Privacy Policy

Last updated: April 23, 2026
This policy applies to helyxlab.com and all associated services. Helyxlab is based in the United States and serves customers in the US and European markets.
Helyxlab is a research compound company. All products are sold for research and educational purposes only and are not intended for human consumption. This privacy policy governs how we collect, use, and protect your personal information when you visit our website or place a research order.

Who we are

Helyxlab (“we”, “us”, “our”) is a research compound company incorporated and headquartered in the United States, operating helyxlab.com — a platform providing pharmaceutical-grade peptide compounds for in-vitro research and educational purposes. We serve customers across the United States, the European Union, the United Kingdom, and internationally.

 

We are committed to protecting the privacy of everyone who visits our website, subscribes to our communications, or places a research order. This policy complies with applicable US federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and with the European Union General Data Protection Regulation (GDPR) and UK GDPR for our European and UK customers. If you have any questions about this policy or how we handle your data, contact us at: privacy@helyxlab.com

What information we collect

Information you provide directly

  • Name and email address when you sign up to our research list or create an account
  • Shipping address and billing information when you place a research order
  • Communications you send us — emails, contact form submissions, support requests
  • Professional or research context if voluntarily provided during account creation

 

Information collected automatically

  • IP address and general geographic location (country/region level)
  • Browser type, device type, and operating system
  • Pages visited, time spent on site, and navigation path
  • Referring website or search term that brought you to our site
  • Cookie and tracking data — see Section 6 for full details

 

Information we do not collect

  • We do not collect sensitive personal data including health conditions, medical history, or intended use of research compounds
  • We do not collect payment card details directly — all payment processing is handled by our third-party payment processor and is subject to their privacy policy

How we use your information

We use the information we collect for the following purposes:

 

To fulfil research orders

We use your name, shipping address, and order details to process and deliver your research order, communicate order status, and handle any returns or queries.

To communicate with you

If you have subscribed to our research list or placed an order, we may send you emails about new compounds, protocol updates, regulatory news, and exclusive offers. You can unsubscribe at any time using the link in any email we send.

To improve our platform

We use anonymised and aggregated analytics data to understand how visitors use the site, which pages perform well, and where we can improve the experience. This data does not identify you personally.

To comply with legal obligations

We may be required to retain certain transaction records or respond to lawful requests from regulatory authorities. We will always handle such requests in accordance with applicable law.

Legal basis for processing

Where applicable — including for visitors located in the European Union, United Kingdom, or other jurisdictions with similar data protection frameworks — we process your personal data on the following legal bases:

 

  • Contract: to fulfil your research order and provide the services you have requested
  • Legitimate interests: to improve our platform, prevent fraud, and communicate relevant updates to our research community
  • Consent: for marketing communications — you can withdraw consent at any time by unsubscribing
  • Legal obligation: where we are required to retain or disclose data by applicable law

Who we share your information with

We do not sell your personal data. We do not share your data with advertisers or third parties for their own marketing purposes. We share data only in the following limited circumstances:

 

Service providers

We work with trusted third-party service providers who process data on our behalf, including:

  • Payment processors — to handle transaction security and fraud prevention
  • Shipping and logistics partners — to fulfil and track your research order
  • Email marketing platform (Klaviyo) — to manage our subscriber list and send communications
  • Website analytics (e.g. Google Analytics) — to understand site performance
  • Cloud hosting and infrastructure providers — to operate our platform securely

 

All service providers are contractually required to process your data only for the purposes we specify and to maintain appropriate security standards.

 

Legal requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of our users or the public.

 

Business transfers

If Helyxlab is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

Cookies and tracking

We use cookies and similar tracking technologies to operate our website and understand how it is used. You can control cookie preferences through your browser settings or our cookie consent banner.

 

Cookies we use

  • Essential cookies — required for the website to function, including session management and shopping cart functionality. These cannot be disabled.
  • Analytics cookies — used to understand how visitors interact with our site (pages visited, time on site, traffic source). We use anonymised data only.
  • Marketing cookies — used to understand the effectiveness of our marketing and, where consented to, to show relevant content. These are only activated with your consent.

 

You can withdraw cookie consent at any time by adjusting your browser settings or using the cookie preference centre on our website. Please note that disabling certain cookies may affect the functionality of the site.

