Privacy Policy

1. Information We Collect

We collect several types of information to provide and improve our services:

1.1 Personal Information You Provide

• Account Information: Name, email address, phone number, billing/shipping addresses, account username and password
• Order Information: Products purchased, order history, payment confirmation details, shipping preferences
• Communication Data: Records of correspondence with customer support, inquiries, feedback, and survey responses
• Age Verification: Date of birth or age confirmation required for research chemical purchases
• Institutional Information: Laboratory or institutional affiliation (if applicable)

1.2 Automatically Collected Information

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, referring/exit pages, search queries
• Location Data: General geographic location derived from IP address
• Cookies and Similar Technologies: Session data, preferences, shopping cart contents, authentication tokens

1.3 Third-Party Information

• Payment processors (Stripe, PayPal) may share transaction confirmation data
• Analytics providers (Google Analytics) provide aggregated user behavior data
• Social media platforms (if you interact with our social content)

2. How We Collect Information

• Direct Collection: When you register an account, place an order, fill out forms, or contact us
• Automated Technologies: Cookies, web beacons, pixels, and similar tracking technologies
• WordPress & WooCommerce: Our platform automatically collects user data for functionality, security, and analytics
• Elementor: Page builder tools may collect interaction data for performance optimization
• Third Parties: Payment processors, shipping carriers, and analytics services

3. How We Use Your Information

We use your personal information for the following purposes:

• Order Processing: To fulfill orders, process payments, arrange shipping, and provide order confirmations
• Account Management: To create and manage your account, authenticate users, and maintain security
• Customer Support: To respond to inquiries, resolve issues, and provide technical assistance
• Legal Compliance: To verify age (21+), comply with research chemical regulations, and meet legal obligations
• Communication: To send order updates, shipping notifications, policy changes, and marketing (with consent)
• Fraud Prevention: To detect and prevent fraudulent transactions, unauthorized access, and abuse
• Website Improvement: To analyze usage patterns, optimize performance, and enhance user experience
• Marketing: To display relevant content and offers (you may opt out at any time)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your data under the following legal bases:

• Contractual Necessity: Processing necessary to fulfill your orders and provide requested services
• Legal Obligation: Compliance with tax, accounting, and research chemical regulations
• Legitimate Interests: Fraud prevention, website security, business analytics, and service improvement
• Consent: Marketing communications and non-essential cookies (you may withdraw consent anytime)
• Vital Interests: Protection of health and safety in emergency situations

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience:

5.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality, account access, and security (cannot be disabled)
• Functional Cookies: Remember preferences, language settings, and shopping cart contents
• Analytics Cookies: Google Analytics, WooCommerce analytics, and Elementor performance metrics
• Marketing Cookies: Track browsing behavior to deliver relevant advertisements (with consent)
• Social Media Cookies: Enable social sharing features and content integration

5.2 Cookie Management

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect website functionality.

5.3 Third-Party Cookies

Our payment processors (Stripe, PayPal), analytics providers (Google), and social media platforms may set their own cookies. We do not control these cookies. Please review their respective privacy policies for more information.

6. Data Sharing and Third Parties

We do not sell your personal information. We may share data with the following categories of service providers:

6.1 Payment Processors

• Stripe, Inc.: Processes credit card payments securely. Stripe's Privacy Policy: stripe.com/privacy
• PayPal Holdings, Inc.: Processes PayPal transactions. PayPal's Privacy Policy: paypal.com/privacy
• We do not store complete credit card numbers on our servers

6.2 Shipping and Logistics

• Shipping carriers (USPS, UPS, FedEx) receive delivery addresses and contact information
• Third-party fulfillment centers (if applicable) for order processing

6.3 Analytics and Marketing

• Google Analytics: Website traffic and user behavior analysis
• Facebook/Meta Pixel: Advertising effectiveness and retargeting (with consent)
• Email Service Providers: Order confirmations and marketing communications

6.4 Website Infrastructure

• WordPress: Content management and user authentication
• WooCommerce: E-commerce platform for order management
• Elementor: Page building and content delivery
• Hosting Provider: Secure data storage and server infrastructure
• Cloudflare/CDN: Website security and performance optimization

6.5 Legal and Regulatory

• Law enforcement or regulatory authorities when required by law
• Legal counsel in connection with potential litigation
• Tax and accounting professionals for compliance purposes

6.6 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: SSL/TLS encryption for all data transmission
• Secure Hosting: PCI DSS compliant hosting environment
• Access Controls: Restricted access to personal data on a need-to-know basis
• Regular Security Audits: Vulnerability assessments and penetration testing
• Password Protection: Hashed and salted password storage
• Two-Factor Authentication: Available for account security

Despite these measures, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Account Information: Retained while your account is active; deleted upon request or after 2 years of inactivity
• Order Records: Retained for 7 years for tax, accounting, and legal compliance
• Communication Records: Retained for 3 years for customer service and dispute resolution
• Marketing Data: Retained until you opt out or request deletion
• Log Files: Retained for 90 days for security purposes

After these periods, data is securely deleted or anonymized.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 GDPR Rights (EEA/UK Residents)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 CCPA/CPRA Rights (California Residents)

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information (subject to exceptions)
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit use and disclosure of sensitive personal information

Do Not Sell My Personal Information: We do not sell personal information as defined by the CCPA.

9.3 Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws may have similar rights. Contact us to exercise these rights.

9.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@pantheonformulas.com. We will respond within 30 days (or sooner as required by applicable law). We may need to verify your identity before processing your request.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your jurisdiction.

For transfers from the EEA/UK, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data processing agreements with our service providers

11. Children's Privacy

Our website is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@pantheonformulas.com. We will delete such information from our records.

12. Do Not Track Signals

Some browsers have "Do Not Track" (DNT) features that send signals to websites you visit indicating you do not want to be tracked. Our website currently does not respond to DNT signals. However, you can opt out of interest-based advertising through the Digital Advertising Alliance (aboutads.info/choices) or Your Online Choices (youronlinechoices.eu).

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a revised "Last Updated" date
• Emailing registered users (for substantial changes)
• Displaying a prominent notice on our website

Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, contact us:

• Email: support@pantheonformulas.com
• Mail: Pantheon Formulas LLC, 4241 Woodland Dr, Chesapeake, VA 23321