Privacy Policy

Scope and notice

This Privacy Policy applies to information handled through the TrueLot Research website, research accounts, ordering, support, and related services. It is a notice of our practices, not a request for universal or blanket consent. Where law requires consent for a particular activity, we will request it separately and provide the applicable choice.

By using the services, you acknowledge this notice. If you do not want information handled as described, do not submit it, subject to information we must retain or process for an existing transaction or legal obligation.

Information we collect

Depending on how you interact with us, we may collect the following categories:

• Identifiers and contact information, such as name, email, telephone number, billing address, shipping address, and account credentials.
• Research-account application details, such as name, email address, organization or laboratory details supplied through earlier forms, organization type, optional organization-type explanation, intended laboratory application, research descriptions submitted through earlier forms, application IP address, activation method and timestamps, age-eligibility and research-use certifications, and policy acceptance records.
• Commercial and transaction information, such as products viewed or ordered, quantities, discounts, order status, shipment tracking, returns or claim history, and communications about an order.
• Payment-related information, such as transaction status, payment method type, tokenized identifiers, and limited details returned by a payment provider. TrueLot does not intentionally store complete payment-card numbers in WordPress.
• Device and usage information, such as IP address, browser, device, timestamps, essential cookies, security and diagnostic events and, only after you allow optional analytics on eligible public pages, page URL and title, referral or permitted campaign information, approximate location derived from network information, analytics-consent state, and a pseudonymous browser identifier.
• Communications and support content, including messages, attachments, preferences, and records of our responses.
• Claim evidence, including photographs and continuous unpacking videos that may show the shipping label, sealed package, packing slip, contents, product labels, TrueLot lot IDs, visible damage, voices, surroundings, or other details you choose to record and submit.

Sources of information

We collect information directly from you; automatically from your browser, device, and essential cookies; after optional consent, from and through Google Analytics for eligible public pages; from companies that help provide payments, fraud prevention, hosting, communications, and shipping; and from public or authorized sources when reasonably needed to verify a transaction, address, delivery, claim, or legal obligation.

How we use information

• Validate Research Account applications, activate and secure ordering access, document the account record, and preserve research-use and policy acknowledgments.
• Process payments, accept or review orders, maintain inventory, fulfill shipments, and provide tracking.
• Answer questions, investigate delivery or fulfillment issues, authenticate submitted evidence, and resolve or defend claims, carrier matters, and payment disputes.
• Detect, investigate, and prevent fraud, abuse, prohibited use, security incidents, and violations of our terms.
• Operate, troubleshoot, analyze, and improve the website and customer experience.
• Maintain business, tax, accounting, compliance, exact-lot, and legal records and enforce our agreements.
• Send account confirmation and other transactional communications; record email verification separately from your optional marketing choice, including its wording, version, time and source; administer an offered one-time welcome code after verification; and send marketing only where permitted. Unsubscribing does not revoke an earned welcome code.

Payments

Stripe handles cards, supported wallets, and Link; DePay handles cryptocurrency payments. Available methods are shown at checkout. These providers may collect payment credentials, identity, device, and transaction information directly under their own notices. TrueLot receives the information reasonably needed to confirm, reconcile, support, refund, or dispute a transaction. TrueLot does not store complete card numbers or bank credentials.

How we disclose information

We do not sell personal information for money. We may disclose only the information reasonably necessary to:

• Provide hosting, ecommerce, payment, fraud-prevention, communications, support, shipping, and related business services and, only after analytics consent, provide limited eligible public-site usage information to Google for Google Analytics 4.
• Investigate and resolve a claim with carriers, insurers, payment networks, financial institutions, professional advisers, or other relevant providers. This may include submitted claim photos or unpacking videos.
• Comply with law, legal process, governmental requests, or safety and security obligations, or protect rights and enforce agreements.
• Complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate protections and applicable law.
• Carry out another purpose you direct or separately authorize.

Cookies and site usage

TrueLot uses essential cookies and similar storage for the age notice, sign-in, cart and session functions, preferences, security, fraud prevention, and required site operation. Blocking or deleting essential storage may prevent some features from working. Optional Google Analytics storage is used only after you select Allow analytics. Selecting Continue without analytics prevents the Google Analytics tag and collection requests from loading. Your analytics preference is stored for 180 days unless you change it or clear it sooner.

Optional public-site analytics

TrueLot uses Google Analytics 4, supplied by Google, only when you select Allow analytics. On eligible public pages, Google Analytics may receive the page URL and title, referral or permitted campaign information, timestamp, browser and device category, approximate geographic area, analytics-consent state, and a pseudonymous browser identifier. Google may process network information, including an IP address, to provide and secure the service and derive approximate geography; TrueLot does not receive the full IP address in standard Google Analytics reports. TrueLot uses this information to understand public-site traffic sources, landing pages, and content performance.

