Privacy Notice

Westbrook Bioscience LLC · All policies

This policy explains the rules and practices that apply to Westbrook's website and organizational research-material services. It should be read together with the other Westbrook website policies.

1 Scope

This Privacy Notice explains how Westbrook Bioscience LLC collects, uses, discloses, retains, and protects personal information through its website, customer qualification, transactions, communications, and related operations. It applies to representatives of applicant and purchasing organizations, website visitors, vendors, and people who contact Westbrook. It does not govern a third party's independent website or service.

Westbrook's service is designed for organizational purchasers. Westbrook does not seek medical information. Do not send symptoms, diagnoses, prescriptions, treatment history, genetic information, photographs of a body, or other patient or personal health information.

2 Information collected

Westbrook may collect identifiers and contact information, such as name, work email, organization, job title, account identifier, billing and shipping addresses, signature, and communications. If supplied for qualification or legally required screening, Westbrook may collect organizational credentials, professional qualifications, proof of authority, tax documentation, institutional affiliation, laboratory information, and end-user or end-use information.

Transaction information may include requested products, quotations, purchase orders, invoices, payment status, taxes, discounts, order history, shipment details, returns, complaints, recalls, and related records. Payment providers may collect complete card, bank, or other payment credentials under their own privacy notices. Westbrook should not receive or store full payment credentials unless its published notice and security program are updated accordingly.

Technical information may include IP address, device and browser characteristics, timestamps, pages and actions, referring pages, session and authentication records, cookie or similar identifiers, security events, and approximate location inferred from an IP address. Communications may include emails, support requests, application responses, survey responses, complaint information, and records of consent or policy acceptance.

Westbrook may obtain information directly from a user; from the user's organization; from payment, fraud-prevention, identity, address, sanctions, shipping, analytics, security, and service providers; and from public professional, institutional, corporate, or government sources used for verification.

3 Purposes of use

Westbrook may use personal information to operate and secure the website; create and administer accounts; verify organizations, representatives, authority, facilities, intended use, and receiving sites; detect prohibited use, diversion, fraud, sanctions, and security threats; review and fulfill orders; process payments and taxes; provide documents and support; manage shipping, returns, complaints, corrections, withdrawals, and recalls; maintain traceability and compliance records; enforce agreements; respond to legal process; establish or defend legal claims; administer vendors; and conduct accounting, insurance, audit, and business-continuity activities.

Westbrook may send transactional communications concerning applications, accounts, security, orders, invoices, shipping, product documents, complaints, recalls, policy changes, and other service matters. Marketing communications, if used, will be sent according to applicable consent and opt-out requirements. Unsubscribing from marketing does not stop necessary transactional, safety, recall, or legal messages.

4 Disclosure of information

Westbrook may disclose information to providers that support hosting, ecommerce, authentication, payment, accounting, tax, fraud prevention, sanctions screening, analytics, email, document storage, laboratory testing, fulfillment, shipping, customer support, security, and professional advice. Providers should receive only information reasonably necessary for their functions and should be subject to appropriate contractual and security controls.

Westbrook may disclose information to a purchaser's organization or authorized personnel; to carriers, customs parties, insurers, laboratories, auditors, attorneys, accountants, and consultants; to authorities or other parties when reasonably necessary to comply with law, legal process, sanctions, safety duties, an investigation, a recall, or protection of rights; and in connection with a proposed or completed merger, financing, reorganization, asset transfer, or sale, subject to appropriate protections.

If a practice constitutes sale, sharing, or targeted advertising under applicable law, Westbrook will provide the required notice and opt-out method before enabling it.

5 Retention

Westbrook retains information for periods reasonably necessary for the disclosed purposes, including customer qualification, contract administration, product and lot traceability, complaints, recalls, fraud prevention, security, tax, accounting, insurance, disputes, and legal obligations. Retention varies by record type and risk. Information is deleted, deidentified, or securely disposed of when it is no longer reasonably needed, subject to backups, legal holds, and technical limitations.

6 Security

Safeguards may include access limitation, multifactor authentication, encryption in transit, vendor review, logging, backups, patching, incident response, and secure disposal, as appropriate to the information and operations. The website uses password hashing and expiring account sessions. No method of transmission or storage is completely secure, and Westbrook cannot guarantee absolute security. Users must protect credentials, use unique passwords, and report suspected unauthorized account activity to [email protected].

