Privacy Policy

RECMA Scientific ("we," "us," or "our") operates https://recmascientific.com(the "Site"), an e-commerce platform for research-grade laboratory materials. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our Site, place orders, or contact customer support.

By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Site.

Order & Shipping Data: Full name, shipping address, city, state/province, postal code, country, phone number, and email address provided at checkout.

Payment Information: We do not store credit card or bank account data. Cryptocurrency payments are processed by NOWPayments, a third-party payment gateway. We retain transaction IDs, payment status, cryptocurrency type, and wallet addresses solely for order fulfillment and dispute resolution.

Technical Data: IP address, browser type and version, device identifiers, operating system, pages visited, referring URLs, and session timestamps collected automatically through server logs and analytics tools.

Communications: Content of emails or support messages you send to [email protected].

• Process, fulfill, and ship research product orders
• Send order confirmations, payment receipts, and shipping updates
• Respond to customer inquiries and support requests
• Detect and prevent fraud, abuse, and unauthorized transactions
• Comply with applicable legal, tax, and regulatory obligations
• Improve Site performance, security, and user experience

We do not use your information for targeted advertising based on sensitive categories, and we do not sell personal data.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data under the following legal bases:

• Contract performance: Processing necessary to fulfill your order
• Legitimate interests: Fraud prevention, Site security, and service improvement
• Legal obligation: Compliance with applicable laws and lawful requests
• Consent: Where required for optional communications (you may withdraw consent at any time)

We do not sell, rent, or trade your personal information. We may share data with trusted service providers who assist us in operating the Site, solely to perform services on our behalf:

• Shipping and logistics partners (delivery address only)
• NOWPayments (cryptocurrency payment processing)
• Email service providers (transactional notifications)
• Cloud hosting and infrastructure providers
• Law enforcement or regulatory authorities when required by valid legal process

All third-party processors are contractually obligated to protect your data and use it only for the specified purpose.

Your information may be processed in countries outside your country of residence, including the Netherlands and other jurisdictions where our service providers operate. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Order records are retained for a minimum of three (3) years for accounting, tax compliance, dispute resolution, and reshipment eligibility verification. Server logs are retained for up to twelve (12) months unless a longer period is required for security investigations. You may request deletion of non-essential data subject to legal retention requirements.

We implement industry-standard security measures including HTTPS/TLS encryption, secure server infrastructure, access controls, and restricted personnel access to order data. No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Opt-out of sale — we do not sell personal data (CCPA/CPRA)

To exercise these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law). EEA residents may also lodge a complaint with their local data protection authority.

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale or sharing of personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising.

Our Site and products are intended for qualified researchers and institutional buyers aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such data, contact us immediately for deletion.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the Site after changes constitutes acceptance of the revised policy.

For privacy-related inquiries, data subject requests, or complaints, contact: [email protected]