This analytics setup is not used for advertising, ad personalization, cross-site profiling, user-provided-data collection, or WooCommerce purchase or revenue tracking. TrueLot does not intentionally send names, email addresses, telephone numbers, mailing addresses, research-account information, cart contents, order or payment information, exact-lot information, or protected action tokens to Google Analytics.

Google Analytics is disabled on My Account, cart, checkout, order-payment and order-confirmation pages, password recovery, research-account application and verification, owner and test pages, and every COA or exact-lot surface. The excluded COA and exact-lot surfaces include the COA library, exact-lot record pages, printed QR routes, original COA PDFs, attachment or media views, and their query variations. Their URLs, titles, lot IDs, search values, report filenames, and referrers are not sent to Google Analytics.

If you select Continue without analytics, the Google Analytics tag does not load and TrueLot does not send analytics requests. You can change or withdraw your choice at any time through Analytics preferences in the site footer. Declining optional analytics does not prevent access to the public site or required account and ordering functions.

• How Google uses information from sites or apps that use its services

Retention

We retain information for as long as reasonably necessary for the purposes described, including the duration of an account or transaction, exact-lot and order traceability, support, tax and accounting rules, fraud prevention, security, dispute and chargeback periods, legal claims, and other legal obligations. We then delete, deidentify, or securely isolate information as appropriate.

Claim photographs and unpacking videos are retained only as reasonably necessary to authenticate, investigate, resolve, or defend the claim; communicate with a carrier, insurer, payment provider, or adviser; satisfy recordkeeping or legal duties; and complete applicable dispute periods. The nature of the issue, status of the claim, legal requirements, and need to preserve evidence determine the period.

TrueLot configures Google Analytics event-level and user-level data retention for 14 months. Google Analytics standard aggregated reports may remain available after event-level data expires, as described in Google’s documentation. TrueLot does not use Google Analytics as a system of record for accounts, orders, payments, inventory, or lots.

Data security

We use commercially reasonable administrative, technical, and organizational safeguards designed for the nature of the information and our operations. No transmission, system, or storage method is completely secure, so we cannot guarantee absolute security. Protect your password and contact us promptly if you suspect account misuse.

Privacy rights and verification

Depending on where you live and subject to exceptions, you may have rights to request access, correction, deletion, portability, or information about collection and disclosure; opt out of a regulated sale, sharing, or targeted-advertising activity; and appeal certain decisions. We do not sell personal information for money and will honor legally required controls for any regulated activity we conduct. Send a request to support@truelotresearch.com. We may verify identity and authority using account, contact, order, or other reasonably necessary information. We may deny or limit a request where law permits, such as when information must be retained for security, a transaction, exact-lot records, legal duties, or claims. We will not discriminate against you for exercising a right where discrimination is prohibited.

Communication choices

Optional marketing emails may include discounts, promotions, product news and cart reminders. Manage your email preference during registration or in your account, or unsubscribe using the link in any marketing email. Marketing is not required to create an account or make a purchase. Essential account, security and order communications continue regardless of your marketing preference. SMS marketing is used only with separate consent and may be stopped as instructed in the message, including by replying STOP where supported. We may continue sending transactional, account, security, order, shipment, policy, or support communications where permitted by law.

Adults only; no medical or PHI submissions

The services are intended only for people age 21 or older. We do not knowingly permit anyone under 21 to create an account or place an order. If you believe a person under 21 submitted account or order information, contact us so we can review and take appropriate action.

TrueLot is not a healthcare portal, and the services are not designed to receive medical records or protected health information (PHI). Do not submit medical histories, diagnoses, treatment records, prescriptions, patient identifiers, or other health information in account fields, support messages, claim evidence, photographs, or videos.

Third-party links and United States processing

Third-party sites and services have their own privacy practices, which this policy does not control. Google Analytics is provided by Google and may process eligible public-site analytics information in the United States and other locations where it operates, subject to its privacy terms and the choices described above. TrueLot operates in the United States, and other service providers may process and store information in the United States and other locations, subject to applicable law.

Changes to this policy

We may update this notice by posting the revised policy and effective date. Material changes will be communicated as required by law. An updated notice describes practices from its effective date forward and does not retroactively create consent where consent is legally required.

Contact us

For a privacy question or request, contact support@truelotresearch.com. Describe the request and the state where you live, but do not send passwords, complete payment-card numbers, medical records, or unnecessary sensitive information.