Serrane Labs — Privacy Policy

1. Information We Collect

A. Information You Provide Directly

• Order & Transaction Details: Full name, billing address, shipping address, email address, telephone number, and transaction history. Payment card credentials are tokenized and processed directly by our PCI-DSS Level 1 compliant payment gateways (such as Shopify Payments, Shop Pay, and Apple Pay); we do not capture or store raw payment card numbers on our servers.
  
  
• Customer Support & Communications: Records of inquiries sent to our client desk, email correspondence, guarantee claims, sensory feedback submissions, and routine consultations.
  
  
• Marketing & Account Preferences: Email address, SMS notification preferences, and opt-in selections submitted via checkout forms or informational subscription prompts.
  
  

B. Information Collected Automatically

• Device & Connection Data: IP address, browser type and version, operating system, time zone settings, language preferences, and referring URLs.
  
  
• Usage & Session Activity: Specific product pages viewed, session duration, clickstream pathways, internal search queries, cart additions, and checkout progress.
  
  
• Cookies & Tracking Pixels: Small data files, server beacons, and tracking tags placed on your device to maintain cart persistence, remember user preferences, and evaluate site stability.
  
  

C. Information from Third Parties

• Logistics & Carrier Services: Real-time tracking numbers, carrier scan events, and address validation updates from our domestic fulfillment and transit partners.
  
  
• Analytics & Advertising Partners: Aggregate demographic data, engagement indicators, and conversion metrics provided by networks such as Google Analytics and Meta Ads to assess campaign efficacy.
  
  

2. How We Use Your Information

• Order Fulfillment & Logistics: Processing transactions, orchestrating warehouse picking and domestic dispatch, generating automated carrier tracking, and administering claims under our 30-Day Formulation Guarantee.
  
  
• Client Support Desk: Responding to formulation questions, processing address corrections, troubleshooting checkout issues, and reviewing routine suitability.
  
  
• Fraud Prevention & Security: Screening transactions for unauthorized activity, automated bot traffic, chargeback abuse, and payment fraud.
  
  
• Platform Optimization: Evaluating customer navigation telemetry to enhance storefront responsiveness, mobile layout performance, and server capacity.
  
  
• Direct Communications: Transmitting transactional receipts, carrier delivery alerts, educational research publications, and product updates (where explicit consent has been provided or as permitted by law). You may opt out of promotional communications at any time via the "Unsubscribe" link included in every marketing email.
  
  
• Statutory Compliance: Fulfilling tax, corporate accounting, customs, and statutory record-keeping obligations.
  
  

3. Disclosure of Personal Information

• E-Commerce Infrastructure: Shopify Inc., which powers our storefront hosting, customer database management, and secure checkout processing.
  
  
• Payment Processing Networks: PCI-compliant payment gateways that securely authorize and settle debit/credit transactions.
  
  
• Fulfillment & Parcel Carriers: Our third-party logistics (3PL) warehouse in Colorado and domestic parcel carriers (USPS, UPS, FedEx) that deliver physical orders within the United States.
  
  
• Analytics & Advertising Infrastructure: Advertising networks and analytics suites (such as Google Analytics and Meta Ads) used to evaluate site traffic and display relevant educational content on external platforms.
  
  
• Legal Authorities: When mandated by applicable law, court subpoena, judicial order, or to defend the legal rights, safety, and property of Serrane Labs, our clients, or the public.
  
  

4. Cookies, Targeted Advertising & Opt-Out Signals

• Essential Cookies: Strictly necessary to enable core storefront functionality, persist items in your shopping bag, and facilitate secure checkout.
  
  
• Performance & Analytics Cookies: Measure site traffic volume, page load latencies, and technical stability across diverse devices.
  
  
• Marketing & Retargeting Cookies: Track engagement across digital properties to deliver tailored Serrane Labs research updates and product information on third-party websites.
  
  

Privacy Signals & Do Not Track

• Global Privacy Control (GPC): Our website recognizes and respects Global Privacy Control (GPC) opt-out preference signals broadcast by compatible web browsers. If our system detects an active GPC signal, targeted third-party advertising cookies are restricted automatically.
  
  
• Browser Controls: You may configure your browser to block or delete cookies. To opt out of interest-based digital advertising broadly, visit the Digital Advertising Alliance Opt-Out Portal or the Network Advertising Initiative Opt-Out Page.
  
  

5. Data Retention and Security Safeguards

• Data Retention: We retain personal information only for the duration necessary to satisfy the operational purposes outlined in this policy—including maintaining customer records, honoring our 30-Day Formulation Guarantee, resolving technical disputes, and satisfying statutory tax and legal requirements.
  
  
• Security Standards: We implement industry-standard physical, administrative, and technical controls—including 256-bit SSL/TLS encryption for all checkout and account data in transit. However, no digital transmission or electronic storage architecture can be guaranteed 100% immune from compromise.
  
  

6. Your Statutory Privacy Rights

• Right to Know / Access: The right to request confirmation of data processing and obtain a portable copy of the specific categories of personal data collected about you.
  
  
• Right to Rectification: The right to request correction of inaccurate, obsolete, or incomplete personal records.
  
  
• Right to Erasure ("Right to Be Forgotten"): The right to request permanent deletion of your personal information, subject to statutory exceptions (such as tax compliance, fraud mitigation, and dispute resolution).
  
  
• Right to Opt-Out of Targeted Advertising: The right to direct us not to process your personal data for targeted advertising or cross-context behavioral marketing.
  
  
• Right to Non-Discrimination: We will never deny goods, alter pricing, assess surcharges, or diminish customer service quality because you exercised any statutory privacy right.
  
  

7. Protection of Minors

8. Cross-Border Data Processing

9. Policy Modifications

10. Contact Information