Privacy Policy
BioChain USA
Effective date: 2026-05-28
Last updated: 2026-05-28
This Privacy Policy explains how BioChain USA (“we,” “us,” “our”) collects, uses, shares, and protects personal information when you visit biochainusa.com (the “Site”) or place an order. It also explains your rights under United States state privacy laws and, where applicable, foreign privacy laws.
This Privacy Policy is part of our Terms of Service. By using the Site you agree to this Policy.
1. Quick summary
We collect the information you give us (name, address, email, phone, payment) and the information your device sends us (IP, browser, pages viewed). We use it to take and ship orders, communicate about orders, comply with law, prevent fraud, and, only with your consent, send marketing. We do not sell your personal information for money. Depending on where you live, you have rights to access, correct, delete, port, and limit certain uses of your information. To exercise a right, email info@biochainusa.com or use the request form linked at the bottom of this page.
2. Who we are
BioChain USA is a Wyoming limited liability company. Our contact information for privacy matters is:
Privacy Inquiries
BioChain USA, Attn: Privacy
1621 Central Ave, Cheyenne, Wyoming 82001
info@biochainusa.com
For purposes of state privacy laws and (where applicable) the EU/UK GDPR, BioChain USA is the controller of personal information collected through the Site.
3. Information we collect
3.1 Information you provide
| Category | Examples |
|---|---|
| Identifiers | Name, email, phone, account username, IP address |
| Contact and shipping data | Billing address, shipping address |
| Commercial information | Order history, products viewed, products purchased, refunds requested |
| Payment information | Last four digits of card, billing zip; full card number processed by our payment processor and not stored by us |
| Communications | Contact-form messages, customer-service emails, chat transcripts, voice recordings of any calls |
| Demographic confirmations | Age (21+ acknowledgement), US-residence acknowledgement, research-use acknowledgement |
| Marketing preferences | Email opt-in, SMS opt-in, preferences |
| User-generated content | Product reviews, ratings, photographs you submit |
3.2 Information collected automatically
| Category | Examples |
|---|---|
| Device and browser data | IP address (general geolocation), user-agent, device identifiers, language, time zone |
| Usage data | Pages viewed, time on page, click paths, referring URL, search terms used on-site |
| Cookie data | Strictly necessary, functional, analytics, and (with consent) advertising cookies. See our Cookie Policy |
3.3 Information we do not collect
We do not knowingly collect: (a) personal information from anyone under 21; (b) precise geolocation; (c) biometric identifiers; (d) protected health information subject to HIPAA; (e) racial or ethnic origin, religious beliefs, political opinions, union membership, genetic data, sex life, or sexual orientation; or (f) full credit-card numbers (those are processed by our payment processor).
4. How we use your information
We use personal information for the following purposes and on the following legal bases (the GDPR-style “legal bases” apply where you are located in a jurisdiction that recognizes them):
| Purpose | Legal basis |
|---|---|
| Process and ship orders, including verification of age and US residency | Performance of a contract |
| Provide customer support and respond to inquiries | Performance of a contract / legitimate interest |
| Send transactional communications (order confirmation, shipping updates, refund/replacement updates) | Performance of a contract |
| Detect, investigate, and prevent fraud, abuse, chargebacks, and prohibited use of products | Legitimate interest / legal obligation |
| Comply with tax, accounting, and regulatory obligations | Legal obligation |
| Improve the Site and our products | Legitimate interest |
| Send marketing communications | Consent (withdrawable at any time) |
| Defend legal claims | Legitimate interest |
We do not engage in profiling that produces legal or similarly significant effects about you, and we do not engage in automated decision-making without human review.
5. Cookies and similar technologies
We use first-party and third-party cookies. Categories:
- Strictly necessary: required for cart, checkout, login, age-gate, security. Cannot be disabled.
- Functional: remember preferences (language, region).
- Analytics: measure traffic and improve the Site (privacy-respecting analytics where available).
- Advertising: only with your consent. If we enable an advertising pixel in the future, the consent banner will identify it before any data is shared.
Our cookie consent banner allows you to accept all, reject non-essential, or customize per category. You can change your preferences at any time via the Your Privacy Choices link in the footer. We honor the Global Privacy Control (GPC) browser signal as a request to opt out of “sale” or “sharing” for advertising. Our separate Cookie Policy lists each cookie used.
6. How we share your information
We share personal information only with service providers we engage to operate the business, and only as needed for them to perform their service. Categories of service providers:
| Category | Purpose | Examples |
|---|---|---|
| Payment processor | Process payment | Identified at checkout |
| Shipping carriers | Deliver orders | USPS, UPS, FedEx |
| Email/SMS service providers | Send transactional and (with consent) marketing communications | Identified in vendor list |
| Analytics provider | Site usage measurement | Identified in cookie banner |
| Tax-calculation service | Calculate sales tax | Avalara or WooCommerce Tax |
| Cloud hosting | Operate the Site | Identified in vendor list |
| Fraud-prevention service | Detect and prevent fraud and chargebacks | Identified in vendor list |
| Legal, tax, and audit advisors | Operate the business | Outside professional firms |
We may also share personal information:
- To comply with law (subpoena, court order, regulatory request, lawful process from FDA, FTC, DEA, state AG, state pharmacy board, state revenue authority, or other authority).
- To enforce our rights (collection, fraud, breach of Terms, intellectual-property infringement).
- In a business transaction (merger, acquisition, financing, dissolution, sale of assets), with notice to you before transfer where required.
