Effective date: August 13, 2025

This Privacy Policy describes how Poly Biotech (“Poly Biotech”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards personal data when you visit our website polybiotech.co (the “Site”) and when you contact us to request wholesale pricing or other information. By using the Site, you agree to the practices described here.

1) Who We Are

Data Controller: Poly Biotech
Contact: privacy@polybiotech.co

2) Scope

This Policy covers personal data processed through the Site and in connection with quote requests, supplier relations, and customer service. It does not cover third‑party websites that we do not control.

3) Data We Collect

• Contact & business information: name, organization, role, work email, phone, country/city, and any details you include in your message or quote request (e.g., products of interest, estimated volumes, intended research use).
• Technical data: IP address, device/browser information, pages viewed, referring/exit pages, timestamps, and approximate location derived from IP (via our hosting and analytics providers).
• Cookies & similar tech: small files placed on your device to enable core functionality (e.g., language preferences) and optional analytics (see “Cookies & Analytics”).
• Communications: email correspondence, forms submitted via the Site.

4) How We Use Personal Data

• Respond to inquiries & prepare quotations you request, and to verify shipping eligibility and compliance requirements.
• Customer service & account administration (e.g., follow‑ups, product availability, lead times).
• Security & fraud prevention, and to protect our legal rights.
• Website operations & improvement, including diagnostics and analytics to measure performance and usability.
• Legal compliance with applicable laws, customs, sanctions, anti‑abuse, and record‑keeping obligations.

5) Legal Bases for Processing (GDPR/LGPD)

• Contractual necessity: to respond to your quote request and provide pre‑contract information.
• Legitimate interests: to operate a secure, efficient B2B site and prevent misuse.
• Consent: for optional analytics cookies where required, and for direct marketing where applicable.
• Legal obligation: to comply with applicable laws and regulatory requests.

6) Sharing of Personal Data

We share personal data only as needed with:

• Service providers (e.g., website hosting, security, email delivery, CRM, analytics) under contracts requiring confidentiality and appropriate safeguards.
• Logistics & compliance partners (e.g., carriers, customs brokers) to verify eligibility and arrange shipments when applicable.
• Affiliates and professional advisors (legal, accounting) as necessary.
• Authorities when required by law or to protect rights, safety, and security.

7) International Transfers

We operate in Latin America and may process data in countries outside your own (including the United States and the EEA). Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses) for cross‑border transfers.

8) Data Retention

We keep personal data only as long as necessary for the purposes described above, including legal, tax, audit, and compliance requirements. Typical retention for quote inquiries is 12–36 months unless a longer period is required (e.g., due to regulatory obligations or an active commercial relationship).

9) Security

We use reasonable technical and organizational measures to protect personal data (access controls, encryption in transit, hardened hosting, least‑privilege access). No method of transmission or storage is 100% secure; residual risk remains.

10) Cookies & Analytics

The Site uses essential cookies for core functionality (e.g., session, language). With your consent (where required), we may use analytics cookies to understand traffic and improve the Site. You can control cookies in your browser settings and, where implemented, via our cookie banner preferences.

• Essential cookies: strictly necessary; cannot be disabled in our systems.
• Analytics cookies (optional): used to generate aggregate, de‑identified reports on Site usage.

11) Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, to portability of your data, and to withdraw consent at any time (without affecting prior lawful processing). Residents in the EEA/UK (GDPR), Brazil (LGPD), and Colombia (Habeas Data) may exercise these rights by contacting privacy@polybiotech.co. We will verify identity before fulfilling requests. You may also have the right to lodge a complaint with your supervisory authority.

12) Children’s Privacy

Our Site and services are intended for business users and not for children. We do not knowingly collect data from individuals under the age of 16 (or the equivalent minimum age in your jurisdiction).

13) Do Not Track / Marketing

We do not sell personal data. We do not currently respond to browser “Do Not Track” signals. If we send any B2B marketing communications, you may opt out at any time via the unsubscribe link or by contacting us.

14) Third‑Party Links

The Site may include links to third‑party websites or services we do not control. Their privacy practices are governed by their own policies.

15) Changes to This Policy

We may update this Policy from time to time. The “Effective date” will indicate the latest revision. Material changes will be notified on the Site or by email when appropriate.

16) Contact Us

For questions or to exercise your privacy rights, contact:
Poly Biotech – Privacy
Email: privacy@polybiotech.co

Note: Poly Biotech supplies research-use peptides only. For compliance notices relating to shipping and import, please see our Shipping page and footer disclaimer.