Privacy policy

Who we are

ExosomeShop ("we", "us") operates exosomeshop.com from California, United States. Questions about this policy go to privacy@exosomeshop.com.

What we collect

Clinic intake form

When you submit the intake form we receive the information you enter: practice name and type, state, professional license number, website, your name, role, email, phone, product interests, expected volume and any message. Form submissions are processed by Netlify, our hosting provider, and stored in our Netlify account and our email.

Email

If you email us, we keep the message and your address for as long as needed to respond and to keep a record of the correspondence.

Server logs

Netlify records standard server logs, including IP address, browser type, referring page and pages requested, for security and capacity purposes. These are retained for a limited time under Netlify's own policy.

Fonts

Typefaces load from Google Fonts. Google may see your IP address when the font files are requested. A browser content blocker will prevent this and the site will use system fonts instead.

Cookies

We set no cookies and run no analytics or advertising scripts.

How we use it

• To verify that a practice is licensed before opening a wholesale account.
• To reply to your request with pricing, documents and shipping information.
• To fulfil orders and provide support once an account is open.
• To keep records required by law, including for product traceability and recalls.

We do not sell personal information. We do not share it with third parties for their own marketing. We do not send marketing email unless you have asked for it, and every marketing email includes an unsubscribe link.

Who we share it with

• Netlify, which hosts the site and processes form submissions.
• Email and document providers we use to correspond and to issue quotes and certificates of analysis.
• Carriers, who receive the shipping address and contact details needed to deliver an order.
• Regulators or courts, where the law requires it.

How long we keep it

Intake requests that do not become accounts are deleted within 12 months. Account and order records are kept for as long as the account is open and for seven years afterward, to meet tax and product-traceability obligations.

Your rights

You can ask us what personal information we hold about you, ask us to correct or delete it, and ask us not to contact you. California residents have additional rights under the CCPA, including the right to know, delete and opt out of sale; we do not sell personal information, so there is nothing to opt out of. EU and UK residents have rights under the GDPR and UK GDPR. To exercise any of these, email privacy@exosomeshop.com. We will respond within 30 days and will not treat you differently for asking.

Security and children

The site is served over HTTPS. Form data is encrypted in transit. Access to submissions is limited to staff who need it.

This site is intended for professionals and adults. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy we will update the date at the top. Material changes affecting account holders will be sent by email.