Privacy Policy

Effective Date: May 7, 2026

Glunova Biotech LLC (“Glunova Biotech,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of individuals who interact with our website and business operations. This Privacy Policy describes how we collect, use, store, share, and protect personal data in the context of our business-to-business (B2B) relationships with research institutions, universities, contract research organizations, and qualified industrial laboratories worldwide.

This policy is designed to comply with applicable data protection regulations, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy frameworks. If you have questions about this policy or wish to exercise any data rights, contact us at dylan.tom2012@gmail.com with the subject line “Privacy Inquiry.”

Data We Collect

We collect personal data only to the extent necessary to conduct our B2B business operations. The categories of data we collect include:

Contact Form Submissions — When you submit an inquiry through our website contact form, we collect your name, email address, institutional affiliation, country, product interest, and the content of your message. This data is used solely to respond to your inquiry.
SDS and Documentation Requests — When you request Safety Data Sheets or other technical documentation, we collect your institutional email address, name, professional role, country, and intended research use. This information is required to verify eligibility for regulated documentation and to maintain a request log for regulatory compliance purposes.
Order Data — When you place an order or request a quote, we collect institutional billing and shipping addresses, contact details for the ordering individual and receiving contact, product names and quantities, and payment-related information processed through our payment system. Order data is necessary for contract performance.
Website Analytics — Our website uses WP.com Stats (powered by Jetpack) to collect anonymized visitor analytics including page views, traffic sources, and general geographic region. This data is aggregated and does not identify individual visitors. No personally identifiable behavioral tracking is performed through this analytics system.

We do not collect sensitive personal data (health data, biometric data, financial account credentials) through our website or order processes. We do not use automated profiling or decision-making that produces legal or similarly significant effects on individuals.

How We Use Data

Personal data collected by Glunova Biotech LLC is used exclusively for the following purposes:

B2B Inquiry Response — Responding to product inquiries, quote requests, and general communications submitted through our website or email.
Order Fulfillment — Processing confirmed orders, coordinating production scheduling, preparing shipping documentation, and arranging dispatch.
COA and SDS Delivery — Sending Certificates of Analysis and Safety Data Sheets to verified research institutions as requested or required for order completion.
Customer Communication for Active Orders — Communicating with institutional contacts regarding order status, shipping updates, documentation requests, and quality inquiries related to active or recent orders.
Regulatory Compliance — Maintaining export records, customs documentation, and traceability logs as required by applicable US export regulations and international trade compliance obligations.
Service Improvement — Using anonymized analytics data to understand how our website is used and to improve content, navigation, and the overall user experience.

We do not use personal data for marketing to individuals without explicit consent, and we do not engage in email marketing to institutional contacts beyond communications directly related to their active inquiry or order relationship with us.

Data Sharing

Glunova Biotech LLC shares personal data with third parties only where necessary to fulfill our business obligations or comply with legal requirements. We do not sell, rent, or trade personal data to any third party for commercial purposes.

Shipping Carriers — We share recipient name, institutional address, and contact details with DHL, FedEx, UPS, or other engaged carriers solely for the purpose of completing shipment and delivery. Carrier data handling is governed by their respective privacy policies.
Customs Authorities — Export and import documentation including institutional names, addresses, and product information is disclosed to relevant customs and border control authorities as required by law for the clearance of international shipments.
Payment Processors — Payment information (wire transfer details, if applicable) is handled through secure payment channels. We do not store complete payment account details internally.
IT and Platform Providers — Our website is hosted on WordPress.com (Automattic, Inc.), which provides hosting infrastructure and analytics. Automattic’s data processing is governed by their own GDPR-compliant data processing agreements.

All third-party service providers engaged by Glunova Biotech LLC are contractually required to handle personal data in accordance with applicable data protection laws and are not permitted to use the data for any purpose beyond the specific service being provided.

