a complaint with that authority if you believe our processing of your personal data infringes applicable data protection law. We encourage you to contact us first so we can attempt to resolve your concern directly.