Privacy policy

Olympus BioLabs (“Olympus BioLabs,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available regarding your information when you visit store.olympusbiolab.com, our Olympus BioLabs .shop landing pages, or create an account with us. Optional analytics and personalization remain off until you make an affirmative choice in the applicable privacy control.

1. Information we collect

We may collect information you voluntarily provide, including your name, email address, billing address, shipping address, telephone number, account credentials and order history. Payment information is processed securely by our payment providers, and Olympus BioLabs does not store complete payment card numbers.

2. Customer accounts

A customer account is required to continue checkout. You may create one with an email address and password or use a verified Google account. Necessary authentication cookies keep the account signed in across browser sessions until you sign out, change credentials, the account is disabled, or the browser removes the cookie. You are responsible for maintaining the confidentiality of your login credentials and for all activity occurring under your account.

3. How we use your information

We use your information to process orders, communicate order updates, provide customer support, maintain customer accounts, improve our website, detect and prevent fraud, comply with legal obligations, and send marketing communications when you have elected to receive them.

4. Cookies and analytics

We use necessary cookies and browser storage for security sessions, age confirmation, the shopping cart, and remembering your privacy choice. These functions are required to provide the Site and do not depend on consent. Optional personalization may remember recently viewed products and a product comparison list on your device. Optional analytics and Meta, Reddit, Google Ads, TikTok, and Microsoft Clarity measurement remain off unless you affirmatively enable them through the applicable privacy control.

When enabled, our analytics records a random visitor identifier, a 30-minute session identifier, pages viewed, product views, cart actions, checkout progress, engagement time, approximate scroll depth, referring host, campaign tags, browser family, operating system family, device category, language, time zone, and viewport size. If you are signed in, the identifier may be linked to your customer record to measure the purchase journey. We never capture form contents, complete URLs containing arbitrary query data, payment-card details, precise location, activity on other websites, or device fingerprints.

We do not store full IP addresses in our first-party analytics. Before local storage, the address is reduced to a network prefix and transformed with a keyed one-way hash. If conversion measurement is enabled, we send Meta and Reddit the PageView, AddToCart, InitiateCheckout, AddPaymentInfo, and Purchase events from our server. Those events may include the page path without arbitrary query data, product identifiers, quantities, order value and currency, and the respective advertising click identifier when one arrived with the visit. Meta may also receive normalized SHA-256 hashes of available email, telephone, name, city, region, postal code, country, and our random visitor identifier. Reddit receives our random visitor identifier and the browser user agent, but not raw IP addresses, email addresses, telephone numbers, names, or postal addresses. We never send complete payment-card details.

On our .shop landing pages, a separate consent choice shared by the two landing subdomains controls Meta, TikTok, Reddit, and Microsoft Clarity browser measurement. After consent, those providers receive the landing page URL, referrer, browser/device and network signals, may set measurement cookies, and receive a claim_offer event when you select the button that enters the store. They do not receive form, account, product, or payment-card data from those landing pages.

We also load the Google Ads base tag after consent on the storefront. It may receive the page URL, referrer, advertising click identifiers, browser/device information, and the IP address used for its network request, and may set first-party _gcl cookies. We do not enable enhanced conversions or send form contents, account data, or payment-card data through this base tag. We also load the TikTok base pixel after consent. It may receive the page URL, referrer, browser/device information, IP address, and advertising identifiers, and may set _ttp, ttcsid, and ttclid cookies. Storefront code sends TikTok only the base page event and does not call identify or commerce-event methods. After the applicable consent, Microsoft Clarity may collect page URLs, referrers, browser/device and network signals, page rendering, navigation, clicks, scrolling, and performance data for heatmaps and session playback, and may set _clck and _clsk cookies. Sensitive input content is masked by default. Meta, Reddit, Google, TikTok, and Microsoft process measurement data under their own privacy terms. Local event and session records are retained for 90 days; active consent records are retained for up to 365 days. The visitor cookie lasts up to 180 days.

You can accept, reject, or change optional cookies at any time. On the storefront, use Cookie settings. On the .shop landing pages, use your browser’s cookie controls to remove the saved choice and make a new selection on your next visit. Selecting necessary only stops analytics, removes accessible analytics, Google Ads, TikTok, and Clarity cookies, and deletes the local analytics history and queued Meta and Reddit events linked to that browser. Removing the saved .shop choice and measurement cookies through the browser applies separately to that domain. Events already delivered to Meta, Reddit, Google, TikTok, or Microsoft cannot be recalled. We also honor Global Privacy Control and Do Not Track signals by keeping analytics and conversion measurement disabled. Rejection does not reduce access to the storefront or landing pages.

We use Google reCAPTCHA on public inquiry and partnership forms to help distinguish legitimate submissions from automated abuse. When those forms are displayed or submitted, Google may process browser, device, cookie, and interaction signals under the Google Privacy Policy and Terms of Service.

5. Marketing communications

If you subscribe to receive promotional emails, we may send updates regarding new products, company news, and special offers. You may unsubscribe at any time using the unsubscribe link included in our emails.

6. Third-party service providers

We may share information with trusted service providers that assist with payment processing, shipping, website hosting, email communications, fraud prevention, analytics, and other business operations. These providers receive only the information necessary to perform their services.

7. Data retention

We retain personal information only as long as reasonably necessary to provide our services, comply with legal and accounting obligations, resolve disputes, and enforce our policies. The specific optional analytics periods are described in Section 4.

8. Data security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information. While we strive to safeguard your data, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your privacy rights

Depending on your location and applicable law, you may have the right to request access to, correction of, or deletion of your personal information, or to opt out of certain processing and communications. You can erase this browser’s optional analytics history immediately through Cookie settings. Other requests may be submitted using the contact information below. We do not discriminate against anyone for exercising a privacy right.

10. Children’s privacy

Our Site is intended for individuals at least 21 years of age. We do not knowingly collect personal information from individuals under 21 years of age.

11. Changes to this Privacy Policy

Olympus BioLabs may update this Privacy Policy from time to time. Any revisions will be posted on this page with an updated Last Updated date. Continued use of the Site after changes are posted constitutes acceptance of the revised Privacy Policy.

12. Contact us

Email: support@olympusbiolab.com

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us using the information above.