Data Retention

We retain personal data for the minimum period necessary for the purposes described in this policy, taking into account our legal and regulatory obligations:

Order Records — Retained for five (5) years from the date of shipment, consistent with our lot traceability obligations and applicable export record-keeping requirements under US EAR/ITAR regulations.
Inquiry Records — Contact form submissions and general inquiry correspondence not resulting in an order are retained for twelve (12) months from the date of last communication, after which they are deleted from our active systems.
SDS Request Logs — Documentation request records (including institutional identity and intended use) are retained for twenty-four (24) months for regulatory audit purposes, then deleted.
Website Analytics — Aggregated, anonymized analytics data is retained per WP.com Stats standard practices. No individually identifiable analytics data is retained by Glunova Biotech LLC.

Your Rights Under GDPR (EU/EEA Institutions)

If you are located in the European Union or European Economic Area, you have the following rights with respect to your personal data under the General Data Protection Regulation (GDPR):

Right of Access — You may request confirmation of whether we hold personal data about you and a copy of that data.
Right to Rectification — You may request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure — You may request deletion of your personal data. This right is subject to limitations where retention is required by applicable law (for example, order records required for export compliance).
Right to Restriction of Processing — You may request that we restrict the processing of your personal data in certain circumstances (for example, while a rectification request is being assessed).
Right to Data Portability — Where processing is based on consent or contract performance and carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
Right to Object — You may object to processing of your personal data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, contact us at dylan.tom2012@gmail.com with the subject line “Privacy Inquiry — GDPR Request.” We will acknowledge your request within 72 hours and provide a substantive response within thirty (30) calendar days. If additional time is required for complex requests, we will notify you within the initial 30-day window.

You also have the right to lodge a complaint with your national data protection supervisory authority if you believe your data has been processed unlawfully.

California Privacy Rights (CCPA)

If you are a resident of California or represent a California-based institution, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Glunova Biotech LLC extends the following rights to California individuals:

The right to know what personal information we collect, use, disclose, or sell (we do not sell personal information).
The right to delete personal information we have collected, subject to applicable legal retention requirements.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information (not applicable — we do not sell or share personal information for cross-context behavioral advertising).
The right to non-discrimination for exercising your privacy rights.

To submit a CCPA rights request, contact dylan.tom2012@gmail.com with the subject line “Privacy Inquiry — CCPA Request.”

International Data Transfers

Glunova Biotech LLC is a US-based company. Personal data submitted by individuals in the European Union, United Kingdom, or other jurisdictions with data transfer restrictions is transferred to and processed in the United States. Where required by applicable law (including GDPR Chapter V), such transfers are made under appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission, or equivalent mechanisms applicable to UK transfers (International Data Transfer Agreements). By submitting an inquiry or placing an order with Glunova Biotech LLC, EU/UK institutional contacts acknowledge that their data will be processed in the United States under these transfer mechanisms.

Cookies

Our website uses a limited set of cookies necessary for operation and analytics:

Essential Session Cookies — Used by WordPress.com to manage website sessions. These cookies are strictly necessary for the website to function and do not collect personal data for tracking purposes.
Analytics Cookies (WP.com Stats / Jetpack) — Used to collect anonymized visitor statistics. These cookies measure aggregate site usage (pages visited, traffic sources, session counts) without identifying individual visitors. Analytics cookies can be disabled by setting your browser to reject third-party cookies or by enabling the Do Not Track (DNT) header in your browser settings. Glunova Biotech LLC honors DNT signals for analytics purposes.

We do not use advertising cookies, retargeting pixels, or third-party behavioral tracking technologies on this website.

Security

Glunova Biotech LLC implements technical and organizational security measures appropriate to the nature and volume of personal data we process:

All data transmitted between your browser and our website is encrypted using TLS 1.3 or higher.
Access to customer data within our internal systems is restricted to authorized personnel with a legitimate business need.
Our website is hosted on WordPress.com infrastructure, which maintains its own security certifications and practices.
We conduct periodic reviews of access controls and data handling procedures.

While we apply commercially reasonable security measures, no system is entirely immune to security incidents. In the event of a data breach affecting your personal data, we will notify affected individuals and relevant supervisory authorities as required by applicable law.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. Material changes will be communicated by updating the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services following a material change constitutes acceptance of the updated policy.

Contact

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Glunova Biotech LLC
701 Tillery Street, Unit 12 3226
Austin, TX 78702, USA
Email: dylan.tom2012@gmail.com (Subject: “Privacy Inquiry”)
Phone: +1 (586) 248-1681