- With your consent for any other purpose.
We do not sell your personal information for money. Depending on how some state laws define “sale” or “sharing,” our use of analytics or advertising cookies could be considered “sharing.” You may opt out at any time via the Your Privacy Choices link.
7. International transfers
The Site is hosted in the United States, and we process information in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. By using the Site you consent to this transfer, to the extent consent is a valid basis under your local law.
8. Data retention
We retain personal information only for as long as needed:
| Category | Retention period |
|---|---|
| Order and transaction records (including invoices) | 7 years (US tax and accounting) |
| Customer account credentials and profile | Until account deletion + 30 days backup |
| Customer-service communications | 3 years from last contact |
| Marketing preferences and opt-outs | Indefinite (so we can honor your opt-out) |
| Security and access logs | 24 months |
| Compliance records (acknowledgement timestamps, IP hashes) | 7 years |
| User-generated content (reviews, photos) | Until you delete or we remove it |
After the retention period, information is securely deleted or anonymized.
9. Security
We use commercially reasonable administrative, physical, and technical safeguards designed to protect personal information, including encryption-in-transit (TLS), encryption-at-rest where supported by our hosting provider, role-based access controls, audit logging, and quarterly access reviews. No system is fully secure; we cannot guarantee absolute security. If we discover a security incident affecting your personal information, we will notify you and the appropriate regulators as and to the extent required by applicable law.
To report a suspected security issue, email info@biochainusa.com.
10. Your rights: United States
The rights below depend on your state of residence and on whether you qualify as a “consumer” under that state’s law. We honor all applicable rights regardless of state.
10.1 Rights summary
- Right to know / access: request the categories and specific pieces of personal information we have about you.
- Right to correct: request that we correct inaccurate personal information.
- Right to delete: request deletion (subject to exceptions like ongoing orders, fraud prevention, legal obligations).
- Right to portability: request a copy in a portable, machine-readable format.
- Right to opt out of “sale” or “sharing”: see Your Privacy Choices.
- Right to limit use of sensitive personal information: we collect minimal sensitive info (age confirmation, IP) and do not use it beyond the purposes listed in Section 4; you may request that we limit further use.
- Right to non-discrimination: we will not deny service, charge different prices, or provide a different level of service because you exercised a right.
- Right to appeal (where state law provides): if we deny a request, you may appeal by replying to the denial email; we will respond within the time period required by your state’s law.
10.2 How to exercise a right
Send an email to info@biochainusa.com with the subject “Privacy Request – [STATE]” and include the right you wish to exercise, your name, email used on the Site, order number (if any), and any details that help us locate your information. We will verify your identity by matching the email to our records and may request additional verification for sensitive requests. We will respond within 45 days (or as required by your state’s law), with one possible 45-day extension if reasonably necessary, and notice to you if extended.
10.3 Authorized agents
You may designate an authorized agent to make a request on your behalf. The agent must provide signed authorization, and we may verify your identity directly.
10.4 California (CCPA / CPRA) specific
Categories of personal information we collect, sources, business purposes, and recipients are listed in Sections 3, 4, and 6. We have not “sold” personal information for monetary consideration in the preceding 12 months. We may “share” personal information for cross-context behavioral advertising only with your consent (and not at all if no advertising pixel is enabled). You have the rights in Section 10.1. You may also designate an authorized agent. Shine the Light requests (Cal. Civ. Code §1798.83) may be sent to info@biochainusa.com.
10.5 Other state-specific rights
We honor rights granted under the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, New Hampshire, New Jersey, Minnesota, Maryland, Rhode Island, Nebraska, Kentucky, Tennessee, and Florida, where applicable to you. The verification, response timelines, and appeal mechanisms vary by state; we will follow the law of your state of residence.
11. Your rights: outside the United States
The Site is intended for United States residents. If you access the Site from outside the United States, your local law may grant you rights additional to those in Section 10. Where the EU/UK General Data Protection Regulation applies, you have rights of access, rectification, erasure, restriction, portability, and objection, and you may lodge a complaint with your local supervisory authority. We do not have an EU/UK representative because we do not target the EU/UK market.
12. Marketing communications
We send marketing emails only to people who have opted in. You can unsubscribe at any time by clicking the link in any marketing email or by emailing info@biochainusa.com. If we ever offer marketing SMS, enrollment will require express prior written consent at the time of opt-in, and you can opt out by replying STOP to any message. Standard message and data rates may apply. Message frequency varies. Reply HELP for help. We do not share mobile phone numbers with third parties for their marketing purposes.
13. Children
The Site is restricted to adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If you believe a person under 21 has provided personal information to us, please contact info@biochainusa.com so we can promptly delete it.
14. Third-party links
The Site may link to third-party sites (research literature, regulatory documents, payment processor). We are not responsible for the content or practices of those sites. Review their privacy policies before providing personal information.
15. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be announced on the Site and, where required by law, by email to the address on file. The “Last updated” date reflects the most recent revision. Continued use of the Site after posting constitutes acceptance of the updated Policy. For material changes that affect your rights, we will obtain affirmative consent before applying the change to existing data.
16. Contact
To exercise a privacy right or ask a question about this Policy:
- Email: info@biochainusa.com (subject: “Privacy Request”)
- Mail: BioChain USA, Attn: Privacy, 1621 Central Ave, Cheyenne, Wyoming 82001
- Web: [Privacy Request Form, to be wired]
We will acknowledge receipt within 10 business days.