Privacy Policy

Helix Labs × Ethereal Cosmetics is a single brand operated by the operator of this site ("we", "us", "our"), with one product catalogue and one support team. This policy covers the brand and this website at helixresearchlabs.net.

For any privacy question, or to exercise the rights described below, contact us at support@helixresearchlabs.net.

This website supplies products strictly for in vitro laboratory research use only. Nothing in this policy changes that: our products are not drugs, food, cosmetics, or dietary supplements, and are not intended for human or veterinary consumption. By using this site you confirm that you are a qualified researcher, at least 18 years of age, purchasing solely for lawful research purposes.

This site takes payment. When you place an order, we collect your name, your email address, and the shipping address for your parcel, so that the payment can be taken and the order can reach you, and we keep a record of what you ordered.

Your card details go to Stripe, our payment processor, on the checkout page it hosts. We never see or store your full card number.

There are no customer accounts on the storefront, and we run no third-party analytics, advertising, or social-media tracking on this site. The separate affiliate portal has its own sign-in for creators who join that programme.

A small amount of functional information — your cart and your confirmation of the research-use-only terms — stays in your own browser and is never sent to us.

The sections below set out exactly what we collect, why, who it reaches, and how long it is kept.

Information you give us at checkout. When you pay for an order, the checkout collects your name, your email address, the shipping address for the parcel, and your payment details. We receive and store your name, email address, shipping address, the items and quantities you bought, the amounts charged (including shipping and any discount), any creator or affiliate code you entered, and confirmation that the payment succeeded. We never receive or store your full card number, its security code, or your banking credentials — those stay with Stripe, our payment processor.

Information you give us by email or message. If you contact us at support@helixresearchlabs.net, or message us on Instagram or Telegram, we receive your email address or platform username, your name if you provide it, and anything you include in your message and attachments. We use this to answer you and to manage your enquiry or order.

What we do not collect. We do not operate customer accounts on the storefront, and we do not ask for a date of birth, identity documents, or any health information. We do not knowingly collect information from anyone under 18 years of age, and this site is restricted to qualified researchers who are at least 18.

Two providers handle your order information, each in a defined role:

• Stripe — our payment processor. Stripe hosts the checkout page, takes and processes your payment details, and handles refunds. It is responsible for your card data; we never hold it. Stripe passes us the order details we need to fulfil the order, and processes your information under its own privacy policy and our agreement with it.
• Supabase — the hosted database platform where our order records live. Your order record (name, email address, shipping address, items, amounts, and status) is stored there. Supabase hosts that record for us and processes it on our instructions only.

Access to order records is limited to the people who need it to fulfil and support orders. Where information is processed or stored outside your own country, the "International visitors" section below applies.

To make the site work, a small amount of information is saved in your browser's local storage on your own device. This information stays on your device while you browse. When you press Checkout, the items and quantities in your cart are sent to us so the order can be priced and created; nothing else from your device is. It includes:

• Order list — the items you add, stored under "helix_cart", so your order list persists between page views.
• Age and disclaimer confirmation — a record that you accepted the research-use-only terms and confirmed your age, stored under "labs_gate_v2", so you are not asked again on this device.

You can clear this information at any time by clearing your browser's site data for helixresearchlabs.net. Doing so empties your order list and brings the age and research-use disclaimer back. It does not delete an order you have already placed: that record is held as described above.

We do not currently use cookies to identify or track you, and we do not use third-party analytics, advertising, remarketing, or social-media tracking pixels on this site. The browser storage described above is functional only and is not used to profile you or to track you across other websites.

If we introduce cookies or analytics in future, we will update this policy first and, where the law requires it, ask for your consent.

Most browsers let you block or delete cookies and clear local storage through their settings. Because the items above are functional, blocking or clearing them may affect how parts of the site work.

