Privacy Policy

1. Introduction

Evolara Chem ("we," "us," "our") is committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy describes how we collect, use, store, and protect information you provide when using our website or purchasing our research products.

2. Information We Collect

Account information: Name, email address, and password when you create an account.

Order and compliance data: Billing information, shipping address, research field, institutional affiliation, and regulatory acknowledgments collected as part of our research-use-only compliance program.

Usage data: Browser type, IP address, pages visited, and session duration collected automatically through our hosting provider for security and analytics purposes.

Communications: Any messages you send us via our contact form or email.

3. How We Use Your Information

• Processing and fulfilling orders for research materials.
• Maintaining compliance records as required by our distributor agreements and applicable regulations.
• Verifying purchaser eligibility (institutional affiliation, research credentials, age).
• Communicating about order status, shipping, and account matters.
• Preventing fraud, abuse, and unauthorized use.
• Improving the functionality and security of our website.

We do not use your information to send unsolicited marketing communications. We do not sell, rent, or trade your personal information to third parties.

4. Compliance Records and Legal Disclosure

Because our products are regulated research chemicals, we are required to maintain records of purchaser identity, institutional affiliation, and stated research purpose. These records may be disclosed to law enforcement or regulatory authorities (including the DEA and FDA) in response to a lawful subpoena, court order, or regulatory inquiry, or when we reasonably believe disclosure is necessary to prevent harm or comply with applicable law.

5. Data Storage and Security

Your information is stored securely using industry-standard encryption. We use Supabase for database storage, which maintains SOC 2 Type II compliance. Access to personally identifiable information is restricted to authorized personnel only. While we implement reasonable security measures, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain order and compliance records for a minimum of 7 years from the date of purchase, as required by applicable regulations. Account information is retained until you request deletion, subject to our legal retention obligations. Compliance acknowledgment records are retained permanently.

7. Cookies

We use strictly necessary cookies for authentication and session management. We do not use tracking cookies for advertising purposes. You may disable cookies in your browser settings, but doing so will prevent you from accessing your account.

8. Your Rights

Subject to applicable law and our legal retention obligations, you may request:

• Access to the personal data we hold about you.
• Correction of inaccurate information.
• Deletion of your account (subject to retention requirements for compliance records).

To exercise these rights, contact us via our contact page.

9. Contact

Questions about this Privacy Policy should be directed to us via our contact page.