1. Introduction
Adamant Laboratories ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our products.
2. Information We Collect
Information You Provide
We may collect information that you voluntarily provide to us, including:
- Name, email address, and contact information when placing an order or contacting us
- Shipping and billing address
- Payment information (processed securely through third-party payment processors)
- Communications you send to us via email or contact forms
- Newsletter subscription information
Automatically Collected Information
When you visit our website, we may automatically collect certain information, including:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on our website
- Referring website address
How Long We Keep Your Information
We retain customer and order information for seven (7) years after the later of (a) the order date or (b) your last interaction with us. This retention period matches our tax and business-record-keeping obligations under applicable federal and state law. After that period, we delete or anonymize the information, except where a longer retention is required by law or necessary to defend a legal claim.
Order attestation records (age verification, research-use attestation, and the exact copy you agreed to at checkout) are retained for the same seven-year window.
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Communicate with you about your orders and account
- Send promotional communications (with your consent)
- Improve our website, products, and services
- Comply with legal obligations
- Prevent fraud and ensure security
Marketing Communications and SMS
We will not send you marketing emails or text messages unless you affirmatively opt in. You can opt in at checkout or from your account preferences. You can opt out at any time — email unsubscribe links appear in every marketing email, and SMS opt-out is available by replying STOP to any message.
Transactional communications (order confirmations, shipping notifications, compliance notices) are sent regardless of marketing preferences because they are necessary to fulfill your order. Message and data rates may apply to SMS.
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information with the following categories of service providers and recipients:
- Payment processors: Stripe, Inc. — to process card payments. See Stripe's Privacy Policy at https://stripe.com/privacy.
- Shipping carriers: The United States Postal Service — to deliver your orders.
- Email service provider: SendGrid (a Twilio company) — to deliver transactional emails such as order confirmations and shipping notifications.
- Hosting and infrastructure providers: Netlify (website hosting), Supabase (order data storage). These providers receive personal data only in the course of operating the technical infrastructure on our behalf.
- Legal compliance: When required by law, subpoena, or legal process.
Payment Processing — Stripe
We use Stripe, Inc. to process card payments. When you check out, Stripe receives the personal data you submit on the payment page (cardholder name, billing address, card details) along with technical information about the device and browser you use to complete the transaction. Stripe may collect personal data via cookies and similar technologies, and may use this information to operate and improve the services it provides to us, including fraud detection, loss prevention, authentication, and analytics related to the performance of its payment services. Stripe acts as an independent data controller for the data it collects in this capacity. For details, see Stripe's Privacy Policy at https://stripe.com/privacy.
5. Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.
6. Cookies
Our website may use cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device. You can control cookie settings through your browser preferences. Our website uses localStorage for shopping cart functionality, which remains on your device and is not transmitted to our servers.
Our checkout page uses Stripe's hosted payment surface, which sets its own cookies and may use device-identifying technologies for fraud detection. These cookies are governed by Stripe's Privacy Policy.
Engagement Data — Click-Gated Availability
When you visit a product detail page on our website, we record a small number of anonymous interaction events to help us decide which products to source, restock, or discontinue. We collect only what we need for those internal sourcing and availability decisions. We do not use this data for advertising, and we do not share it with any third party.
What we record (seven fields total):
- Anonymous visitor identifier — a randomly generated UUID stored in your browser's
localStorage. This is a browser-stored anonymous identifier, not a cookie; it never leaves your device unless attached to an event below. Clearing your site data resets it. We do not link it to your name, email, or any account. - Event type — one of
product_view(you opened a product page),variant_select(you clicked a specific size variant), oradd_to_cart(you added a variant to your cart). - Product identifier — which product the event relates to.
- Variant identifier — which size variant the event relates to (if applicable).
- Out-of-stock flag — whether the variant was in stock at the moment of the event.
- Bot flag — a boolean we derive from your User-Agent string at the moment we receive the event, used to exclude search-engine crawlers and automated tools from our internal reporting. The User-Agent string itself is not stored; only the resulting true/false value is recorded.
- Timestamp — when the event occurred.
What we do not collect with these events:
- IP address
- User-Agent string (only the derived bot flag described above)
- Referrer or referring URL
- Email address (until checkout, which is governed by the rest of this policy)
- Geographic or location data
- Device fingerprint
- Screen size, browser version, or operating system
- Time on page, scroll depth, or hover events
- Any cross-product behavior tracking or co-view analysis
Purpose. We use this engagement data only to inform our own sourcing, restocking, and product-availability decisions. It is not used for advertising, profiling, or personalization. It is not shared with, sold to, or processed by any third party. The data lives in our own infrastructure (see §4) and is not transmitted to ad networks, analytics providers, or data brokers.
Retention. Raw engagement event records are kept for 365 days and then automatically deleted by a daily scheduled job in our database. Aggregated counts that have been derived from these events for our internal reporting may be retained longer but contain no individual event records.
Reaffirmation of CCPA / CPRA stance. The engagement data described above does not change our existing position: Adamant Laboratories does not sell your personal information and does not share it for cross-context behavioral advertising. The anonymous visitor identifier is a browser-side value with no link to your identity, and it is never transmitted outside of our own infrastructure.
7. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Opt out of promotional communications
- Withdraw consent where we rely on consent for processing
To exercise any of these rights, please contact us.
Your California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect about you, the right to request deletion of that information, the right to correct inaccurate information, and the right to limit our use of sensitive personal information. You also have the right to opt out of the sale or sharing of your personal information.
Adamant Laboratories does not sell your personal information and does not share it for cross-context behavioral advertising. We use customer information only to fulfill orders, communicate about orders, maintain required business records, and comply with legal obligations.
To exercise any CCPA/CPRA right — including a "Do Not Sell or Share" request — email us at privacy@adamantlaboratories.com with the subject line "CCPA Request." We will respond within 45 days. We will not discriminate against you for exercising these rights.
9. Children's Privacy
Our website and products are not intended for individuals under the age of 21. We do not knowingly collect personal information from any individual under the age of 21. If we become aware that we have collected information from a person under 21, we will take steps to delete such information. Nothing in this section alters, reduces, or expands our obligations under the Children's Online Privacy Protection Act (COPPA) with respect to children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of our website after any changes constitutes acceptance of the updated policy.
Data Breach Notification
If we become aware of a security incident that results in unauthorized access to your personal information, we will notify you without undue delay, and in any case within the timeframe required by applicable state law. Notifications will be sent to the email address associated with your account or order and will describe the information affected, the steps we are taking in response, and what you can do to protect yourself.
11. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us or email us at support@adamantlaboratories.com.