Privacy Policy

This Privacy Policy applies to personal information under VialTests' control in connection with the Services.

Depending on the circumstances, our handling of personal information may be subject to Canada's Personal Information Protection and Electronic Documents Act (“PIPEDA”) and other applicable privacy legislation.

This Policy does not apply to information handled independently by third parties under their own privacy policies where VialTests does not determine the purposes and means of that processing.

VialTests is responsible for personal information under its control.

We maintain policies, procedures, and safeguards designed to protect personal information and to support compliance with applicable privacy requirements.

Questions, access or correction requests, and privacy complaints may be directed to VialTests Privacy at hello@vialtests.com (Website: VialTests.com). Please include “Privacy” in the subject line where practical.

The information we collect depends on how you interact with VialTests.

We may collect information such as:

• name;
• email address;
• telephone number;
• billing or mailing information where required;
• information you provide when contacting customer support.

We may collect:

• VialTests order number;
• testing service selected;
• order date;
• amount and currency;
• payment status;
• transaction-related identifiers;
• refund or dispute information;
• order and fulfillment history.

Payment card information may be collected and processed directly by our payment service providers. VialTests does not need to store complete payment-card credentials merely to provide the Services.

To provide testing services, we may process information associated with a submitted sample, including:

• order/sample identifiers;
• requested analysis;
• submission information;
• shipment and receipt status;
• testing workflow information;
• Certificate of Analysis or other testing results;
• communications relating to the sample or results.

Customers should not include unnecessary personal, medical, or other sensitive information with a sample.

Where a customer provides shipment tracking information, we may collect:

• carrier;
• tracking number;
• shipment status;
• delivery events;
• information reasonably necessary to monitor delivery and confirm receipt.

Carrier-reported delivery and VialTests-confirmed sample receipt are separate events.

If you communicate with us, we may retain:

• emails;
• support inquiries;
• feedback;
• refund requests;
• other correspondence;
• information reasonably necessary to respond to the communication.

When you use our website, certain technical information may be generated automatically, including, depending on the technologies actually deployed:

• IP address;
• browser and device information;
• operating system;
• referring page or website;
• pages requested;
• timestamps;
• technical logs;
• security and diagnostic information.

We do not represent that every category above is collected during every visit.

We may collect, use, or disclose personal information for purposes including:

• creating and processing orders;
• providing requested testing services;
• associating submitted samples with the correct order;
• communicating submission instructions;
• monitoring shipment information provided by customers;
• confirming sample receipt;
• administering testing workflows;
• preparing, securing, and delivering testing results;
• operating the Affiliate Program, including referral attribution, commission ledgers, and payout administration when authorized;
• providing customer service;
• responding to questions and complaints;
• processing eligible refunds;
• processing and reconciling payments;
• preventing fraud, misuse, security incidents, and unauthorized access;
• maintaining and improving the reliability and security of the Services;
• complying with legal, regulatory, tax, accounting, contractual, or dispute-resolution requirements;
• establishing, exercising, or defending legal rights;
• maintaining appropriate business and audit records;
• other purposes identified to you at or before collection or otherwise permitted by law.

We seek to limit collection to information reasonably necessary for legitimate identified purposes.

Where consent is required, VialTests seeks consent appropriate to the circumstances and sensitivity of the information.

By voluntarily providing information and requesting Services, you consent to the collection, use, and disclosure of information reasonably necessary to provide those Services, subject to applicable law.

Where information is proposed to be used for a materially different purpose, we will obtain additional consent where required.

You may withdraw consent to certain uses of personal information, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to provide Services where the information is necessary to fulfill an order or legal obligation.

VialTests may use third-party payment processors to securely process payments.

Payment providers may collect payment credentials and other transaction information directly under their own privacy practices and legal obligations.

VialTests may receive information such as:

• payment confirmation;
• transaction identifier;
• payment status;
• amount;
• currency;
• limited payment-method information;
• information necessary for refunds, fraud prevention, accounting, and dispute handling.

We do not intentionally publish payment information or testing information.

VialTests may engage carefully selected service providers that perform functions on our behalf or assist in delivering the Services.

Depending on the services actually used, these may include providers supporting:

• payment processing;
• hosting and infrastructure;
• database or secure storage;
• email delivery;
• customer communications;
• testing and analytical services;
• shipping or tracking integrations;
• security and fraud prevention;
• professional services;
• analytics, if and when deployed.

We seek to provide service providers only the information reasonably necessary for their functions and expect personal information under our control to be handled with appropriate safeguards.

Some providers may process information in jurisdictions outside your province or outside Canada. As a result, information may be subject to lawful access by courts, law-enforcement agencies, regulators, or governmental authorities in those jurisdictions.

