Last updated 20 October 2026

Privacy policy

chainwell.bio ("Chainwell", "we") runs chainwell.bio. This policy explains what personal data we collect, why, and the choices you have. Chainwell is designed to collect as little personal data as possible: there are no customer accounts, no card data and no tracking.

What we collect

• Order details: email address, shipping name and address, optional institution, the items ordered, and the time you made your checkout declarations.
• Payment data: the Lightning invoice and amount. We never see or store card or bank details, and a Lightning payment does not reveal your identity to us.
• Security data: a keyed hash of your IP address recorded with your checkout declarations, and short-term server logs used to prevent abuse.
• Messages: anything you send us by email.
• Cookies: one session cookie (your cart and form security token) and one cookie remembering that you confirmed our age and research-use notice. No analytics, advertising or third-party trackers.

How we use it

Only to process, ship and support your order; to keep records that tax, accounting and other laws require; to enforce our terms and research-use policy; and to prevent fraud, abuse and security incidents. We do not use personal data for advertising or profiling, and we do not send marketing emails.

Who we share it with

• The shipping carrier (name and address, to deliver your order).
• Our hosting and email service providers, who process data only on our instructions.
• Professional advisers (such as accountants and lawyers) under a duty of confidentiality.
• Authorities, where the law requires it or to protect our rights or someone's safety.
• A buyer or successor, if the business is sold, under the same protections.

We do not sell personal data, and we do not "share" it for cross-context behavioral advertising, as those terms are defined in California and other state privacy laws. We honor Global Privacy Control signals, though there is nothing for them to switch off.

Retention

• Shipping name, street address and hashed IP are erased automatically 90 days after an order ships.
• Unpaid, expired orders are deleted after 30 days.
• Order numbers, items, amounts, dates, email address and destination state and country are kept for as long as tax and accounting law requires.
• Server logs are kept for a short period for security.

Security

We use encrypted connections (HTTPS), strict access controls, signed sessions and encrypted backups. No system is perfectly secure; if a breach affects your personal data, we will notify you and any authority as the law requires.

Your rights

You may ask to know, access, correct or delete the personal data we hold about you, or to receive a copy of it, by emailing support@chainwell.bio from the address used for your order. We will verify the request against that address and respond within the time the law requires (45 days under California law). Residents of states with privacy laws, including California, Colorado, Connecticut, Virginia, Texas and others, have these rights under those laws; we extend them to every customer. We will not discriminate against you for using them. If we decline a request, you may appeal by replying to our decision; if the appeal is denied, you may contact your state attorney general. An authorised agent may make a request for you with your signed permission.

Age

The Site is only for adults aged 21 or older. We do not knowingly collect data from anyone younger, and we delete it if we learn we have.

Where data is kept

We operate in, and store data in, the United States.

Changes and contact

We may update this policy by posting a new version here, with a new date at the top. Questions or requests: support@chainwell.bio.