Privacy Policy

Who we are

ACS Peptide Testing Labs ("ACS", "we", "us") operates acslabtest.com and provides analytical laboratory testing services to businesses and research organizations. Our mailing address is 721 Cortaro Drive, Sun City Center, FL 33573, United States. For any privacy question or request, contact cpierre@acslabtest.com. For requests under the GDPR or UK GDPR, use the same address and mark the message "Data Protection Request".

Information we collect

• Information you give us. Name, business email, phone number, company name, the testing services you are interested in, sample details, and any message you send through our quote or contact forms.
• Account information. Email address and password credentials if you create an account to view results.
• Traffic source information. The referring website or search engine and campaign parameters (utm_source, utm_medium, utm_campaign) present in the link you arrived on, stored alongside a form submission so we know which channels work.
• Usage information. Pages viewed, approximate region, device and browser type, collected through Google Analytics only where you have consented to analytics cookies.

How we use information

• To respond to quote requests, prepare pricing, and manage testing engagements.
• To send you your Certificate of Analysis and service communications.
• To keep records required for laboratory quality management and accounting.
• To measure which pages and channels generate enquiries, and to improve the site.
• To protect the site against fraud, abuse, and security incidents.

Legal bases (GDPR / UK GDPR)

• Contract. Handling your quote request and delivering testing services.
• Legitimate interests. Running and securing our website and understanding which channels bring enquiries.
• Consent. Analytics, marketing, and functional cookies, and optional marketing email. You can withdraw consent at any time.
• Legal obligation. Retaining records we are required to keep.

Who we share it with

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use a small number of processors who handle data only on our instructions:

• Supabase — database, authentication, and file hosting for submissions and results.
• HubSpot — customer relationship management for enquiries and follow-up.
• Resend — delivery of transactional and notification email.
• Google Analytics — website measurement, loaded only with your consent.
• Our hosting and content delivery providers.

We may also disclose information where required by law, or in connection with a corporate transaction involving our business.

International transfers

We are based in the United States and our processors store data in the United States. Where we receive personal data from the EEA, the UK, or Switzerland, transfers are made under the European Commission's Standard Contractual Clauses together with appropriate technical safeguards.

How long we keep it

Quote requests and enquiry records are kept for up to seven years so we can evidence work performed and meet accounting and quality-record obligations. Analytics data is retained for 14 months. Account data is kept while the account is active. You may ask us to delete data earlier where no legal retention duty applies.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and to be free from discrimination for exercising these rights. California residents may also request disclosure of the categories of information collected and may opt out of any sale or sharing — we do neither.

To exercise any right, email cpierre@acslabtest.com. We respond within 30 days and may need to verify your identity first. If you are in the EEA or UK and are unhappy with our response, you can complain to your national data protection authority.

Cookies

Only strictly necessary cookies are set before you choose. Analytics, marketing, and functional cookies load only after you accept them, and you can change your choice at any time. See our Cookie Policy for the full list and how to reopen your preferences.

Security and children

Data is encrypted in transit, access is restricted to staff who need it, and database access is governed by row-level security rules. No system is perfectly secure, so please do not send sensitive personal information through the website. Our services are sold business-to-business and are not directed to children under 16; we do not knowingly collect their data.

Changes

If we change this policy we will update the effective date above and, for material changes, present the cookie notice again so you can review your choices.