Privacy Policy

Cryonic Labs LLC ("Cryonic Labs", "we", "us") operates cryoniclabs.com and sells laboratory research chemicals to qualified purchasers aged 21 or older. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

If you have any privacy question or request, contact us through our contact page and we will respond within 30 days.

Information you give us: name, email address, phone number, billing and shipping address, order contents, bulk-order request details, messages you send us, and the age (21+) and research-use acknowledgments you submit before checkout.

Payment information: card and payment details are collected and processed directly by our payment processor (Shopify Payments and the card networks). We never receive or store your full card number, CVV or bank credentials.

Automatically collected information: IP address, browser and device type, user agent, pages viewed, referring page, and interactions such as add-to-cart, checkout started, purchase, and Certificate of Analysis (COA) views. These are used for security, fraud prevention and store analytics.

We do not knowingly collect information from anyone under 21, and we do not sell to minors.

To process, fulfill, ship and support your orders, including order status lookups, receipts and shipping notifications.

To keep a compliance record of your 21+ and research-use-only acknowledgment, including the exact wording shown, the terms version, the timestamp and your browser user agent. We retain these records as evidence that the sale was made on research-use terms.

To prevent, detect and investigate fraud, chargebacks, abuse and prohibited use; to enforce our Terms of Use; and to comply with legal, tax and regulatory obligations.

To improve the store: measuring which products, pages and COAs are viewed, and how orders complete.

To reply to your messages and bulk-order requests, and — only if you opt in — to send marketing email. You can unsubscribe from marketing at any time using the link in any marketing message.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (processing your order); legitimate interests (fraud prevention, security, product analytics, compliance recordkeeping); legal obligation (tax, accounting, regulatory requests); and consent (optional marketing and non-essential cookies), which you may withdraw at any time.

Service providers who process data on our behalf and only under contract: our e-commerce and payments platform (Shopify), our hosting and database provider, email delivery providers, and shipping carriers.

Legal and safety recipients: law enforcement, regulators, or other parties where disclosure is required by law, subpoena, or court order, or is reasonably necessary to protect our rights, prevent fraud, or protect the safety of any person.

Business transfers: if Cryonic Labs is involved in a merger, acquisition or sale of assets, customer information may be transferred as part of that transaction.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We use strictly necessary cookies and local storage to keep your cart, session and legal acknowledgment working, plus first-party analytics to measure store performance. See our Cookie Policy for details and how to control cookies in your browser.

We honor Global Privacy Control (GPC) and "Do Not Track" signals where technically feasible for non-essential tracking.

Order, payment and tax records: retained as long as required by applicable tax and accounting law (generally 7 years).

Age and research-use acknowledgment records: retained for the life of the business relationship plus the applicable limitations period, because they evidence lawful research-use sales.

Analytics and event data: retained in aggregate; identifiable event data is retained no longer than needed for fraud prevention and reporting.

Contact and bulk-order messages: retained until resolved plus a reasonable follow-up period.

The site is served over TLS/HTTPS. Customer data is stored in access-controlled databases with row-level security, administrative access requires authentication, and payment data is handled solely by a PCI-DSS compliant processor.

No method of transmission or storage is completely secure. If a breach affecting your personal information occurs, we will notify you and any required authority as the law requires.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to opt out of marketing; to opt out of sale or targeted advertising (we do neither); and to appeal a denied request.

California residents (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas and other US state residents, and EEA/UK/Swiss residents may exercise these rights by contacting us. We will not discriminate against you for making a request, and we may need to verify your identity before acting.

You may also lodge a complaint with your local data protection authority.

We operate in the United States and our providers may process data in the US and other countries. Where required, transfers out of the EEA/UK rely on the European Commission's Standard Contractual Clauses or another approved mechanism.

This site is not directed to children. You must be 21 or older to purchase. If we learn we have collected information from a person under 18, we will delete it.

We may update this policy. Material changes will be posted on this page with a new "last updated" date, and where required we will notify you or request fresh consent.