Privacy Policy

Effective date: November 4, 2026
This policy explains what personal information Timeless Research LLC collects, why we collect it, who it is shared with, and what you can ask us to do with it.

Who we are

Timeless Research LLC supplies research materials to laboratories and qualified purchasers in the United States. Our website address is https://choosetimeless.com. We are based in Austin, Texas, and we ship within the United States only.

Everything we sell is supplied for laboratory research use only. Our Terms and Conditions set out that restriction in full.

For any question about this policy, or about information we hold about you, write to [email protected].

The short version

We collect what we need to process your order and to keep the records a supplier of research materials is expected to keep. We use it to fulfil orders, to answer you, and — only if you ask for them — to send you updates about Timeless Research. We do not sell, rent, or trade your personal information, and we do not share it with anyone for their own marketing.

What we collect

When you place an order. Your name, billing and shipping address, email address, what you ordered, and the IP address the order was placed from. The checkout form does not ask for a telephone number. If you place an order with us directly by email or telephone instead, we record the same order details from what you tell us, along with the address or number you contacted us from. Payment card details are entered with our payment processor and are described separately below.

How your visit reached us. The store software, WooCommerce, notes how a visit arrived: the kind of source (typed in directly, a search engine, another website, or a campaign link), the referring website, any campaign tags in the link you followed, the page you arrived on, when the visit started, how many pages you viewed and how many visits you have made, and your browser’s identifying string, from which it works out whether you used a phone, tablet or computer. This is saved with your order, and with your account if you create one. It stays on our site and is not sent to any analytics or advertising service.

When you create an account. Your username, email address, display name, and a password, which is stored only as a cryptographic hash and cannot be read back by us or by anyone else. The sign-up form also asks for your first and last name and your date of birth (accounts are only for people aged 21 or older), and whether you are an independent researcher or a business; a business gives its legal name and its Employer Identification Number (EIN). You tick three statements: that you accept our Terms and Conditions, that you accept this policy, and that the products are for laboratory research use only and not for human or animal consumption. We keep your answers with your account, and a record of the statements you accepted, their wording and the date and time in our compliance records.

Your research confirmation when you enter the site. Before you can use the site you confirm that you are at least 21, that you are a qualified researcher buying for laboratory research use only, and that you accept our Terms and Conditions and this policy. You also choose the kind of research organisation you buy for from a list, and sign a statement that you are a researcher buying for laboratory research use only by typing your full name. We keep a record of what you chose and the name you typed, with the statement, the date and time, the page you were on and your IP address, so that we can show later who confirmed what.

The research purchase verification at checkout. Before an order can be placed you must be signed in to an account, choose the kind of research organisation you buy for from a list, tick four statements (that you are a qualified researcher aged 21 or older acting for a research institution or laboratory; that the materials are for in vitro research use only and not for human consumption or any medical, clinical, diagnostic or veterinary use; that you accept our Terms and Conditions and take responsibility for the lawful handling of the materials; and that you accept our Refund and Returns Policy), may give the name of the business or institutional organisation you buy for, give a business or institutional email address, and sign by typing your full name. We email a six-digit code to that address, which you enter to continue; we keep the code only in a coded form and it expires after 10 minutes. We record what you chose, the statements and their exact wording, the organisation name if you gave one, the name you typed, the email address you verified, the date and time, and a one-way coded form of your IP address and browser’s identifying string, and we keep that record with your order. A copy of the record, and of which order it was used for, is sent to Aperture (see below). This is a compliance record: it is how we can show, later, what a buyer was asked and what they confirmed.

Fraud checks on card payments. When you pay, the order is scored for the risk of fraud. The score looks at earlier payments, failed payments and chargebacks linked to your email address on this site (held in coded form), how many checkout attempts came from your email address or connection in the last hour, whether your billing and shipping countries differ, how new your account is, and whether the order is unusually large. Aperture, which provides this check (see below), also tells us whether a chargeback has been recorded against your email address at another shop that uses its service. The score and the reasons for it are kept with the order.

If you ask for email updates or a restock notice. Your email address, the product concerned where relevant, and the date you confirmed the request. Signing up requires confirming through a link we email you, so an address cannot be added to our list by someone else.

When you contact us. Whatever you put in your message, and the address you sent it from.

Ordinary server records. Our host keeps access logs, which include IP addresses, in the normal course of running the site.

How we use it

  • to process, pack, ship, and support your order, and to handle returns and refunds;
  • to send you the transactional email an order generates — confirmation, receipt, shipping notice, and replies to your questions;
  • to keep the compliance and accounting records we are expected to keep, including the research-use confirmation and lot documentation;
  • to confirm that buyers are adults and qualified researchers before they can purchase;
  • to detect and prevent fraud and abuse of the site;
  • to send you updates about Timeless Research, only if you have asked for them, and only from us.

We do not use your information to build advertising profiles. The one decision made about you by automated means is the fraud check described above: a high score can hold an order for us to review before it ships, or stop a card payment from going ahead. If that happens to you, write to us and a person will look at it.

