Privacy Policy

This Privacy Policy explains how Kestra Club LLC (“Kestra Club,” “we,” “us,” or “our”) collects, uses, and safeguards information when you visit our website or place an order. By using the Site, you consent to the practices described here.

1. Information we collect

We collect the following categories of information:

• Contact information: such as your name, email address, phone number, and shipping and billing addresses.
• Order information: the products you purchase, order history, and communications with our support team. Payment card details are entered directly with our payment processor; we do not store full card numbers on our servers.
• Usage & device information: such as your IP address, browser type, pages viewed, referring pages, and similar analytics data collected automatically through cookies and comparable technologies.

2. How we use your information

• To process, fulfill, and deliver your orders and provide customer support.
• To send transactional messages such as order confirmations and shipping updates.
• To operate, maintain, secure, and improve the Site and our products.
• To detect and prevent fraud, abuse, and violations of our Terms.
• To send marketing communications where permitted (you may opt out at any time via the unsubscribe link or by contacting us).
• To comply with legal obligations and enforce our agreements.

3. Cookies & analytics

We use cookies and similar technologies to keep your cart and session working, remember preferences, and understand how the Site is used. Analytics providers may set cookies to help us measure traffic and improve the experience. You can control cookies through your browser settings, though disabling some may affect Site functionality such as checkout.

4. Sharing with service providers

We do not sell your personal information. We share it only with trusted third parties who perform services on our behalf and are bound to protect it, including:

• Payment processors: to securely authorize and settle transactions.
• Shipping carriers & fulfillment partners: to deliver your orders.
• Analytics and hosting providers: to operate and improve the Site.

We may also disclose information when required by law, to enforce our Terms, or to protect the rights, property, or safety of our users, the public, or Kestra Club.

5. Data retention

We keep personal information only as long as there is a reason to. In practice that means:

• Order records: kept for seven years from the order date. These are also accounting records, and tax law requires us to be able to produce them.
• Support correspondence: kept for three years from the last message, so we can pick up a thread about a past order.
• Marketing contacts: kept until you unsubscribe, plus a suppression record kept indefinitely. That record exists so we do not email you again by mistake; it holds your address and the fact that you opted out, and nothing else.
• Site analytics: retained in identifiable form for no more than 14 months, then aggregated.
• Account records: kept while the account exists, and deleted within 30 days of a deletion request, except for order records, which are retained as above.

6. Data security

We use administrative, technical, and physical safeguards, including encryption in transit, designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Your privacy rights

These rights apply wherever you live. Several U.S. states guarantee them; we extend the same set to everyone rather than asking you to prove your address before we will honour a request.

• Know and access: what personal information we hold about you, where it came from, why we have it, and who we have shared it with.
• Get a copy: in a portable, machine-readable format.
• Correct: inaccurate information we hold about you.
• Delete: subject to the retention periods in section 5, which exist because tax and accounting law requires them, not because we want the data.
• Opt out of targeted advertising, and of any profiling that produces legal or similarly significant effects.
• Withdraw consent, including for marketing email and text messages, at any time and without affecting anything you have already ordered.
• Non-discrimination: exercising any of these rights will never change the price you pay or the service you receive.

We do not sell your personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months. We also do not knowingly sell or share the personal information of anyone under 21. The Site is not open to them at all.

We honour the Global Privacy Control (GPC) and comparable browser opt-out signals as a valid request to opt out of targeted advertising, on the browser that sends it.

Sensitive information

We do not ask for, and have no use for, information about your health, biometrics, precise geolocation, race, religion, or sexual orientation. Please do not send us health information (including anything about the intended use of a product) in support correspondence. Our products are supplied for laboratory research use only, and we cannot discuss human use.

How to make a request

Email support@kestraclub.comwith the word “Privacy” in the subject line and tell us what you want us to do. We will acknowledge within 10 days and respond substantively within 45 days, extendable once by a further 45 days where a request is complex. We will tell you if that happens, and why.

We will ask you to verify your identity before we act, in proportion to what is being requested: confirming control of the email address on an order is usually enough to access or correct it, while a deletion request may need more. An authorised agent may act for you with written permission we can verify. If we decline a request, we will tell you why, and you may appeal by replying to that decision. Appeals are reviewed by someone who was not involved in the original decision, and we will respond within 45 days. Residents of some states may also complain to their state attorney general.

Text message data

If you opt in to text messages, we process your mobile number, your carrier, and delivery metadata for that purpose only. Mobile opt-in data is never sold and never shared with third parties for their own marketing. Opting out (reply STOP) ends messaging; see the Terms of Service for the full messaging terms.

8. Third-party links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their policies before providing any information.

9. Children & age restriction

The Site is intended solely for qualified researchers who are at least 21 years old. It is not directed to anyone under 21, and we do not knowingly collect information from individuals under that age. If you believe we have collected such information, please contact us so we can delete it.

10. International users

We operate from the United States, and your information will be processed there. If you access the Site from outside the United States, you understand that your information may be transferred to and processed in a jurisdiction with different data-protection laws than your own.

11. Changes to this policy

We may update this Privacy Policy periodically. The “Last updated” date above indicates the latest revision, and material changes will be reflected on this page. Your continued use of the Site after an update constitutes acceptance of the revised policy.

12. Contact us

For any privacy question or request, email support@kestraclub.com.