This policy explains what personal information HMD Scientific LLC collects, why we collect it, who we disclose it to, and the rights you have over it. It applies to this website and to orders placed through it.
Effective Date: August 26, 2026 | Version 1.0
1. Who we are
HMD Scientific LLC (“HMD Scientific,” “we,” “us”) supplies research-use-only reference materials to account holders in the United States. We are a California limited liability company. Written notice may be sent to HMD Scientific LLC, care of its registered agent for service of process in the State of California, or by email to compliance@hmdscientific.com.
We are not a healthcare provider. We do not provide medical services, we do not maintain medical records, and we do not collect protected health information. Nothing you provide to us is treated as clinical information.
2. Personal information we collect
We collect the following categories of personal information, using the category names set out in the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”):
Identifiers. Name, email address, telephone number, postal address, account username, and IP address.
Customer records information. Shipping and billing address, order history, and correspondence with us.
Commercial information. Products considered or purchased, order value, and returns or claims.
Internet or network activity. Pages requested, referring page, browser and device type, and the date and time of a request.
Compliance records. The age confirmation and research-use acknowledgement you give when you register or enter the site, together with the date, time, and IP address at which it was given. We retain these because they evidence a condition of sale.
We do not collect government identification numbers, biometric information, precise geolocation, or health information. Payment card details are entered directly with our payment processor and are never received, transmitted, or stored by HMD Scientific; we receive only a transaction result and a truncated card descriptor.
3. Sensitive personal information
We do not collect sensitive personal information as the CCPA defines that term, and we therefore do not use or disclose it for purposes that would give rise to a right to limit. If this changes, we will update this policy before the change takes effect and give the notice the CCPA requires.
4. Where the information comes from
Directly from you, when you apply for an account, place an order, or contact us. Automatically from your browser and our hosting provider when you use the site. From our payment processor and our carriers, in the form of transaction results and delivery status. We do not purchase personal information from data brokers, and we do not enrich your record from third-party sources.
5. How we use personal information
To decide whether to approve an account and to keep that decision auditable; to display pricing to approved accounts; to take, process, fulfil, and ship orders; to handle returns, claims, and chargebacks; to answer enquiries; to keep the tax, transaction, and compliance records the law requires us to keep; to secure the site and detect fraud or misuse; and to meet obligations to regulators, card networks, and our payment processor.
We do not use your personal information to build advertising profiles, and we do not make decisions about you by automated means that produce legal or similarly significant effects.
6. How we disclose personal information
We disclose personal information to service providers who process it only on our instructions and only to perform a service for us. The categories are: payment processing and fraud screening; order fulfilment, warehousing, and carriage; website hosting, security, and backup; email and customer-support tooling; and professional advisers such as accountants and legal counsel.
We also disclose personal information where we are legally required to, in response to lawful process, to establish or defend legal claims, or to a successor entity in connection with a merger, acquisition, or sale of assets, in which case we will give notice of any material change to this policy.
7. We do not sell or share your personal information
HMD Scientific does not sell personal information, and does not share it for cross-context behavioural advertising, as the CCPA defines those terms. We have not done so in the preceding twelve months. Because we do not sell or share, there is no opt-out to exercise; we nonetheless honour opt-out preference signals as described in Section 11.
8. Retention
We keep each category only as long as we have a reason to. Account and order records are retained for the period required by tax, commercial, and product-liability record-keeping rules, which for our purposes is seven years from the later of account closure or the final transaction. Age and research-use acknowledgements are retained for the same period, because they evidence a condition of the sale they relate to. Web and security logs are retained for a substantially shorter operational period. When a retention period ends, records are deleted or de-identified.
9. Security
The site is served over TLS. Access to order and account data is limited to personnel who need it. Payment credentials never reach our systems. No method of transmission or storage is completely secure, and we do not represent otherwise.
10. Your California privacy rights
If you are a California resident, you have the right to:
Know and access. Request the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes, and the categories of third parties to whom we disclosed it.
Delete. Request deletion of personal information we collected from you, subject to the exceptions the CCPA allows — including records we must keep for tax, transaction, warranty, product-safety, or legal-defence purposes.
Correct. Request correction of inaccurate personal information.
Non-discrimination. Exercise any of these rights without being denied service, charged a different price, or given a different level of quality.
Portability. Receive the information you gave us in a portable, readily usable format where technically feasible.
The rights to opt out of sale or sharing, and to limit the use of sensitive personal information, do not apply here because we do neither — see Sections 3 and 7.
11. How to exercise your rights
Email compliance@hmdscientific.com with your request and the email address on your account. We will acknowledge within ten business days and respond substantively within forty-five calendar days, extending once by a further forty-five days where the request is complex, and telling you if we do.
Verification. Before we act on a request to know, delete, or correct, we must verify that the request is yours. We do this by matching information you provide against what is already on your account, and by confirming from the account email address. We will not create a new account, or ask you for a government identity document, in order to verify you.
Authorized agents. An agent may submit a request on your behalf with written permission signed by you, and we may still contact you to confirm it.
Opt-out preference signals. We honour the Global Privacy Control. Because we neither sell nor share personal information, receiving the signal does not change how we handle your data.
Appeals. If we decline a request, our response will say why. You may ask us to reconsider by replying to that response, and you may contact the California Privacy Protection Agency or the California Attorney General.
12. Shine the Light
California Civil Code section 1798.83 lets California residents ask about personal information disclosed to third parties for those parties’ own direct marketing. We make no such disclosures.
13. Cookies and similar technologies
We use a small number of first-party cookies: one that records your age and research-use acknowledgement so that you are not asked again on every page, one that keeps you signed in, and one that holds the contents of your cart. We do not use advertising or cross-site tracking cookies. Blocking cookies will prevent the site from functioning.
14. Age of users
This site is restricted to persons twenty-one years of age or older and is not directed to children. We do not knowingly collect personal information from anyone under twenty-one, and if we learn that we have, we will delete it. We do not sell or share the personal information of consumers under sixteen.
15. Third-party sites
Pages we link to are governed by their own privacy policies, not this one.
16. Where information is processed
We ship only within the United States and process personal information in the United States. If you contact us from outside the United States, understand that your information will be processed there.
17. Changes to this policy
We will post any revision here with a new effective date and version number, and where a change is material we will describe it. The version in force at the time of your order governs that order.
18. Contact
compliance@hmdscientific.com for privacy requests and questions about this policy. support@hmdscientific.com for orders — Monday to Friday, 9:00 a.m. to 5:00 p.m. Pacific Time.