We use the information we hold only for the following purposes:

• To take payment for your order and confirm it to you.
• To pack, ship, and deliver your order, and to send you tracking.
• To answer your enquiries, handle claims, and provide support.
• To apply a creator or affiliate code you entered, and to credit that sale to the code.
• To keep accurate business records, including accounting and tax records.
• To operate, maintain, and improve the website and its core features.
• To keep a record that visitors confirmed the research-use-only terms and their age.
• To prevent and investigate fraud or misuse, to comply with our legal obligations, and to protect our legal rights.

We do not sell your personal information, we do not use it for third-party advertising, and we do not use it to build a profile of you.

We do not sell or rent your personal information. We share it only in these circumstances:

• Payment. Stripe, our payment processor, receives and processes your payment details and the contact and address details you enter at checkout, so that the payment, and any refund, can be made.
• Delivery. Your name and delivery address, and your contact details where the carrier requires them, are given to the courier carrying your parcel.
• Hosting and business services. Our order records are held on Supabase, and we use trusted providers for services such as email and website hosting. Each acts on our instructions and only to provide its service to us.
• Creators and affiliates. Creators and affiliates never receive your personal information. Where a code is used, only the fact of an attributed sale and its value is recorded against that code.
• Legal and safety. We may disclose information where we reasonably believe it is required to comply with a law, regulation, legal process, or lawful government request, or to protect the rights, property, or safety of our business, our customers, or others.
• Messaging platforms. Your messages to us on Instagram or Telegram are processed by those platforms under their own privacy policies.
• Business transfers. If our business is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Order records — your name, email address, shipping address, order contents, amounts, and payment confirmation — are kept for as long as our accounting, tax, and record-keeping obligations require, and for as long as a claim about the order could reasonably be brought. After that we delete or anonymise them.

Emails and messages you send us are kept for as long as needed to deal with the matter and to meet those same obligations, and are then deleted or anonymised.

Stripe keeps its own record of the payments it has processed, under its own retention rules, which we cannot shorten on its behalf.

The order list and disclaimer confirmation stored in your browser stay on your device until you or your browser clears them. We do not keep a copy of them.

Depending on where you live, you may have rights over your personal information, such as the right to request access to it, to request correction or deletion, to object to or restrict certain processing, and to withdraw consent.

To make a request, email us at support@helixresearchlabs.net. We may need to verify your identity before acting, and we will respond within a reasonable time, or any period required by applicable law. Where we are required to keep an order record for accounting or tax purposes, we may not be able to delete it straight away; we will tell you if that applies and delete it once the obligation ends. Because the browser storage described above stays on your device, you can exercise most control over it yourself by clearing your browser's site data.

If you have a concern we cannot resolve, you may have the right to complain to your local data protection authority.

We ship worldwide, and this website can be accessed from many countries. If you contact us, your information may be processed and stored in the operator's jurisdiction or in other countries where we or our service providers operate, which may have different data protection laws from your own.

You are responsible for ensuring that your access to this site and your intended use of our products are lawful in your location, including any local restrictions and any customs or import requirements that apply to research materials. Where the law requires specific safeguards for international transfers of personal information, we will put appropriate measures in place.

This website and our products are strictly for qualified researchers who are at least 18 years of age. The site is not directed to, and is not intended for use by, anyone under 18.

We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with information, contact support@helixresearchlabs.net and we will delete it.

We take reasonable technical and organisational measures to protect the information we hold from loss, misuse, and unauthorised access. Order records are held in a database with restricted access, and only the people who need order information to fulfil and support orders can see it. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Please do not send us payment-card numbers, bank details, or other sensitive personal information by email or in a chat message. Card details are taken only on the checkout page hosted by our payment processor, and we will never ask you to send them to us another way.

We may update this Privacy Policy from time to time to reflect changes to our practices, our website, or the law. When we do, we will revise the "Last updated" date at the top of this page, and where changes are significant we will take additional steps to notify you where required.

Your continued use of the site after an update takes effect means you accept the revised policy.

If you have any questions about this Privacy Policy or how we handle your information, or if you would like to exercise your rights, please contact:

the operator of this site our registered business address (available on request) Email: support@helixresearchlabs.net Website: helixresearchlabs.net (Helix Labs × Ethereal Cosmetics)