Legal
Privacy Policy
Last updated 1 September 2026
We collect what is needed to ship your order, answer your questions and keep the site working — and nothing we cannot explain on this page.
What we collect
- Order details: name, email, shipping address, order contents and order history.
- Payment: processed by Stripe. We receive a confirmation and the last four digits of the card; we never see or store full card numbers.
- Support correspondence: emails you send us, including lot numbers and photographs.
- Site data: the cart, age confirmation and layout preferences are stored in your browser's local storage. Server logs record IP address, browser type and pages requested.
How we use it
To fulfil and ship orders, send confirmations and tracking, answer support requests, prevent fraud and misuse, comply with tax and record-keeping law, and — only if you opt in — send lot release alerts. We do not sell personal information and we do not run advertising.
Who we share it with
Service providers acting on our instructions: Stripe (payment), our shipping carriers (name and address on the label), our email provider, and our hosting provider. Each receives only what its function requires. We disclose information to authorities where the law requires it.
Cookies and local storage
The site uses no advertising or third-party tracking cookies. Local storage holds your cart, your age confirmation (30 days) and display preferences; clearing your browser storage removes them. Google Fonts are loaded from Google's servers, which receive your IP address in the request.
Lot release alerts
If you subscribe, we store your email address and send one message per lot release or certificate update. Every message includes an unsubscribe link, and you can ask us to delete the address at any time.
Security
Order data is transmitted over TLS and held on access-controlled systems. Payment card data never touches our servers. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.
How long we keep it
Order and transaction records are retained for as long as tax and accounting law requires — typically seven years. Support correspondence is kept for three years. Alert subscriptions are kept until you unsubscribe.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict its use or receive a copy. To make a request email jack@elementlabsusa.com; we respond within 45 days and may need to verify your identity first.
Children
This site is for adults aged 21 and over. We do not knowingly collect information from anyone under 21 and will delete it if we learn we have.
International transfers and changes
We operate from the United States and our providers may process data there. Where information is transferred out of your region we rely on the provider's standard contractual safeguards. We may update this policy; material changes are noted here with a new date.