We know your address. We don't know your browsing.

Four things on this site collect personal data: placing an order, sending us a message, creating an account, and applying to the rewards programme. Only the first is needed to buy. Browsing collects nothing at all — no account is needed to look.

That table is exhaustive. If it is not on it, we do not have it.

• No card details, ever.Payment is not processed on this site. Checkout hands you to our processor's own secure page, and the card number you enter there goes to the processor, not to us. There is no field on this site that accepts one.
• Ad measurement: Google and OpenAI.This site loads Google's tag and OpenAI's ads pixel so those ad accounts can see which visits came from an ad and when an order is paid (for Google, the order number and its total). It runs no other analytics scripts, advertising pixels or third-party trackers.
• Cookies.Google's tag and OpenAI's pixel may set their own cookies to attribute visits and purchases to ads, under their own privacy policies. The site itself sets none to follow you; what it stores in your browser is listed in the next section.
• No marketing list by default. Ordering does not subscribe you to anything. There is no newsletter signup on this site today, so there is no list to be added to.

Three things are stored on your device, by your browser, and none of them are sent to us:

• Your cartlives in your browser's local storage (under the key erl-cart-v1). What you put in it reaches our servers only when you place the order.
• A promo code you enter is kept in session storage for that tab, so it survives the trip from cart to checkout and is gone when the session ends.
• A dismissed promo banner is remembered in local storage so it stays dismissed.

Clearing your browser's site data removes all three. We cannot see any of them, and we cannot restore a cleared cart.

When you place an order, its details — the table above — are written to our order database. Two design choices are worth knowing about:

• Order records are not readable through the site's public interface. Orders go in through a controlled write, and the browsable catalog has no path to them.
• Your confirmation page is addressed by a long random token rather than a guessable order number, is excluded from search indexing, and shows your first name only. Anyone you give the link to can see that page — keep it as private as you keep the order.

Concretely: order records live in a PostgreSQL database managed by Railway in its US East region, alongside the order system itself. The storefront you are reading is served by Vercel.

Order data leaves us only to the parties needed to complete your order, and each gets the minimum for its job:

• The shipping carrier gets your name, address and phone number — on a parcel that is otherwise unlabelled and uninformative.
• Cleffo, our payment processor, takes your card on its own hosted page and tells us the payment settled. Your card details live with Cleffo, not with us.
• Resend, our email provider, delivers order and account email from emails.elementsdna.com and handles your email address to do so.
• Vercel serves this storefront and Railway runs our order system and its database — see the section above.
• Legal process: like any business, we would comply with a valid legal demand, and would disclose the minimum it compels.

We do not sell your data.Not to advertisers, not to data brokers, not as an “anonymised” dataset, not as part of a marketing partnership. A store whose customers value discretion does not have a side business in their identities.

We also do not use your order history to build profiles, do not enrich your record from outside sources, and do not disclose to anyone that a given person is a customer, except as required to deliver or by law.

Order records need to exist for as long as an order can raise a question — a certificate request, a refund, an insurance claim, a tax return. Beyond that horizon, there is no reason to hold them.

Regardless of what any statute requires of us, these hold as practice:

• Ask what we hold about your email address, and we will tell you — it is at most a handful of order rows.
• Correct a wrong address or name on an unshipped order by contacting us before dispatch.
• Request deletion, and we will remove what we are not legally required to keep — completed orders may need to survive in accounting records even after the rest is gone, and we will say so rather than silently keep everything.

This store sells laboratory research materials to adults. It is not directed at children, and we do not knowingly collect data from them; an order discovered to be from a minor is cancelled and its record removed.

You must be 21 or older to order. Checkout asks you to confirm that, and the confirmation is stored with your order — see who may order.

If what the site collects changes, this page changes in the same release — that is the standing rule this policy is written under. Material changes will be dated, which is why the effective date above is an open item rather than a build timestamp.

Privacy questions and requests get a person, not an auto-reply. What to include is on the contact page.

Privacy questions and requests go through the contact form, and every message is stored the moment it is sent. The business responsible for the data described on this page is Element Research INC, which trades as Elements DNA.