1Information we collect
- Account details: name, email address, phone number, organization and password (stored only in hashed form).
- Order details: shipping and billing addresses, items purchased, order history and communications with us.
- Researcher verification: your age and research-use confirmations, and the date, time, IP address and account they were made from.
- Payment details: card details are sent in encrypted form directly to our payment processor. We do not store full card numbers or security codes; we keep only the card type, last four digits and transaction references.
- Technical data: IP address, browser and device type, pages visited, and cookies needed to keep you signed in, remember your cart and record that you passed verification.
2How we use it
- To verify eligibility, process, ship and support orders.
- To screen for and prevent fraud, misuse, and purchases that break our Research Use Only or Prohibited Uses policies.
- To keep records of researcher confirmations and enforce our Terms.
- To meet legal, tax, accounting and regulatory obligations and respond to lawful requests.
- To send transactional emails and, only if you opt in, occasional product and testing updates. You can unsubscribe at any time.
3Who we share it with
We share information only with service providers that help us run the store (payment processing, fraud screening, shipping carriers, email delivery, hosting and databases), under obligations to protect it; with professional advisers; with a buyer or successor if the business is sold; and with law enforcement, regulators, courts or other parties where we believe in good faith that disclosure is required by law or is necessary to protect our rights, investigate misuse, or protect anyone's safety. We do not sell your personal information and do not share it for cross-context behavioral advertising.
4Retention
We keep order records, verification confirmations and related communications for as long as needed to meet legal, tax and compliance obligations and to defend against claims, which is generally at least seven years. Other information is deleted or anonymized when no longer needed.
5Security
We use encryption in transit, access controls and reputable hosting providers to protect your information. No system is completely secure, and we cannot guarantee the security of information transmitted over the internet.
6Your choices and rights
You can update your account details at any time. You may ask us to access, correct or delete your personal information by emailing hello@buymola.com. We will verify your identity before acting. We may keep information we are legally required to retain or need for fraud prevention and the defense of claims. Depending on where you live, you may have additional rights under state privacy law; we will honor them as required.
7Age
This website is not intended for anyone under 21, and we do not knowingly collect information from anyone under 21.
8Changes
We may update this policy by posting a new version on this page with a new "last updated" date.
9Contact
Privacy questions: hello@buymola.com.