VialTests may use qualified third-party service providers to perform or support aspects of testing and analysis.

Information necessary to perform requested testing may be provided to such providers.

We seek to minimize unnecessary personal information associated with samples and testing workflows.

VialTests does not publicly disclose private operational information, testing destinations, or service-provider information where disclosure is not required or appropriate.

VialTests may use cookies or similar technologies that are necessary for website functionality, security, session management, fraud prevention, preferences, or other legitimate operational purposes. In current production, this includes cookies used to support authorized guest order access, optional customer portal sessions, and Affiliate Program referral attribution (a signed referral cookie that may persist for up to thirty days when a visitor uses a valid referral link).

When advertising measurement is enabled by configuration, VialTests may also store a first-party marketing-consent preference cookie that records only whether Meta advertising measurement was previously allowed or refused (for example, granted or denied). That preference does not store your name, email address, phone number, or order details.

VialTests provides a compact Cookie Preferences notice on public website pages and a Cookie Preferences control in the website footer. You may Accept All, Reject All, customize optional categories, or dismiss the notice without choosing. Closing the notice without choosing does not record affirmative consent. Additional detail is in our Cookie Policy.

VialTests may use first-party website analytics provided by its hosting platform to understand aggregate site reliability and traffic. Separately, a Meta Pixel may load only when a stored affirmative marketing-measurement preference is present, and only on selected public marketing pages. Visitors without a stored affirmative preference are not measured by the Meta Pixel. The Pixel is not loaded on checkout, payment, private order, Client Portal, Affiliate Portal, laboratory, internal administrative, or Certificate of Analysis verification pages.

VialTests applies a site-wide Referrer-Policy of no-referrer so that sensitive page addresses and query parameters (for example, checkout URLs that include analyte selections) are not forwarded as browser referrer information when you navigate to another page. The Meta Pixel integration also refuses to emit measurement events when the current page address, document referrer, or document title appears to contain sensitive context.

If you previously allowed marketing measurement and want to withdraw that preference, use Cookie Preferences (footer), clear the VialTests marketing-consent cookie for this site, or contact us using the details in this Policy. While the preference is absent or denied, VialTests does not initialize or emit further Meta Pixel events, and where withdrawal is recorded as denied VialTests attempts to clear first-party Meta cookies set on vialtests.com (such as _fbp). Withdrawal does not unload a third-party script that may already be in browser memory, does not delete cookies controlled solely by Meta on Meta-owned domains, and does not recall or delete events Meta has already received.

Meta Pixel measurement remains inactive until VialTests enables it by configuration after owner approval, and even when enabled it remains gated on a stored affirmative preference. VialTests does not fabricate consent or treat silence as permission to measure.

If you join the VialTests Affiliate Program, we may collect and process information reasonably necessary to operate that Program, including:

• affiliate account and profile information (such as name, email address, promotion method, and account status);
• consent timestamps for Affiliate Program Terms and Privacy Policy acceptance;
• personalized referral codes and referral-link usage;
• signed referral cookies and related attribution records;
• commission, ledger, refund, reversal, and payout-related transaction records;
• payout recipient details you provide (such as legal name, country, PayPal Business email, and tax-registration status);
• security, fraud-prevention, and audit events associated with affiliate activity.

We use this information to enroll and authenticate affiliates, attribute referrals, calculate and hold commissions, administer payouts when authorized, prevent abuse, provide the affiliate dashboard, and maintain Program integrity.

Affiliate payout providers and other service providers may receive only the information reasonably necessary to perform their functions. Affiliate account information is not made public merely because a person participates in the Program.

Retention of affiliate records follows the retention principles in this Policy, including accounting, tax, dispute-resolution, and fraud-prevention needs.

VialTests may use privacy-conscious analytics or measurement technologies to understand website performance, search discovery, aggregate usage, advertising effectiveness, and service reliability.

When Meta advertising measurement is activated, VialTests may emit a generic PageView signal on selected public marketing pages only when a stored affirmative marketing-measurement preference is present. VialTests does not intentionally configure the Meta Pixel to send customer names, email addresses, phone numbers, hashed contact identifiers, peptide or analyte names, purchased testing-service details, laboratory results, Certificates of Analysis, verification tokens, order line items, free-form customer notes, cryptocurrency wallet addresses, or private portal information.

Even when application code does not attach custom event parameters, a browser Pixel may automatically derive fields such as the current page address, the browser referrer, and the document title. VialTests therefore limits Pixel use to generic public pages, applies no-referrer navigation safeguards, and skips events when those automatic fields appear sensitive.

Browser requests to Meta may still expose ordinary network metadata such as IP address, user-agent, and approximate timing. VialTests cannot fully eliminate that browser-network exposure while a third-party Pixel is used.

