Privacy
What is collected, what is not, and how long it is kept. Last updated 24 September 2026.
- When you order
- Name, email, shipping address, phone for the carrier, the items ordered, the payment method chosen, your confirmation that the order is for research and that you are 21 or over, the IP address and browser the order came from, and the time. Kept for seven years, because an order record is a tax record.
- When you write to us
- Name, email, institution if given, the topic and the message, the IP address it came from and the time. Kept for two years or until the matter is closed, whichever is later.
- The age gate
- Your confirmation is stored in your own browser for 30 days. It is not sent to us.
- Your cart
- Stored in your own browser until you clear it or place the order. It is not sent to us until checkout.
- Accounts
- If you sign in, we store your email address, your name if you give one, the Google account identifier if you used Google, when you signed in, the date you confirmed you are 21 and buying for research, and a session record for each browser you signed in from. Sign-in codes are stored hashed and expire in ten minutes. There are no passwords. Sign out everywhere from the account page ends every session at once.
- Google sign-in
- Choosing Continue with Google sends you to Google, which tells us your verified email address, your name and a stable account identifier. We do not receive your Google password or anything else in your Google account.
- Email list
- We keep every email address given to us through a form, an account or an order, with where it came from, so we can answer you and keep order records. We only send marketing email (new compounds, restocks and offers) to addresses that ticked or submitted a box saying so, and we record the wording and the date you agreed. Those addresses are also held by Brevo, the email service that sends our mail. Every marketing email has an unsubscribe link, and unsubscribing never stops emails about an order you placed.
- Email we send
- Order confirmations, replies and the interest-list announcement go out through Brevo. Brevo processes the address to deliver the mail and holds it under its own privacy policy for that purpose only.
- Analytics
- None at present. No advertising pixels, no third-party trackers, no fingerprinting. If that changes this page changes first.
- Cookies
- None set by us. The age confirmation and the cart use browser storage on your device, not cookies, and neither leaves it.
Who is responsible for your information
SB'z Industries LLC
A California limited liability company.
Who sees it
Order and message records are stored in a database run on Cloudflare's infrastructure in the United States and are read by the people who fulfil orders and answer messages, and by nobody else. Payment details are handled by the payment provider you choose at checkout under that provider's own policy; we do not receive or store card numbers.
We do not sell, rent, share or trade personal information with anyone. We disclose it only where the law requires us to, and we tell you if we are allowed to.
Carriers
Your name, address and phone number are given to the carrier to deliver the parcel. That is the only routine transfer of your information to a third party, and the carrier's own policy governs what they do with it.
We email order confirmations, tracking and replies to your messages. The checkout offers one optional box to hear about new compounds, restocks and offers. It is unticked by default, and every one of those emails has an unsubscribe link.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, through the contact page. We will do it unless a record has to be kept by law, in which case we will tell you which record and why. California residents have the rights set out in the CCPA and CPRA and can exercise them the same way; we do not sell personal information, so there is nothing to opt out of.
Children
This site is for adults 21 and over. We do not knowingly collect information from anyone under that age, and an order that turns out to have been placed by a minor is cancelled and its record deleted.
Changes
The date at the top of this page is the date of the current version. If what we collect changes, this page changes before the site does.
Elsewhere