Privacy Policy
Varden Bioscience is designed to collect as little personal information as is reasonably necessary to operate the research catalogue, fulfil orders, provide support, protect the service, and meet applicable record-keeping obligations.
Who is responsible for your data
The legal operator of Varden Bioscience is responsible for the processing described here. The operator identity, registered address, registration details, and applicable jurisdiction will be published in the Legal Notice before public ordering is enabled. Privacy enquiries can be sent to support@varden-bioscience.com.
No customer account required
Customer account registration is disabled. Orders are placed through guest checkout. We do not require customers to maintain a profile or password on this website.
Information processed for an order
- name, email address, billing and delivery address, and destination country;
- ordered products, selected warehouse, prices, shipping information, and order status;
- payment status and a transaction reference where supplied by the selected payment method;
- support correspondence needed to resolve an order or delivery issue.
The WooCommerce order record is deliberately configured not to retain the customer’s IP address or browser user-agent. Full payment credentials, wallet recovery phrases, private keys, and authentication secrets must never be sent to us and are not requested by Varden Bioscience.
Private review invitations
Verified-purchase reviews are submitted through a time-limited private invitation after delivery. The invitation code is stored only as a cryptographic hash and is linked to the relevant order and product for verification. A published review contains the rating, review text, and the public label “Verified purchaser”. It does not publish or store a reviewer name, email address, website, or IP address in the review record.
Essential cookies and local storage
The site may use essential first-party cookies or equivalent browser storage for the cart, checkout session, warehouse selection, security, and administrator authentication. These functions are necessary to operate the shop. We do not use advertising cookies, behavioural profiling, or third-party analytics.
Short-lived security logs
The web server records a limited security log containing the source IP address, time, request method, requested path without query parameters, response status, and response size. Browser user-agent and referring-page information are not recorded in this access log. Logs are access-restricted and rotate daily with only two older daily files retained. Error records may be kept for the same short operational cycle where needed to diagnose faults or attacks.
How information is used
- to validate warehouse eligibility and fulfil the order;
- to communicate order, delivery, verification, and support information;
- to prevent abuse, investigate faults, and secure the website;
- to reconcile payments and maintain the minimum accounting records required by applicable law;
- to establish, exercise, or defend legal claims where necessary.
Service providers and recipients
Personal information is shared only where necessary with the relevant fulfilment warehouse and delivery provider, an enabled payment provider, our email provider Proton, and infrastructure providers supporting the service. The application is hosted on a server in Sweden. Recovery backups are encrypted on the server before they are uploaded to Storj storage in the EU region. Backup credentials and encryption keys are kept separately.
Information may also be disclosed to professional advisers or competent authorities when required by applicable law or necessary to protect legal rights. We do not sell customer data and do not provide it to advertising networks or data brokers.
Payments
Payment processing will be described here before a payment method is enabled. Where a third-party payment provider is selected, information required to complete and reconcile the transaction is processed under that provider’s own privacy terms. Varden Bioscience retains only the payment status and transaction reference reasonably necessary to match the payment to an order and maintain required records.
Retention and deletion
Contact and delivery details are retained only for fulfilment, support, fraud prevention, and any mandatory legal period. After successful delivery and once those purposes no longer apply, directly identifying order details are deleted or anonymised while the minimum non-identifying accounting record is retained where required. The final operational retention schedule will be confirmed before public ordering is enabled.
Encrypted recovery backups expire through an automatic rotation that currently keeps fourteen daily and eight weekly recovery points. Deletion from the live system therefore propagates through the backup cycle rather than removing every historical recovery point immediately.
Your choices and rights
Depending on the law that applies to you, you may request access, correction, deletion, restriction, objection, or a portable copy of personal information associated with you. We may need limited information to verify the request and may retain records that cannot lawfully be deleted. Contact support@varden-bioscience.com.
Changes to this policy
This policy is updated when the service, payment methods, providers, or legal requirements change. Material changes will be presented on this page before they apply to new orders.