7 Privacy choices and requests

Users may request account corrections by emailing [email protected]. Marketing, if introduced, will include applicable opt-out instructions. Depending on residence, applicable law, and statutory thresholds, a person may have rights to request access to or confirmation of processing; correction; deletion; portability; information about categories, sources, purposes, and disclosures; or an opt-out from sale, sharing, targeted advertising, or certain profiling. A person may also have a right not to receive discriminatory treatment for exercising an applicable privacy right.

Submit a request to [email protected] with the subject Privacy Request. Describe the request, the state or country of residence, the relationship with Westbrook, and the email or account involved. Westbrook will verify identity and authority proportionately to the request and sensitivity of the information. An authorized agent may be required to provide proof of authority, and Westbrook may confirm the request directly with the individual.

Westbrook may deny or limit a request where permitted, including when identity cannot be verified or retention is necessary for security, fraud prevention, transaction completion, product traceability, recalls, legal compliance, contracts, or legal claims. Westbrook will provide any legally required explanation and appeal method.

8 Cookies and browser controls

Westbrook uses cookies and similar technologies as described in the Cookie Notice. Necessary technologies support security, authentication, preferences, carts, checkout, and fraud prevention. Optional analytics or advertising technologies will be used only when accurately disclosed and configured with required choices. Browser settings may block some technologies but may also impair necessary functions.

9 Children

The website and services are directed to organizational purchasers and are not directed to children under 13. Westbrook does not knowingly collect personal information from children under 13. If a parent or guardian believes a child supplied information, contact [email protected] so Westbrook can investigate and take appropriate action. Account and purchasing functions require an authorized adult representative.

10 International processing

Westbrook operates in the United States. Information may be processed in the United States and in other locations where disclosed providers operate.

11 Changes and contact

Westbrook may update this Notice as practices or legal requirements change. The effective date will be updated, and material changes will be communicated as required.

Privacy questions and requests may be sent to Westbrook Bioscience LLC at [email protected].

Data Minimization

Westbrook seeks to collect information reasonably necessary for qualification, transactions, security, traceability, and legal duties. Users should not submit government identification numbers, medical information, or unrelated sensitive information unless Westbrook specifically requests information through an approved secure channel for a lawful purpose.

Automated and Manual Review

Security, fraud, address, and account signals may help prioritize applications or transactions for review. Westbrook does not intend to rely solely on automated processing to make a decision producing legal or similarly significant effects. Personnel may review relevant context and request additional information.

Business Records and Deidentified Information

Information maintained solely in an employment, supplier, corporate-representative, legal, or deidentified context may be treated differently where applicable law provides an exemption. Westbrook may use aggregated or deidentified information for security, quality, operations, and planning and will not attempt to reidentify it except as permitted for testing or legal compliance.

Policy Administration

Westbrook may revise this policy prospectively when its website, products, controls, or legal obligations change. The effective date identifies the current version. Questions about this policy may be sent to [email protected]. This policy does not authorize a product, transaction, or use prohibited by law or another Westbrook policy.

Website analytics preferences

Optional first-party analytics are collected only after you choose Allow analytics. You can decline or withdraw future collection through Privacy preferences. Global Privacy Control and Do Not Track signals disable collection. This choice does not affect account or shopping functionality.

With permission, we record page paths without query strings, shopping events, a random session identifier that expires after 30 minutes of inactivity, screen-size device category, referring domain, and country code when supplied by a configured trusted hosting proxy. We do not store IP addresses, exact location, form contents, or account identifiers in analytics. Account and admin routes are excluded. These records are used to measure website activity and improve the site; no third-party analytics service receives them.

The analytics choice is stored in your browser as wb_analytics_choice_v1 until you change it or clear browser storage. The random session is stored in session storage as wb_analytics_session. Analytics event records are deleted after 90 days during collection or scheduled maintenance. Opting out stops future analytics collection; it does not automatically erase previously collected records. Analytics reporting covers consenting activity only and is separate from order, payment, and account records.

Operational contact and order communications

Contact and quotation submissions are stored in our website database. When configured, we send contact, quotation, account-review and order-status records to a Google Sheets and Apps Script workflow for staff review and transactional email. These records may include contact name, email, organization, message content, order number, status and amount. They are used to handle the inquiry or transaction, not to enroll you in marketing. Email and automation delivery are subject to service availability and account limits. Shipping addresses and parcel details are shared with the shipping service when staff requests a label. Test integrations are separate from live payment and postage processing.

Privacy Notice · Cookie Notice · Research use & eligibility · All policies