Automatic advanced matching, automatic event detection, and unrestricted product-metadata sharing are not used for this integration.

Analytics and advertising measurement systems must not intentionally receive:

• guest access tokens;
• private access URLs;
• complete payment credentials;
• private Certificates of Analysis;
• Submission Sheet content;
• unnecessary sample information;
• private shipping-destination information;
• customer contact identifiers for advertising matching;
• other sensitive information not reasonably necessary for measurement.

We may send transactional or service communications relating to:

• order confirmation;
• payment;
• submission instructions;
• shipment or receipt status;
• testing status;
• results availability;
• customer support;
• security;
• refund requests;
• material service or policy notices.

Transactional communications necessary to provide an order are different from optional promotional communications.

Where VialTests sends commercial electronic messages subject to consent or unsubscribe requirements, we will seek to comply with applicable law.

We may disclose personal information:

• to service providers assisting us in providing the Services;
• to payment providers;
• to testing or analytical service providers as reasonably necessary;
• to professional advisers such as legal, accounting, insurance, security, or compliance advisers;
• in connection with a legitimate corporate transaction, subject to appropriate protections;
• where required by applicable law, legal process, court order, regulatory requirement, or lawful governmental request;
• where reasonably necessary to investigate fraud, security incidents, misuse, or threats;
• to establish, exercise, or defend legal rights;
• with your consent;
• as otherwise permitted or required by law.

We do not sell personal information to third parties for money.

We do not disclose customer testing information publicly merely because a customer uses VialTests.

VialTests uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction.

Safeguards are selected having regard to factors such as the sensitivity, amount, format, and location of information.

No Internet transmission, electronic system, or storage system can be guaranteed to be completely secure. Accordingly, while we take security seriously, we cannot promise absolute security.

Customers are responsible for protecting any private access link, token, email account, device, or other credential through which they access VialTests information.

If you believe information associated with your order has been accessed without authorization, contact us promptly.

Customers should provide only information reasonably necessary to use the Services.

Do not place unnecessary personal, health, medical, financial, or other sensitive information:

• on sample containers;
• in shipment packaging;
• in sample descriptions;
• in free-text communications;
• on submission materials,

unless specifically requested and reasonably necessary.

VialTests retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• providing Services;
• maintaining appropriate business records;
• customer support;
• security;
• fraud prevention;
• dispute resolution;
• accounting and tax requirements;
• enforcing agreements;
• complying with applicable legal obligations.

Different categories of information may have different retention periods.

When information is no longer reasonably required, we may delete, destroy, anonymize, or otherwise dispose of it using measures appropriate to its sensitivity, subject to legal and operational requirements.

Subject to applicable law and permitted exceptions, you may request access to personal information VialTests holds about you and request correction of inaccurate or incomplete information.

We may need to verify your identity before responding.

Certain information may be withheld where permitted or required by law, including information that would reveal another person's personal information, confidential commercial information, privileged information, or information subject to another lawful restriction.

Requests may be sent to hello@vialtests.com with “Privacy Request” in the subject line.

If you have a question or concern about VialTests' privacy practices, contact VialTests Privacy at hello@vialtests.com.

We will review privacy concerns and seek to respond appropriately.

Nothing in this Policy limits any right you may have to contact an applicable privacy regulator.

The Services are intended for persons who have reached the age required to enter into the applicable transaction and use the Services lawfully.

VialTests does not knowingly solicit personal information from children for independent use of the Services.

If we learn that personal information was collected in circumstances requiring parental or guardian consent that was not properly obtained, we may take appropriate steps to delete or otherwise address the information.

Our website may contain links to third-party websites or services.

VialTests is not responsible for the privacy practices, security, availability, or content of third parties operating independently from us.

Review their privacy policies before providing information directly to them.

If VialTests or relevant business assets are involved in a merger, acquisition, financing, reorganization, sale, or similar transaction, information may be disclosed or transferred where permitted by law and subject to appropriate confidentiality and privacy protections.

We may preserve, use, or disclose information where reasonably necessary and legally permitted to:

• comply with applicable law;
• respond to lawful process;
• protect VialTests, customers, service providers, or others;
• investigate fraud or misuse;
• address security incidents;
• enforce agreements;
• establish or defend legal claims.

We may update this Privacy Policy as our Services, technologies, providers, or legal obligations evolve.

The “Last Updated” date indicates when the Policy was most recently revised.

Where a change materially affects how personal information is collected, used, or disclosed, we will take additional steps where required by applicable law, which may include providing notice or seeking consent.

Questions about this Privacy Policy or VialTests' handling of personal information may be directed to VialTests Privacy at hello@vialtests.com (Website: VialTests.com).