How long we keep your data

  • Order and transaction records: retained for 7 years in line with standard accounting and legal requirements
  • Account information: retained for as long as your account is active, plus 2 years after closure
  • Marketing list subscribers: retained until you unsubscribe or request deletion
  • Analytics data: retained in anonymised form indefinitely; identifiable data deleted after 26 months
  • Support communications: retained for 2 years from the date of last contact

Your rights

Depending on your location, you may have the following rights regarding your personal data:

 

  • Access — the right to request a copy of the personal data we hold about you
  • Correction — the right to request that inaccurate data be corrected
  • Deletion — the right to request that your personal data be deleted, subject to legal retention requirements
  • Portability — the right to receive your data in a structured, machine-readable format
  • Objection — the right to object to processing based on legitimate interests
  • Restriction — the right to request that we limit how we process your data in certain circumstances
  • Withdraw consent — the right to withdraw consent for marketing communications at any time

 

To exercise any of these rights, contact us at privacy@helyxlab.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

Data security

We take data security seriously. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include:

 

  • SSL/TLS encryption on all data transmitted to and from our website
  • Secure, access-controlled infrastructure for data storage
  • Limited internal access to personal data on a need-to-know basis
  • Regular security reviews and updates

 

No system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

International data transfers

Helyxlab is based in the United States. If you are located in the European Union, the United Kingdom, or another jurisdiction outside the US, your personal data will be transferred to and processed in the United States. The US may not provide the same level of data protection as your home country.

For transfers from the EU and UK, we rely on the following safeguards to ensure your data is protected to the standard required under GDPR and UK GDPR:

  • Standard Contractual Clauses (SCCs) approved by the European Commission — incorporated into our agreements with all third-party processors handling EU/UK personal data
  • The EU-US Data Privacy Framework — where applicable for transfers to certified US companies

You may request a copy of the safeguards we have in place for international transfers by contacting us at privacy@helyxlab.com.

Third-party links

Our website may contain links to third-party websites, including scientific publications, regulatory resources, and partner sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

Age requirement

Helyxlab is an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us at privacy@helyxlab.com and we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email (if you are a subscriber or account holder) and update the “Last updated” date at the top of this page. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.

Shipping & delivery

Helyxlab currently ships within the United States only. We do not ship internationally at this time. All orders are dispatched from our US fulfilment centre.

 

  • Delivery timeframe: maximum 3 business days from the date your order is confirmed and dispatched
  • Shipping carriers: we use established US carriers including UPS, FedEx, and USPS depending on your location and order type
  • Cold-chain handling: all peptide compounds are shipped with appropriate cold-chain packaging to maintain product integrity during transit
  • Tracking: a tracking number will be emailed to you once your order has been dispatched
  • Failed delivery: if a delivery attempt fails, the carrier will follow their standard redelivery or collection process. Please ensure your shipping address is accurate at the time of order

 

If your order has not arrived within 3 business days of your dispatch confirmation email, please contact us at orders@helyxlab.com and we will investigate immediately.

US State Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

 

  • Know — the right to know what personal information we collect, use, share, and sell
  • Delete — the right to request deletion of your personal information, subject to legal exceptions
  • Correct — the right to request correction of inaccurate personal information
  • Opt out of sale or sharing — we do not sell or share your personal data for cross-context behavioural advertising
  • Limit use of sensitive personal information — we do not collect sensitive personal information as defined under CPRA
  • Non-discrimination — we will not discriminate against you for exercising any of these rights

 

To exercise your California privacy rights, contact us at privacy@helyxlab.com or submit a request through helyxlab.com/privacy-request. We will respond within 45 days as required by law.

 

Residents of other US states including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) may have similar rights under their respective state laws. We honour these rights on request — contact us at privacy@helyxlab.com.

EU and UK Privacy Rights (GDPR)

If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR in addition to the general rights described in Section 8. These include:

 

  • The right to lodge a complaint with your local supervisory authority — in the EU this is your national Data Protection Authority (DPA); in the UK this is the Information Commissioner’s Office (ICO) at ico.org.uk
  • The right to object to processing carried out on the basis of legitimate interests
  • The right not to be subject to solely automated decision-making that produces legal or similarly significant effects

 

Our legal bases for processing EU and UK personal data are set out in Section 4. If you have questions about how GDPR applies to our processing of your data, contact us at privacy@helyxlab.com.

Contact us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us:

 

Email: privacy@helyxlab.com

Website: helyxlab.com/contact

Helyxlab · United States

 

We aim to respond to all privacy-related enquiries within 5 business days.

This privacy policy was drafted for Helyxlab as a US-based research compound company expanding into European markets. It incorporates CCPA/CPRA requirements for California residents and GDPR requirements for EU/UK customers. It should be reviewed by a qualified legal professional before publication — particularly a US privacy attorney familiar with multi-state compliance and a European data protection specialist for GDPR adequacy.