Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account, place an order, or contact us. This includes:

• Identity data: first name, last name, email address
• Contact data: billing and shipping address, phone number
• Order data: products purchased, order history, transaction records
• Account data: username, password (stored in encrypted form)
• Technical data: IP address, browser type, device type, pages visited, referring URLs (collected via server logs and cookies)
• Communications: messages you send to our support team

We do not collect or store payment card numbers on our servers. All payment processing is handled by our third-party payment processor in compliance with PCI-DSS standards.

2. How We Use Your Information

We use collected information for the following purposes:

• Processing and fulfilling your orders
• Managing your account and providing customer support
• Sending transactional emails (order confirmation, shipping updates, COA availability)
• Complying with legal obligations, including age and research-use verification records
• Detecting and preventing fraud
• Improving our website and product offerings through aggregate analytics
• Sending marketing communications, where you have opted in (you may unsubscribe at any time)

We do not sell your personal information to third parties.

3. Legal Basis for Processing (GDPR)

Where applicable, we process your data under the following legal bases:

• Contract performance: processing necessary to fulfill your order
• Legal obligation: compliance with applicable laws
• Legitimate interest: fraud prevention, site security, aggregate analytics
• Consent: marketing emails and optional cookies (which you may withdraw at any time)

4. Cookies

We use the following types of cookies:

• Essential cookies: required for the site and shopping cart to function (WooCommerce session, WordPress login). These cannot be disabled.
• Analytics cookies: help us understand how visitors use our site (e.g., Google Analytics). These are only set if you consent.
• Preference cookies: remember settings such as currency and language.

You may manage cookie preferences through our cookie banner or your browser settings.

5. Data Sharing

We share your information only as necessary with trusted third parties who assist in operating our business, including:

• Payment processors: to handle transactions securely
• Shipping carriers: to deliver your order
• Email service providers: to send transactional and marketing emails
• Analytics providers: to help us understand site usage (data is anonymized where possible)
• Legal and regulatory authorities: when required by applicable law

All third-party processors are contractually bound to protect your data and may not use it for any purpose other than providing services to us.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, including:

• Order records: 7 years (for accounting and legal compliance)
• Account data: for the duration of your active account, plus 2 years after closure
• Communications: 2 years from last contact

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data (subject to legal retention obligations)
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: where processing is consent-based, withdraw at any time

California residents may exercise additional rights under the CCPA, including the right to know what personal information is collected and the right to opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, contact us at the address below.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data transmission, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our site is intended for users who are 21 years of age or older. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or wish to exercise your data rights, please contact us:

High Level Compounds
Email: privacy@highlevelcompounds.com