Privacy Policy

What we collect

• Order information — name, email, shipping address, billing address and order contents.
• Payment information — card details are entered on Stripe’s hosted checkout page and are handled entirely by Stripe. We never see or store full card numbers. We retain the identifiers Stripe returns (a checkout session and payment reference) so an order can be matched to its payment and refunded.
• Communications — the content of emails and contact-form messages you send us.
• Site usage — we use Google Analytics 4 to count visits and measure which pages and products people use. It records pages viewed, products viewed and added to the cart, and completed orders, along with the general location, device and browser Google derives from the request. Your IP address is anonymised before it is stored.
  What we send it is deliberately limited to the commercial facts: product identifiers, sizes, quantities and order amounts, and the K&L order reference so an order can be counted once. We never send your name, email address, phone number, shipping address, payment details, account identifier or the Stripe reference to Google or to any analytics service.
  If your browser sends a Global Privacy Control signal, analytics does not load at all and no analytics cookie is set. You can also block cookies in your browser or install Google’s opt-out add-on. We run no advertising, remarketing or session-replay trackers — there is no Google Ads tag, no Meta Pixel and no Microsoft Clarity on this site.
• Checkout acknowledgments — when you tick the boxes at checkout we record which acknowledgments you accepted, the date and time in UTC, and the version of the Terms and of the acknowledgment wording in force at that moment. This is kept with the order as a record of what was agreed.
• Local storage — your cart is stored in your own browser. It is not transmitted to us until you check out.

Why we collect it

To process and ship your order, provide support, send transactional email such as tracking notifications, prevent fraud, and meet our record-keeping obligations. We do not operate a marketing mailing list and do not send marketing email; the only email we send is about your order, or in reply to a message you sent us.

What we don't do

• We do not sell your personal information.
• We do not share your order contents with advertisers or data brokers.
• We do not print anything identifying the contents on the outside of a package.

Who we share it with

Only the service providers required to run the site and fulfil your order. Each receives the minimum data needed to do its job:

• Stripe — payment processing. Receives your email, billing and shipping details, and your card data directly.
• Shippo — shipping labels and tracking. Receives the name and delivery address for the parcel.
• Resend — transactional email delivery. Receives your email address and the contents of the message sent to you.
• Twilio — text-message delivery, only if you have opted in to SMS. Receives your mobile number and the contents of the message sent to you. No mobile information is shared for marketing.
• Vercel — website and application hosting.
• Neon — the database in which order records are stored.
• Google Analytics — visit measurement. Receives pages viewed, products viewed and ordered, order amounts and the K&L order reference. It does not receive your name, email address, phone number, shipping address or payment details.

We do not sell your information and do not share it with advertisers or data brokers. We may disclose information where legally required to do so.

Text messages (SMS)

You may optionally give us a mobile number at checkout and tick a separate box to receive transactional text messages — order confirmations, payment updates, shipping and delivery updates, account notices and replies to support requests. The box is unchecked by default and consent is not a condition of purchase. Giving us a number without ticking the box does not enrol you; we keep the number only as a contact for that order.

Message frequency varies and depends on your order activity. Message and data rates may apply. Reply STOP to any message to opt out at any time, or HELP for help. You can also email contact@klresearchsupply.com. Opting out stops text messages only — you will still receive order and account emails, which are how we confirm and update an order.

We record when you consented and which version of this disclosure you agreed to, so we can show what you were told. An opt-out is kept as a permanent suppression record; that is what stops a later order re-enrolling you.

We do not sell or share mobile numbers or SMS consent, and no mobile information is shared with third parties or affiliates for their own marketing purposes. Your number is passed only to the messaging provider that delivers the message to you, and only for that purpose.

Retention

Order records are kept for 7 years to satisfy tax and accounting requirements. Marketing contact data is kept until you unsubscribe. SMS consent and opt-out records are kept for as long as we run the messaging programme, because an opt-out has to outlive the order it came from. Contact-form messages are kept for 24 months, then deleted.

California residents (CCPA / CPRA)

If you are a California resident you have the right to know what personal information we collect, to request a copy of it, to request deletion, to request correction, and not to be discriminated against for exercising any of these rights.

In the last 12 months we have collected these categories of personal information: identifiers (name, email, postal address), commercial information (order history), and customer records (contact-form messages). We collect them for the purposes described above and retain them for the periods stated under Retention.

We do not sell or share your personal information, as those terms are defined under the CCPA and CPRA, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes requiring a right to limit. We do not knowingly collect personal information from anyone under 18.

To exercise any of these rights, email contact@klresearchsupply.com. We will acknowledge within 10 business days and respond substantively within 45 days, extendable once by a further 45 days where necessary, and we will tell you if we need the extension. We may ask for information sufficient to verify that you are the person the data relates to. An authorised agent may make a request on your behalf with written permission.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to object to certain processing. Email contact@klresearchsupply.com and we will respond within the period required by applicable law.

Cookies

Two different things, kept separate:

• Necessary — cookies and browser local storage that keep your cart, keep you signed in if you have an account, and protect forms against cross-site request forgery. The site cannot work without these and they are not used to track you.
• Analytics — Google Analytics 4 sets cookies to count a repeat visit as the same visit rather than two. These are not advertising cookies, are not used for remarketing, and carry no personal information.

We set no advertising or remarketing cookies at all. You can block cookies in your browser; the cart will stop persisting between visits if you do, and you will not be able to stay signed in. If your browser sends a Global Privacy Control signal, the analytics cookies are not set in the first place.

Security

The site is served over HTTPS and payment data is handled entirely by our processor. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to us.

Children

This site is not directed to anyone under 21, and we do not knowingly collect information from anyone under 21.

Changes

We will post any changes to this policy on this page and update the date above.

Contact

K&L Research Supply LLC
Dayton, Ohio, USA
contact@klresearchsupply.com