Privacy Policy
Last updated: April 20, 2026
1. Introduction
Kai Bio Labs (“we,” “us,” or “our“) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, retain, and protect your information when you visit our website at kai-biolabs.com (the “Site“), create an account, place an order, or otherwise interact with us. This Policy applies to all visitors, users, and customers of the Site worldwide.
We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable data protection laws. For California-specific rights, please also see our California Residents page.
2. Information We Collect
2.1 Personal Information You Provide
- Account Information: Name, email address, phone number, billing and shipping addresses, institutional affiliation, and account credentials.
- Transaction Information: Order history, payment method details (processed and stored by our PCI-DSS compliant payment processor — we do not store full credit card numbers), billing address, shipping preferences.
- Communication Information: Emails, support tickets, live chat transcripts, phone call records, and feedback you provide to us.
- Research Verification Data: Institutional affiliation, role or title, research purpose descriptions (when requested).
2.2 Information Collected Automatically
- Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution.
- Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, search terms used on the Site.
- Location Data: Approximate geographic location derived from IP address (used for currency display and shipping estimates).
- Cookie Data: Information collected through cookies and similar tracking technologies (see Section 11).
2.3 Information from Third Parties
- Payment Processors: Transaction confirmation, fraud risk assessments.
- Analytics Providers: Aggregated usage statistics and demographic insights.
- Shipping Carriers: Delivery status and tracking information.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Order Processing: To process and fulfill your orders, manage payments, and arrange shipping.
- Account Management: To create and manage your account, authenticate your identity, and provide customer support.
- Communication: To send order confirmations, shipping notifications, respond to inquiries, and provide technical support.
- Research Verification: To verify that purchasers meet our eligibility requirements and intend to use products for legitimate research purposes.
- Site Improvement: To analyze usage patterns, optimize Site performance, and improve our products and services.
- Fraud Prevention: To detect, prevent, and investigate fraudulent transactions, unauthorized access, and other illegal activities.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
- Marketing: To send promotional communications (only with your consent where required by law; you may opt out at any time).
4. Legal Basis for Processing (GDPR)
For individuals in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data under the following legal bases pursuant to GDPR Article 6:
- Performance of a Contract (Art. 6(1)(b)): Processing necessary to fulfill orders, manage accounts, and provide services you have requested.
- Legitimate Interests (Art. 6(1)(f)): Processing for fraud prevention, Site security, analytics, business improvement, and ensuring compliance with our research-use-only policy.
- Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable laws, tax regulations, and regulatory requirements.
- Consent (Art. 6(1)(a)): Processing based on your freely given consent, such as for marketing communications. You may withdraw consent at any time.
5. Information Sharing & Disclosure
We do not sell your personal information. We may share your information with the following categories of recipients:
- Payment Processors: Stripe, PayPal, or other processors to facilitate secure payment transactions.
- Shipping Carriers: USPS, FedEx, UPS, DHL, and other carriers to fulfill and deliver your orders.
- Analytics Providers: Google Analytics and similar services to analyze Site usage (data is anonymized where possible).
- Cloud Infrastructure: Hosting providers that store and serve our Site data under strict data processing agreements.
- Legal Requirements: Law enforcement, regulatory authorities, or other parties when required by law, subpoena, court order, or to protect our legal rights.
- Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets.
- Professional Advisors: Attorneys, accountants, and auditors as necessary for business operations.
6. International Data Transfers
Kai Bio Labs is based in the United States. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. For transfers from the EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized transfer mechanisms. By using the Site, you consent to the transfer of your information to the United States.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, including:
- Account Data: For the duration of your account plus 3 years after account closure.
- Transaction Records: 7 years from the date of transaction (as required for tax and accounting purposes).
- Communication Records: 3 years from the date of communication.
- Analytics Data: 26 months (aggregated, non-personally-identifiable data may be retained indefinitely).
- Legal/Compliance Records: As long as required by applicable law or regulation.
8. Data Security
We implement industry-standard technical and organizational security measures, including:
- TLS/SSL encryption for all data transmitted between your browser and the Site.
- Encryption of sensitive data at rest using AES-256 or equivalent.
- PCI-DSS compliant payment processing (we never store full card numbers on our servers).
- Role-based access controls limiting employee access to personal data on a need-to-know basis.
- Regular security audits and vulnerability assessments.
- Two-factor authentication for administrative access.
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights
9.1 GDPR Rights (EEA/UK/Switzerland Residents)
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Restriction: Request that we limit the processing of your data.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Withdraw previously given consent at any time.
- Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority.
9.2 CCPA/CPRA Rights (California Residents)
Please see our dedicated For California Residents page for a detailed description of your rights under the CCPA and CPRA.
10. Exercising Your Rights
To exercise any of the rights described above, please contact us at hello@kai-biolabs.com or call +1 (307) 394-5789. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before fulfilling your request.
11. Cookies & Tracking Technologies
11.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for Site functionality, shopping cart, and checkout. Cannot be disabled.
- Performance/Analytics Cookies: Help us understand how visitors interact with the Site (e.g., Google Analytics). Collect anonymized usage data.
- Functional Cookies: Remember your preferences such as language, currency, and region.
- Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (only with your consent where required).
11.2 Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may limit Site functionality. Most browsers allow you to refuse or delete cookies. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
12. Do Not Track Signals
Some browsers transmit “Do Not Track” (DNT) signals. There is currently no industry standard for how websites should respond to DNT signals. At this time, the Site does not respond to DNT signals, but we honor opt-out requests submitted directly to us.
13. Children’s Privacy
The Site is not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we discover that we have inadvertently collected such information, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately.
14. Third-Party Services & Links
The Site may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Site.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes may be communicated via email to registered users. Your continued use of the Site after changes are posted constitutes acceptance of the revised Policy.
16. Data Protection Contact
For any questions or concerns regarding this Privacy Policy, your personal data, or to exercise your rights, please contact our Data Protection lead:
Kai Bio Labs — Data Protection
Email: hello@kai-biolabs.com
Phone: +1 (307) 394-5789
17. Supervisory Authority
If you are located in the EEA or UK and are unsatisfied with our response to your privacy concern, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU Data Protection Authorities can be found at edpb.europa.eu.
