Effective date: October 8, 2026
This Privacy Policy explains how Prism Labs USA (“Prism Labs,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit prismlabsusa.com (the “Site”), place an order, or contact us. By using the Site, you agree to the practices described here. This policy is part of our Terms of Service.
1. Information We Collect
Information you give us
- Order and account details: name, email address, phone number, billing address, shipping address, account login, and order history.
- Compliance confirmations: your confirmation that you are 21 or older and that Products are for in-vitro research use only, made at our entry gate and again at checkout.
- Messages: what you send through our contact form or by email, including your name, email, institution or lab (optional), subject, and message.
- Payment information: entered on the checkout page and sent directly to our payment processor. See Section 4.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages viewed, referring page, and the date and time of visits, as recorded by our hosting and security systems.
- Compliance and anti-fraud records: the IP address and timestamp of your checkout acknowledgment, the time you passed our age-verification gate, and the IP address of contact-form submissions. These are stored with your order or message.
- Cookies and similar technologies: see Section 6.
2. How We Use Information
We use personal information to:
- process, fulfill, ship, and support your orders;
- verify your age and research-use acknowledgment, and keep records of those confirmations;
- detect, prevent, and investigate fraud, chargebacks, and violations of our Terms, including our zero-tolerance policy on human-use inquiries;
- respond to your messages and provide customer support;
- send transactional emails such as order confirmations, shipping updates, and replies to your inquiries;
- send marketing emails or texts, only if you opt in. You can unsubscribe at any time;
- maintain the security and performance of the Site; and
- comply with legal, tax, accounting, and regulatory obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3. How We Share Information
We share personal information only as needed to run our business:
- Payment processors and gateways (for example, NMI or Authorize.net-connected merchant accounts) to authorize payments, prevent fraud, and handle disputes.
- Fulfillment partners and shipping carriers to pack and deliver your order.
- Service providers that host the Site, send email, and provide security and technical services, under obligations to protect your information.
- Card networks and issuing banks, when we respond to a chargeback or payment dispute. This may include your order details, delivery confirmation, IP address, compliance confirmations, and communications with us.
- Legal and safety recipients, such as law enforcement or regulators, when required by law, subpoena, or court order, or when needed to protect our rights, our customers, or the public.
- A successor business, if Prism Labs is involved in a merger, acquisition, financing, or sale of assets. Your information would remain subject to this policy.
4. Payment Security and Tokenization
- Card payments are processed by PCI DSS-compliant third-party payment gateways, such as NMI or Authorize.net-connected processors.
- Your full card number and security code are sent from the checkout page directly to the payment gateway over an encrypted connection. Wherever the gateway supports it, card data is converted into a secure token, and only that token is used to complete the payment.
- Prism Labs never stores your full card number or security code on its servers. We may receive and keep limited details, such as card type, the last four digits, expiration date, and the transaction ID, to identify the payment, process refunds, and handle disputes.
- Payment processors use your information under their own privacy policies and the card network rules.
5. Data Security (SSL/TLS)
- The entire Site is served over HTTPS with SSL/TLS encryption, so information sent between your browser and our Site, including checkout and contact forms, is encrypted in transit.
- Our administrative access is restricted to authorized personnel, protected by passwords, and limited to what is needed to operate the business.
- We use hosting with firewall and malware protection, form spam protection, and rate limiting.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to protect your information and will notify you of a data breach as required by law.
6. Cookies
We use a small number of cookies, mostly essential ones:
prism_compliance_verified (age and research-use verification): set when you check both boxes and click “Enter Store” on our entry gate. It stores only the time you confirmed. It expires after 30 days, after which you are asked to confirm again. It is not used for advertising or tracking. Clearing your browser cookies removes it.- WooCommerce shopping cookies: remember your cart and session so checkout works. They are deleted when your session ends or expire within a few days.
- WordPress login cookies: keep you signed in if you have an account.
- Security and performance cookies: set by our hosting and caching services to protect and speed up the Site.
You can block or delete cookies in your browser settings. If you block essential cookies, the entry gate, cart, and checkout may not work.
7. Data Retention
- Orders, invoices, and payment records: kept for as long as required for tax, accounting, and legal purposes, generally up to 7 years.
- Compliance confirmations and anti-fraud records: kept with the related order for the same period, so we can show compliance and respond to disputes.
- Contact-form messages: kept for up to 3 years after our last communication, unless they relate to an order or dispute.
- Marketing preferences: kept until you unsubscribe or ask us to delete them.
When information is no longer needed, we delete or anonymize it.
8. Your Privacy Rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct inaccurate information;
- delete your information, subject to our legal record-keeping obligations;
- opt out of marketing communications; and
- appeal a decision we make about your request.
To make a request, email prismlabsusa@gmail.com with the subject “Privacy Request.” We will verify your identity before acting and respond within the time required by applicable law, normally within 45 days. We will not discriminate against you for exercising your rights.
Do Not Track: Our Site does not currently respond to browser “Do Not Track” signals. We honor Global Privacy Control signals where required by law.
9. Age Restriction
The Site and Products are intended only for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and we do not knowingly collect any information from children under 13. If you believe someone under 21 has given us personal information, contact us and we will delete it.
10. Third-Party Links
The Site may link to third-party websites, such as testing laboratories or shipping carriers. Their privacy practices are their own, and we encourage you to read their policies.
11. Data Location
We operate in the United States, and your information is processed and stored in the United States.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page with a new effective date and, if the changes are material, notify you by email or with a notice on the Site.
13. Contact Us
Prism Labs USA
Email: prismlabsusa@gmail.com
Contact form: prismlabsusa.com/contact
