Privacy Policy

01Who we are

PowerBuiltLabs operates this store and is the controller of the personal information described in this policy. For any privacy matter, contact support@powerbuiltlabs.com with the subject "Privacy request".

02Information we collect

• Identity and contact data — name, email address, shipping and billing address, and phone number if you provide it.
• Order data — products purchased, lot numbers shipped, order value, currency, and delivery status.
• Account data — login credentials (passwords are stored hashed) and saved addresses, if you create an account.
• Payment data — handled entirely by our payment providers; we receive confirmation of payment and the last digits of the card only, never full card numbers.
• Support data — the contents of emails and claims you send us, including photos submitted with shipping-protection claims.
• Technical data — IP address, device and browser type, pages viewed, and referring pages, collected through server logs and basic analytics.
• Marketing data — your newsletter subscription status and, if subscribed, engagement with our emails.

03What we use it for

• Fulfilling orders — processing payment, shipping, and delivery updates (performance of a contract).
• Lot traceability — keeping a record of which lots shipped to which orders, which is essential to how our certificate system works (legitimate interest and legal obligation).
• Support and claims — answering questions and resolving shipping-protection claims (performance of a contract).
• Age and qualification checks — enforcing our 21+ and research-use-only purchasing conditions (legal obligation and legitimate interest).
• Fraud prevention — screening orders for payment fraud (legitimate interest).
• Newsletter — only if you subscribe, and you can leave with one click (consent).
• Store improvement — aggregate analytics about how the site is used (legitimate interest).

04What we do not do

05Who we share data with

Only service providers necessary to run the store, each receiving the minimum needed for its role:

• Payment processors, to take payment and screen for fraud.
• Shipping carriers, who receive your name, address, and contact details to deliver parcels.
• Our e-commerce platform and hosting providers, which store order and account records.
• Our email provider, to send transactional emails and — if subscribed — the newsletter.
• Authorities, only where the law requires disclosure.

06Cookies

We use a small set of cookies: strictly necessary cookies for the cart, region selection, and login sessions, and basic analytics cookies to understand site usage. We do not run third-party advertising cookies. You can clear or block cookies in your browser; the cart and checkout require the necessary ones to function.

07Retention

• Order and lot-traceability records — kept for as long as we publish certificates for the lots involved, and as required for tax and accounting law.
• Account data — kept until you delete your account or ask us to.
• Support threads — kept for two years after the last message.
• Technical logs — kept for 12 months.
• Newsletter data — kept until you unsubscribe.

08Security

All traffic to the site is encrypted in transit. Access to personal data is restricted to staff who need it for their role, payment credentials never touch our systems, and passwords are stored hashed. No system is perfectly secure, but we design so that a breach of any single system exposes as little as possible.

09Your rights

Depending on where you live (including under the GDPR for our European customers), you have the right to:

• Access — receive a copy of the personal data we hold about you.
• Correction — have inaccurate data corrected.
• Deletion — have data deleted where we have no legal duty to retain it.
• Portability — receive your data in a machine-readable format.
• Objection and restriction — object to or restrict processing based on legitimate interests.
• Withdraw consent — for anything based on consent, such as the newsletter, at any time.
• Opt out of sale or sharing — we don't sell or share data for advertising, and we record the request regardless.
• Complain — to your local data-protection authority.

To exercise any of these, email support@powerbuiltlabs.com with the subject "Privacy request". We verify requests against the order or account email and respond within 30 days.

10International transfers

Some of our service providers process data outside your country. Where that happens, transfers rely on recognized safeguards such as standard contractual clauses.

11Changes to this policy

When we change this policy we update the date at the top of this page; material changes will be flagged on the site or by email to account holders. The current version always lives at this URL.