Privacy Policy

1. Who We Are

G3 Bioscience & Research ("G3," "we," "us," or "our") is a California-based company that operates the website at g3research.com and related subdomains. We are the data controller for all personal information collected through this site. For privacy-related inquiries, contact us at: privacy@g3research.com.

2. Information We Collect

2a. Information You Provide Directly

• Account & Order Information: Name, email address, shipping address, billing address, and phone number when you place an order or create an account.
• Payment Information: We do not store credit card numbers. Payment data is processed by our PCI-DSS compliant payment processor and is not retained on our servers.
• Age Verification: We collect a confirmation that you are 21 years of age or older, stored locally in your browser. We do not collect or retain government-issued ID data.
• Email Subscriptions: If you subscribe to our Field Notes newsletter, we store your email address for that purpose only.
• Communications: If you contact us by email or through a contact form, we retain the content of your message and your contact details to respond and keep records.

2b. Information Collected Automatically

• Log Data: IP address, browser type, operating system, referring URLs, pages visited, and time/date of visit.
• Cookies & Local Storage: Session management, cart persistence, age verification status, and popup dismissal preferences. See Section 5 for full cookie details.
• Device Information: Device type, screen resolution, and browser version for compatibility purposes.
• Analytics: Aggregated, anonymized usage statistics via privacy-respecting analytics tools to understand how visitors interact with our site.

2c. Information from Third Parties

• Shipping carriers may provide delivery confirmation and tracking updates.
• Payment processors may share transaction status and fraud-screening signals.

3. How We Use Your Information

• Order fulfillment: Process, pack, and ship your order and send order confirmations and tracking information.
• Customer service: Respond to questions, handle returns, resolve disputes.
• Legal compliance: Maintain records required by applicable law, including sales records and age verification logs.
• Fraud prevention: Detect and block fraudulent transactions, unauthorized access, and policy abuse.
• Site improvement: Analyze aggregated traffic patterns to improve navigation, content, and performance.
• Marketing (with consent only): If you opt in, we send the Field Notes email newsletter. You may unsubscribe at any time via the link in every email.
• Research compliance: Verify that purchasers have acknowledged the research-use-only nature of our products.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you without human review.

4. Legal Bases for Processing (GDPR)

For users in the European Economic Area, UK, or Switzerland, we rely on the following legal bases:

• Contract performance: Processing necessary to fulfill your purchase order.
• Legal obligation: Retaining records as required by tax, financial, and regulatory law.
• Legitimate interests: Fraud prevention, site security, and product improvement, balanced against your privacy rights.
• Consent: Email marketing (withdrawable at any time without affecting prior processing).

5. Cookies & Local Storage

We use the following cookies and browser storage mechanisms:

• Strictly Necessary: Cart contents, session authentication, CSRF tokens. Cannot be disabled without breaking core functionality.
• Preference: Age verification status (g3_age_verified), popup dismissal (g3_email_popup_dismissed), disclaimer bar status. Stored in localStorage; expire when you clear browser data.
• Analytics: Anonymized page-view and session data to measure site performance. No cross-site tracking. You may opt out via your browser's Do Not Track setting or our cookie preference banner.

You can configure your browser to reject cookies or alert you when cookies are being set. Disabling strictly necessary cookies will impair checkout functionality.

6. Sharing of Your Information

We do not sell, rent, or trade your personal information. We share data only as follows:

• Shipping partners: Name and shipping address shared with carriers (e.g., USPS, UPS, FedEx) solely for delivery.
• Payment processors: Transaction data handled by PCI-DSS compliant processors under contractual data protection obligations.
• Email service providers: Email address shared with our newsletter platform under a data processing agreement, used only for communications you have authorized.
• Legal authorities: If required by law, court order, or to protect the rights, property, or safety of G3, its customers, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may transfer to a successor entity subject to equivalent privacy protections.

7. Data Retention

• Order records: Retained for 7 years to comply with tax and financial recordkeeping obligations.
• Customer accounts: Retained while your account is active; deleted within 30 days of a verified deletion request, subject to legal hold obligations.
• Email newsletter: Retained until you unsubscribe; removed from send lists within 10 business days of unsubscribe request.
• Analytics data: Aggregated and anonymized; individual session data purged within 90 days.
• Contact messages: Retained for 2 years for customer service continuity.

8. Your Rights

All Users

• Unsubscribe from marketing emails at any time via the link in any email.
• Request a copy of the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal data, subject to legal retention requirements.

California Residents (CCPA/CPRA)

G3 Bioscience & Research is a California-based business and complies fully with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). As a California business, G3 extends these rights to all California residents:

• Right to Know: Know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• Right to Delete: Request deletion of your personal information, subject to legal retention obligations.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may request confirmation at any time.
• Right to Limit Sensitive Personal Information: Limit our use of sensitive personal information to purposes necessary to provide services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA right.

To submit a CCPA/CPRA request, email privacy@g3research.com with subject line "CCPA Request." We respond within 45 days (extendable by an additional 45 days with notice).

EEA / UK / Swiss Residents (GDPR)

In addition to the rights above, you have the right to: data portability; restrict or object to processing based on legitimate interests; lodge a complaint with your local supervisory authority. To exercise these rights, contact privacy@g3research.com. We respond within 30 days.

9. Data Security

We implement industry-standard technical and organizational measures including TLS/HTTPS encryption in transit, encrypted storage for sensitive fields, access controls limiting data to staff with a need to know, and regular security reviews. No transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take every reasonable precaution.

10. Children's Privacy

Our site is intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we become aware that a minor has provided us personal information, we will delete it promptly. If you believe we have inadvertently collected data from a minor, contact privacy@g3research.com immediately.

11. International Data Transfers

G3 is based in California, United States. If you access our site from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country. By using our site, you consent to this transfer. For EEA users, transfers are governed by the European Commission's Standard Contractual Clauses (Decision 2021/914/EU). For UK users, transfers are made pursuant to the International Data Transfer Addendum (IDTA) issued by the UK Information Commissioner's Office, or equivalent safeguards recognized under UK GDPR.

12. Third-Party Links

Our site may link to third-party websites (e.g., shipping tracking portals, payment gateways). We are not responsible for the privacy practices of those sites. Review their policies before providing personal information.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via a banner on our homepage or by email to subscribed users at least 14 days before they take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our site after changes are effective constitutes your acceptance.

14. Contact Us

For any privacy-related questions, requests, or concerns:

• Email: privacy@g3research.com
• Mail: G3 Bioscience & Research, Attn: Privacy, California, United States

We aim to respond to all privacy requests within 5–10 business days.