Privacy policy

The short version: we collect what an order needs and what a first-party funnel measures — nothing more. Your card number never touches our servers, and we never sell personal information.

Last updated June 10, 2026

Who we are: catalystX lab LLC ("catalystX", "we") operates this store. This policy describes what personal information we collect, why, who processes it for us, and the choices you have. It applies to this website and to orders placed on it.
What we collect: Order information: your name, email address, phone number, shipping address, and the items you purchase. Waitlist signups: your email address and the product you asked to be notified about — email only, nothing else. Account information: your email address, if you create a sign-in. Support email: whatever you choose to send us. Device and usage data: pages viewed, taps/clicks through the purchase funnel, approximate location from IP address, and browser/device type, collected through our analytics tooling.
Payments: We never collect or store your card details. Payment happens on our payment processor's secure hosted checkout page; the processor returns only the order outcome (paid, failed, refunded) and a payment reference. Your full card number, expiry, and security code never touch our servers.
How we use it: To fulfil and ship orders and send transactional email about them (confirmation, shipped with tracking, refund or cancellation notices); to notify you when a waitlisted product becomes available; to answer support requests and handle damage/incorrect-item claims; to prevent fraud and enforce our terms; to understand how the store is used (conversion and abandonment analytics) so we can improve it; and to meet legal, tax, and accounting obligations. We do not send marketing email without your consent, and waitlist addresses are used only for the availability notice you requested.
Cookies & storage: We use a small number of first-party mechanisms: an age-confirmation cookie (age_ok, kept for one year so the age gate doesn't re-fire), authentication cookies if you sign in, your cart contents in your browser's local storage (they stay on your device until you clear them), and analytics cookies/identifiers used to measure sessions and the purchase funnel. We do not run third-party advertising trackers, and we do not use your data for cross-site behavioural advertising.
Who processes it: We share personal information only with the service providers that run the store, each limited to its function: website hosting, our database and authentication provider, our payment processor (checkout and card processing), our email delivery provider (transactional and waitlist email), our product-analytics provider (usage measurement), and shipping carriers (name and address, to deliver your order). We may also disclose information when the law requires it, to protect our rights, or as part of a business transfer. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Retention: Order records are kept as long as needed for warranty claims and for tax and accounting law (typically seven years). Waitlist entries are kept until the notification is sent or you ask us to remove you. Analytics data is retained on our analytics provider's standard schedule. Account data is kept until you ask us to delete the account.
Security: All traffic to the site is encrypted in transit (TLS). Order data lives in an access-controlled database with row-level security; administrative access is limited to authenticated staff. No internet transmission is perfectly secure, but card data — the highest-risk category — never reaches us at all.
Your rights: You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it (subject to records we must keep by law, such as completed order records for tax purposes). California residents may exercise the corresponding CCPA/CPRA rights — access, deletion, correction, and non-discrimination; we do not sell or share personal information as those terms are defined there. To exercise any right, email support@catalystxhealth.com from the address on the account or order and we will verify and respond within the time the law requires.
Do Not Track: Our analytics is first-party and session-scoped; we do not track you across other websites. Browsers' Do Not Track and Global Privacy Control signals are honoured to the extent they apply to us — since we don't sell or share data for advertising, there is nothing to opt out of beyond analytics, which you can block without affecting checkout.
Age: This site sells laboratory research materials and is strictly for adults 21 and over. We do not knowingly collect information from anyone under 21; if we learn we have, we delete it.
Changes: We will post any changes to this policy here and update the date above. Material changes that affect how existing data is used will be flagged on this page.
Contact: Privacy questions and rights requests: support@catalystxhealth.com, or by mail at the address below.

catalystX lab LLC · 14465 NW 128th St, Madrid, IA 50156.