Privacy Policy

Who We Are

VSA BioScience LLC, 930 S 4th St Ste 209, Las Vegas, NV 89101, United States. Questions about this policy or your information: support@vsabioscience.com or (702) 518-8070.

Information We Collect

We collect only what the site needs to operate and what an order requires.

• Account. Email address, name, password (held by our identity provider, never by us in readable form), and the date and content of the age and research-use attestations you accept.
• Orders. Items, quantities, prices, order and lot records, purchaser name, optional company or institution, shipping address and phone number, and the status of your payment.
• Payment. Card details are entered on our processor’s hosted form and sent directly to them. We never receive or store your card number. We retain only the result — approved or declined, the last four digits, and the processor’s transaction reference.
• Order records for dispute defence. When an order is submitted we record the IP address it came from, the browser user agent, the browser language, the submission time, and which attestations were accepted. This exists so a disputed charge can be answered with evidence.
• Support and email. Messages you send us, and your email address if you join our list. Joining the list is optional and separate from ordering.
• Referrals. If you arrive through an affiliate link we record the referral code with your account so the affiliate is credited.
• Technical. IP address, browser and device information, pages viewed, and events such as adding an item to the cart.

How We Use It

• To take, review, fulfil and ship your order, and to answer support requests.
• To verify eligibility — age, research use, and shipping destination.
• To keep lot, certificate, order, tax and accounting records.
• To send order and shipping notifications (these are not marketing and you cannot unsubscribe from them while an order is open).
• To send list email if you opted in, until you unsubscribe.
• To prevent fraud, abuse and prohibited use, and to answer payment disputes.
• To understand how the site is used and how advertising performs.

We do not sell your personal information for money, and we do not share it with anyone for their own independent marketing.

Who Receives Your Information

These are the third parties that actually receive information, what each one gets, and why. No one else does.

• Authorize.net (Visa Inc.) — payment processing. Receives your card details directly, plus billing name, address and order amount.
• Amazon Web Services — hosting, account sign-in, databases, file storage and email delivery, all in the United States. Holds essentially everything described above.
• Shippo, and the carrier you ship with (UPS, USPS or FedEx) — shipping labels and tracking. Receives recipient name, address, phone number and parcel details.
• Resend — sends our transactional and list email. Receives your email address and the message content.
• Google Analytics 4 — site analytics. Receives page views, events and an analytics identifier. Not your name or address.
• TikTok — advertising measurement. The pixel on our pages reports page views and product views. When an order is paid we also send TikTok a one-way hashed (SHA-256) copy of your email address and phone number plus the click identifier from the ad you arrived on, so TikTok can match the sale to its advertising. Hashing means TikTok does not receive them in readable form.
• Geoapify — address suggestions while you type. Receives the partial address text only, through our servers. It is never sent your name, email or order.
• Our own order alerts. When an order is placed we send ourselves a text message through Amazon SNS so it can be packed quickly. It contains the order number, total, items, and the destination city and state — not your name, street address or email.
• Professional advisers — our accountant and, where necessary, legal counsel.
• Law enforcement or regulators — only where we are legally required to respond, or to protect our rights.

If we are ever part of a merger, acquisition or sale of assets, your information may transfer as part of that transaction; you would be notified through the email address on your account.

Advertising, Analytics and Your Choices

Google Analytics and the TikTok pixel load when you visit the site. We do not show a cookie banner, so you should assume they are active unless you take one of the steps below.

• Global Privacy Control. If your browser or extension sends a Global Privacy Control signal, we do not load Google Analytics or the TikTok pixel, and we do not send advertising events about your order.
• Ask us. Email support@vsabioscience.com with the subject “Do not share my information” and we will exclude your account from advertising measurement.
• At the source. You can opt out of Google Analytics with Google’s browser add-on, and control TikTok’s advertising personalisation in your TikTok account settings.

Nevada residents. Nevada law lets you tell an operator not to sell certain information it has collected. We do not sell it, but you may still submit a request to support@vsabioscience.com, which is our designated address for these requests.

California residents. If California’s privacy law applies to your information you may request access to it, a copy of it, correction of it, or its deletion, and you may opt out of the advertising sharing described above. We will not treat you differently for exercising any of these rights.

Cookies and Local Storage

The site stores a small amount of data in your browser:

• your sign-in session, so you stay signed in;
• the age and research-use confirmation you gave, so you are not asked repeatedly;
• your cart, so it survives a page reload;
• which account the cached profile belongs to, so one person’s details are never shown to the next;
• cookies set by Google Analytics and TikTok as described above.

Clearing your browser storage removes all of these. The site continues to work.

How Long We Keep It

• Order, payment, lot and attestation records — at least seven years, for tax, accounting, audit and dispute purposes.
• Account records — while the account exists, and afterwards only as needed for the records above.
• List email — until you unsubscribe, plus a suppression record so we do not email you again.
• Support messages — generally two years.
• Analytics and advertising data — held by those providers under their own retention settings.

Security

The site runs over HTTPS. Card details never reach our systems. Credentials are held by our identity provider, and administrative access is restricted and requires a verified account. No system is perfectly secure; if a breach affects your information we will notify you as required by law.

Children

This site is not intended for anyone under 21, and purchasing requires you to confirm you are 21 or older. We do not knowingly collect information from children. If you believe a minor has given us information, contact us and we will delete it.

Where We Operate

We sell and ship within the United States only, and our providers process information in the United States. If you visit from elsewhere, your information will be processed in the United States.

Changes and Contact

We update this policy when what we do changes, and revise the date at the top. For any privacy request, email support@vsabioscience.com or write to VSA BioScience LLC, 930 S 4th St Ste 209, Las Vegas, NV 89101, United States. We answer within 45 days.