Olympus BioLabs ("Olympus BioLabs," "we," "our," or "us") respects your privacy and is committed to protecting
your personal information. This Privacy Policy explains what information we collect, how we use it, how we
protect it, and the choices available regarding your information when you visit
store.olympusbiolab.com, our Olympus BioLabs .shop
landing pages, or create an account with us. Optional analytics and personalization remain off until you make
an affirmative choice in the applicable privacy control.
1. Information We Collect
We may collect information you voluntarily provide, including your name, email address, billing address, shipping address, telephone number, account credentials, and order history. Payment information is processed securely by our payment providers, and Olympus BioLabs does not store complete payment card numbers.
2. Customer Accounts
A customer account is required to continue checkout. You may create one with an email address and password or use a verified Google account. Necessary authentication cookies keep the account signed in across browser sessions until you sign out, change credentials, the account is disabled, or the browser removes the cookie. You are responsible for maintaining the confidentiality of your login credentials and for all activity occurring under your account.
3. How We Use Your Information
We use your information to process orders, communicate order updates, provide customer support, maintain customer accounts, improve our website, detect and prevent fraud, comply with legal obligations, and send marketing communications when you have elected to receive them.
4. Cookies & Analytics
We use necessary cookies and browser storage for security sessions, age confirmation, the shopping cart, and remembering your privacy choice. These functions are required to provide the Site and do not depend on consent. Optional personalization may remember recently viewed products and a product comparison list on your device. Optional analytics and Meta, Reddit, Google Ads, TikTok, and Microsoft Clarity measurement remain off unless you affirmatively enable them through the applicable privacy control.
When enabled, our analytics records a random visitor identifier, a 30-minute session identifier, pages viewed, product views, cart actions, checkout progress, engagement time, approximate scroll depth, referring host, campaign tags, browser family, operating system family, device category, language, time zone, and viewport size. If you are signed in, the identifier may be linked to your customer record to measure the purchase journey. We never capture form contents, complete URLs containing arbitrary query data, payment-card details, precise location, activity on other websites, or device fingerprints.
We do not store full IP addresses in our first-party analytics. Before local storage, the address is reduced to
a network prefix and transformed with a keyed one-way hash. If conversion measurement is enabled, we send Meta
and Reddit the PageView, AddToCart, InitiateCheckout, AddPaymentInfo, and Purchase events from our server. Those
events may include the page path without arbitrary query data, product identifiers, quantities, order value and
currency, and the respective advertising click identifier when one arrived with the visit. Meta may also
receive normalized SHA-256 hashes of available email, telephone, name, city, region, postal code, country, and
our random visitor identifier. Reddit receives our random visitor identifier and the browser user agent, but
not raw IP addresses, email addresses, telephone numbers, names, or postal addresses. We never send complete
payment-card details. On our .shop landing pages, a separate consent choice shared by the two
landing subdomains controls Meta, TikTok, Reddit, and Microsoft Clarity browser measurement. After consent,
those providers receive the landing page URL, referrer, browser/device and network signals, may set measurement
cookies, and receive a claim_offer event when you select the button that enters the store. They do
not receive form,
account, product, or payment-card data from those landing pages. We also load the Google Ads base tag after
consent on the storefront. It may receive the page URL, referrer,
advertising click identifiers, browser/device information, and the IP address used for its network request, and
may set first-party _gcl cookies. We do not enable enhanced conversions or send form contents,
account data, or payment-card data through this base tag. We also load the TikTok base pixel after consent. It
may receive the page URL, referrer, browser/device information, IP address, and advertising identifiers, and may
set _ttp, ttcsid, and ttclid cookies. Storefront code sends TikTok only
the base page event and does not call identify or commerce-event methods. After the applicable consent,
Microsoft Clarity may collect page URLs, referrers, browser/device and network signals, page rendering,
navigation, clicks, scrolling, and performance data for heatmaps and session playback, and may set
_clck and _clsk cookies. Sensitive input content is masked by default. Meta, Reddit,
Google, TikTok, and Microsoft process measurement data under their own privacy terms. Local event and session
records are retained for 90 days; active consent records are retained for up to 365 days. The visitor cookie
lasts up to 180 days.
You can accept, reject, or change optional cookies at any time. On the storefront, use Cookie settings. On the
.shop landing pages, use your browser's cookie controls to remove the saved choice and make a new
selection on your next visit. Selecting necessary only stops analytics,
removes accessible analytics, Google Ads, TikTok, and Clarity cookies, and deletes the local analytics history
and queued Meta and Reddit events linked to that browser. Removing the saved .shop choice and
measurement cookies through the browser applies separately to that domain. Events already
delivered to Meta, Reddit, Google, TikTok, or Microsoft cannot be recalled. We also honor Global Privacy
Control and Do Not Track signals by keeping analytics and conversion measurement disabled. Rejection does not
reduce access to the storefront or landing pages.
We use Google reCAPTCHA on public inquiry and partnership forms to help distinguish legitimate submissions from automated abuse. When those forms are displayed or submitted, Google may process browser, device, cookie, and interaction signals under the Google Privacy Policy and Terms of Service.
5. Marketing Communications
If you subscribe to receive promotional emails, we may send updates regarding new products, company news, and special offers. You may unsubscribe at any time using the unsubscribe link included in our emails.
6. Third-Party Service Providers
We may share information with trusted service providers that assist with payment processing, shipping, website hosting, email communications, fraud prevention, analytics, and other business operations. These providers receive only the information necessary to perform their services.
7. Data Retention
We retain personal information only as long as reasonably necessary to provide our services, comply with legal and accounting obligations, resolve disputes, and enforce our policies. The specific optional analytics periods are described in Section 4.
8. Data Security
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information. While we strive to safeguard your data, no method of electronic transmission or storage can be guaranteed to be completely secure.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the right to request access to, correction of, or deletion of your personal information, or to opt out of certain processing and communications. You can erase this browser's optional analytics history immediately through Cookie settings. Other requests may be submitted using the contact information below. We do not discriminate against anyone for exercising a privacy right.
10. Children's Privacy
Our Site is intended for individuals at least 21 years of age. We do not knowingly collect personal information from individuals under 21 years of age.
11. Changes to This Privacy Policy
Olympus BioLabs may update this Privacy Policy from time to time. Any revisions will be posted on this page with an updated Last Updated date. Continued use of the Site after changes are posted constitutes acceptance of the revised Privacy Policy.
12. Contact Us
Email: support@olympusbiolab.com
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us using the information above.