Privacy notice

Two categories, and nothing beyond what an order needs.

Identifiers and business-contact information you give us: name, work email, phone, job role, organisation, organisation website, and business address. These come from an account application, an order request, or an email you send us.

Commercial information: the materials you asked about, the contents of an order request, quotations issued, and the correspondence around them.

What we do not collect: no payment card or bank details (no payment processing is connected to this site), no government identifiers, no biometric or precise-geolocation data, and no special-category data. We do not knowingly collect information from anyone under 18; this is a business-to-business site and is not directed to children.

The cart is held in your own browser’s local storage. It is not transmitted to us and not associated with an account until you submit an order request. Clearing your browser storage clears the cart, and we cannot recover it.

This site sets no advertising, tracking, or profiling cookies. See the cookie notice for the full list of what is stored.

• To qualify an account and decide whether we can lawfully supply you.
• To quote, process, and fulfil an order request, and to issue documentation.
• To answer a technical, documentation, or quality question you asked.
• To keep the records that supply of these materials requires us to keep.
• To secure the site and prevent abuse.

We do not use your information to build a profile, to score you, or to make an automated decision that has a legal or similarly significant effect. Account qualification decisions are made by a person.

Northlake Peptide Laboratories, Inc. does not sell personal information, and does not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA. We have not done so in the preceding twelve months.

Because there is nothing to opt out of, there is no “Do Not Sell or Share My Personal Information” mechanism on this site. If that ever changes, the link will appear in the site footer and this section will be rewritten before it does — not after.

Service providers, under contract, only as needed to run the business: site hosting, business email, and carriers for shipping. Each is bound to use the information only to perform its service for us.

We may disclose information where legally required, to establish or defend a legal claim, or in connection with a sale of the business — in which case the successor is bound by this notice for information collected under it.

No advertising network, data broker, or analytics profile-builder receives your data.

• Account and qualification records: for the life of the account and for as long afterwards as supply records must be kept.
• Order and shipping records: for the period applicable tax and supply record-keeping requires.
• Lot and documentation records: retained on a product-traceability basis rather than a personal one; a certificate can be re-issued long after an order.
• Correspondence: deleted when it is no longer needed to answer or defend the matter it concerns.

Specific retention periods are set by counsel per record type and stated here once fixed. Publishing a precise figure now would be a commitment nobody has checked.

If you are a California resident, you have the right to:

• know what personal information we have collected, used, and disclosed;
• access a copy of it in a portable form;
• correct inaccurate personal information;
• delete personal information, subject to record-keeping obligations;
• limit the use of sensitive personal information — we collect none;
• opt out of sale or sharing — we do neither (section 4);
• not be discriminated against for exercising any of these rights.

Residents of other states with comprehensive privacy laws have substantially similar rights, and we apply the same process to all requests rather than gating it by residency.

Email support@northlakebio.examplewith the subject line “Privacy request”, telling us which right you are exercising and the email address you dealt with us under. We will verify the request against information we already hold — we will not ask you to send identity documents by email.

We respond within 45 days, extendable once by a further 45 days where the request is complex, and will tell you if we need the extension. An authorised agent may act for you with written permission we can verify.

If you are unhappy with the outcome you may appeal by replying to our response, and you may complain to your state Attorney General.

The site is served over HTTPS. Access to account and order records is limited to staff who need it. No payment credentials are collected anywhere on this site, which removes the most sensitive category of data from the system entirely.

Do not send passwords, card numbers, or sensitive personal information by email — to us or to anyone. Our forms never ask for them, and any message that appears to be from us asking for a password is not from us.

The effective date at the top of this page states when the current version took effect. Material changes will be described here rather than made silently.