[LEGAL ENTITY NAME] ("Summit Labs," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect
Information you provide directly:
- Account information: name, email, phone number, organization, researcher role
- Order information: shipping address, order history, products purchased
- Communications: messages you send to support, form submissions
- Age/eligibility confirmation and research-use acknowledgment (see Research Use Only Notice)
Information collected automatically:
- Device and usage data: IP address, browser type, pages viewed, referring URLs
- Cookies and similar technologies used for cart functionality, login sessions, and analytics
- Advertising identifiers via pixels (Meta/Facebook Pixel, TikTok Pixel) used to measure ad performance and build audiences for our own marketing
Information we do not collect or store:
- Full payment card numbers — payment is processed by our third-party payment processor, which handles and stores card data under its own security standards (e.g., PCI-DSS)
2. How We Use Information
We use the information we collect to:
- Process and fulfill orders, including shipping and customer service
- Create and manage your account
- Verify age and researcher eligibility
- Send transactional communications (order confirmations, shipping updates)
- Send marketing emails or SMS, but only if you have opted in — you may opt out at any time (see Section 6)
- Improve the Site and understand how it's used
- Measure and optimize advertising through Meta and TikTok pixels
- Detect and prevent fraud, abuse, or violations of our Terms of Service
- Comply with legal obligations, including recordkeeping related to age/research-use attestations
3. How We Share Information
We share information only with:
- Service providers who perform functions on our behalf, including payment processing, order fulfillment and shipping labels, transactional email delivery, and SMS delivery. These providers are contractually restricted from using your data for any purpose other than providing services to us.
- Advertising partners (Meta, TikTok) via pixel technology, in accordance with their own privacy policies and your cookie/ad preferences.
- Legal and safety purposes: if required by law, subpoena, or legal process, or to protect the rights, property, or safety of Summit Labs, our customers, or the public.
- Business transfers: if Summit Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We do not sell your personal information for monetary consideration.
4. Cookies
We use cookies and similar technologies to keep you logged in, remember your cart, and measure Site performance and advertising effectiveness. You can control cookies through your browser settings; disabling cookies may affect Site functionality such as your ability to check out.
5. Data Retention
We retain account and order information for as long as your account is active and as needed to comply with legal, tax, and recordkeeping obligations, including age/research-use attestation records. We retain this information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy and to comply with applicable legal and regulatory requirements.
6. Your Choices and Rights
- Marketing opt-out: unsubscribe from marketing emails via the link in any email, or reply STOP to any marketing text message. You will still receive transactional messages related to your orders.
- Access/deletion: you may request access to, correction of, or deletion of your personal information by emailing [SUPPORT EMAIL]. We will respond within the time required by applicable law.
- California residents: you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request deletion. Contact us at [SUPPORT EMAIL] to exercise these rights.
7. Children's Privacy
This Site is not directed to, and we do not knowingly collect personal information from, anyone under 21. If we learn we have collected information from someone under 21, we will delete it.
8. Security
We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Effective" date at the top of this page.
10. Contact
Questions about this Privacy Policy can be sent to hello@shopsummitlabs.com or:
[LEGAL ENTITY NAME] [BUSINESS MAILING ADDRESS]