Privacy Policy

Effective date: October 14, 2026.

1. Who we are

This website, www.lyotide.com, is operated by Lyotide Scientific LLC, trading as Lyotide Scientific, 656 Seminole Road Radcliff, KY 40160 (“we”, “us”). We are the business responsible for the personal information described in this policy. Telephone +1 (719) 401-3124. Email sales@lyotide.com.

We sell to businesses in the United States only. This policy covers information about the people who visit the site and who buy on behalf of those businesses.

2. Information we collect

Information you give us.

• Checkout and account: email address, contact name, business name, shipping address, and, if you choose to give them, a phone number, business website, business tax ID and resale certificate.
• Orders: the products, quantities, prices, shipping address and payment method for each order, any notes you add, and the order’s status, tracking number and documents.
• The business-use agreement: when you agree at the door, place an order or release payment details, we record which agreement you accepted, its version, when, and the business name given. We do not collect identity documents, dates of birth or ages for this.
• Messages: what you send through the contact form or by email, and the email address you send it from.
• Sign-in: if you sign in with Google, Google tells us your name and verified email address. We never receive your Google password.

Payment information.

• Bitcoin and USDC: we record the receiving address, the amount and the transaction ID. Transactions on a public blockchain are visible to anyone; we do not control that record.
• ACH and wire: we show you our bank details and you send the transfer from your bank. We do not ask for or store your bank account number; we see what our bank reports to us about the incoming payment.
• Card (when offered): card numbers are entered into fields served by our card processor and go directly to it. They never reach or are stored on our servers. We receive a confirmation and the last digits of the card.

Information collected automatically.

• Our own visit counts: for each page view we record the date and time, the page, and where the visit came from (a campaign tag or the referring website’s name only). We do not record your IP address, browser or device details, or the full address of the page that linked to us.
• Website analytics: we use Ahrefs Web Analytics to measure overall traffic. It is designed to work without advertising cookies or cross-site tracking.
• Server and security logs: our hosting provider keeps short-lived technical logs (IP address, browser string, page requested) to run and protect the service. These are kept for a few days and are not used for marketing.

3. Cookies

We use a small number of first-party cookies that the site needs to work:

• Session cookie: keeps your bag, your agreement and your sign-in for up to 14 days.
• Security token: protects forms against cross-site request forgery; part of the session.

We do not use advertising cookies, and we do not let advertising networks place cookies through this site. Blocking cookies will stop the bag and checkout from working.

4. How we use information

• To take, confirm, pack, ship and support your orders, and to send order emails (confirmations, payment received, shipped).
• To match payments to orders.
• To keep a record that each buyer agreed to buy for business and research use only, and to screen orders for misuse, fraud and sanctions or export problems.
• To answer your messages.
• To understand which pages and sources bring visitors, in the counted form described above.
• To meet legal, tax and accounting obligations, and to establish or defend legal claims.

We do not use your information for automated decisions that have legal effects on you, and we do not build advertising profiles.

5. Who we share it with

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share it only with:

• Service providers who run parts of the business for us, under contracts that limit their use of the data to that service: website hosting (Railway), email delivery (Resend), domain and email routing (Cloudflare), sign-in (Google, if you use it), address verification (if used), our card processor (if used), shipping carriers (for example USPS, UPS, FedEx), and our bank.
• Authorities when the law requires it, such as a valid subpoena or court order, or when needed to protect our rights, our customers or the public.
• A buyer of our business, if the company or its assets are sold or merged, under the same protections as this policy.

6. How long we keep it

• Orders, invoices and payment records: seven years, for tax and accounting.
• Agreement records: for as long as we hold the related account or orders, and at least seven years, as evidence of the terms of sale.
• Accounts with no orders: deleted on request, or after three years without activity.
• Messages: up to three years, unless they relate to an order.
• Visit counts: kept in the counted form described in section 2, which does not identify you.

7. Security

The site is served only over encrypted connections (HTTPS). Passwords are stored as one-way hashes, never in readable form. Access to order and account data is limited to the people who need it to run the business, and the owner’s console requires a passkey or password. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.

8. Your choices and rights

Wherever you are in the United States, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong;
• delete your information, except what we must keep for the reasons in section 6;
• stop sending you any non-order email.

Residents of California, Colorado, Virginia, Connecticut, Utah, Texas, Oregon and other states with privacy laws have these rights under those laws, along with the right to opt out of the sale of personal information, targeted advertising and profiling. We do none of those, so there is nothing to opt out of, and we honor Global Privacy Control browser signals as an opt-out request. We will not treat you differently for using any of these rights.

How to ask: email sales@lyotide.com with the subject “Privacy request” or call +1 (719) 401-3124. We will confirm the request comes from the email on the account, and answer within 45 days. You may use an authorized agent with your written permission. If we turn down a request, you can appeal by replying to our answer, and we will respond within 60 days.

9. Children

This site is for businesses and for people aged 21 and over. We do not knowingly collect information from anyone under 21. If you believe a minor has given us information, contact us and we will delete it.

10. Where data is kept

We sell only within the United States, and our hosting is located in the United States. Some service providers may process data in other countries under contracts that protect it.

11. Links to other sites

Pages may link to other websites, such as published research or independent testing labs. Their privacy practices are their own; this policy does not cover them.

12. Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change materially affects how we use information we already hold, we will tell account holders by email before it takes effect.

13. Contact

Lyotide Scientific LLC
656 Seminole Road Radcliff, KY 40160
+1 (719) 401-3124
sales@lyotide.com