Who we share it with

Only the parties that make an order happen, and only with what they need:

  • Our payment processor, Stripe, which handles the payment itself.
  • Aperture, which arranges our card payments through Stripe and provides our research-use compliance and fraud-check software. To start a payment it receives your email address, the order number, the items and amounts, and the fraud score; it is told when a payment, refund or chargeback happens; and if a bank disputes a payment, it receives what we submit in reply, which can include your name, email address, IP address, billing and shipping addresses, the items, the shipping tracking details and your research-use confirmation. It also keeps its own copy of each research purchase verification you complete at checkout (including the organisation name if you gave one, the name you typed and the email address you verified) and which order it was used for, as a compliance record.
  • The shipping carrier, which receives the delivery address and contact details needed to deliver the parcel.
  • Our hosting and email providers, which operate the site and deliver our email, and which handle the data only to provide that service to us.
  • Google, through Google Fonts, which serves the typefaces the site is set in and so receives your IP address and browser details when a page loads (see below).
  • Professional advisers, such as our accountants or lawyers, where they need it to advise us.
  • A public authority, where we are legally required to disclose information, or where disclosure is necessary to protect our rights or someone’s safety.

That is the complete list. We do not pass your information to data brokers, advertising networks, or any other company for their own purposes.

Payment information

When you pay on this site, card details are entered directly with our payment processor and are not received or stored on this site. We hold only what the processor reports back about a payment, such as whether it succeeded, the amount, and a reference. We never see or store a full card number from an online payment. If you place an order with us directly, we will tell you how to pay, and use the payment details you give us only to take that payment.

Our payment processor is Stripe. When you choose to pay, you are taken from our site to a payment page on Stripe’s own site, where you enter your card details. They go to Stripe and are not received or stored by us or by Aperture. Stripe sets its own cookies on that page and uses information about the device and the payment to detect fraud, as described in Stripe’s privacy policy.

Cookies

We use cookies to make the site work, to remember that you have confirmed you are a researcher, and to note how a visit reached us. There are no advertising cookies and no cookies from any analytics service. The cookies a visit can set are:

  • woocommerce_cart_hash and woocommerce_items_in_cart — so the site knows what is in your cart;
  • wp_woocommerce_session_* — your cart and checkout session;
  • tc_research_confirmed — set when you confirm the statements shown before the site (your age, research use only, responsibility for the laws that apply to you, and agreement to our Terms and Conditions and this policy), so you are asked once rather than on every page. It records only which version of those statements you confirmed, and nothing about you; the researcher type and signature you gave are kept in our records, not in the cookie;
  • gg_checkout_device — set when you enter the emailed code at checkout, so this device is not sent a new code for the same account and email address for 30 days (you still tick the statements and sign on every order). It holds a signed note of your account number, a one-way coded form of the email address you verified, and when it was set and expires;
  • WordPress login cookies, set only if you have an account and are signed in;
  • sbjs_first, sbjs_current, sbjs_first_add, sbjs_current_add, sbjs_udata, sbjs_session and sbjs_migrations — set by WooCommerce to note how your visit reached us, as described above. They end when you close your browser, and sbjs_session also ends after 30 minutes without activity;

You can block or delete cookies in your browser. The cart and checkout will not work without the session cookies above, and blocking the confirmation cookie means those statements are shown again on each visit.

Analytics and advertising

We do not run third-party analytics, advertising pixels, or social media trackers on this site. The only record of how visitors reach us is WooCommerce’s own, described above, which stays on this site. No third-party script loads on our pages; payment is taken on Stripe’s own page, described above.

Fonts

The typefaces on this site are loaded from Google Fonts, so each page you open makes a request to Google’s servers (fonts.googleapis.com and fonts.gstatic.com). As with any request on the web, that gives Google your IP address and details of your browser. Google Fonts sets no cookies. Google describes how it handles this in its privacy policy and its Google Fonts privacy FAQ.

Email you get from us

Order-related email is part of the service and is sent whenever an order needs it. Catalogue updates are separate: they go only to addresses that have confirmed a request through a link we email, and every one of them carries an unsubscribe link that takes effect immediately. You can also manage this from our email preferences page or by writing to us.

How long we keep it

  • Orders and their compliance records are kept for as long as our tax, accounting, and product-documentation obligations require.
  • Research confirmations and fraud-check records, including confirmations made on entering the site that never led to an order, are kept for 7 years and then deleted automatically.
  • Account information is kept until you ask us to close the account.
  • Email list entries are kept until you unsubscribe; an unconfirmed signup expires by itself.
  • Correspondence is kept as long as it is useful for supporting you, and then deleted.

Security

The site is served over HTTPS, passwords are stored as hashes, and administrative access is limited to people who need it. No system is perfectly secure, and we do not claim otherwise; if a breach affects your information, we will tell you and the relevant authorities as required.

Your choices

Write to [email protected] and you can ask us to:

  • tell you what personal information we hold about you, and give you a copy;
  • correct anything that is wrong;
  • delete your account and the information tied to it, except records we are required to keep, such as completed order and compliance records;
  • stop sending you updates, which you can also do from any unsubscribe link.

We will ask you to confirm your identity before acting on a request, so that nobody else can make it on your behalf. Depending on where you live, local law may give you further rights; tell us what you are asking for and we will treat the request on its merits.

Children

This site is not directed to children, and nothing on it may be purchased by anyone under 21. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

Changes to this policy

If we change how we handle personal information, we will update this page and change the effective date at the top. The version in force is the one published here.

Contact

Timeless Research LLC
Austin, TX
[email protected]