Privacy Policy
What we collect, how we use it, and how long we keep it.
Last updated: October 2026
CoreMesa Labs, LLC (“CoreMesa Labs,” “we,” “us”) respects your privacy. This policy explains what information we collect, how we use and retain it, and how to contact us.
1. Information We Collect
- Account information: your name, email address, optional organization or institution, the researcher type you select, and a securely hashed password.
- Research use agreement records: when you create an account (and whenever you accept an updated agreement) we record the agreement version, the date and time of acceptance, your IP address, and your browser.
- Order information: name, email, phone, and shipping/billing address provided at checkout, together with your three checkout acknowledgments, their timestamp, IP address, and browser.
- Payment information: card payments are processed by our payment processor. We receive a confirmation and the details needed to manage your order, but we do not store your full card number.
- Technical data: a cart record stored in your browser, a session cookie, a 30-day
“stay signed in” cookie (
cm_remember) on devices you sign in from, and basic security logs (such as IP address) used to protect against abuse.
2. How We Use Your Information
- To operate your researcher account and verify that sales are made to qualified researchers and licensed laboratories for research use only, as required by our payment processor and card-network rules.
- To process, fulfill, and ship your orders, and to send order and shipping notifications.
- To respond to support requests.
- To prevent fraud and secure our website, and to comply with legal obligations.
3. How We Share Information
We share information only as needed to operate the store: with our payment processor to charge your card and, on request, to evidence research use agreements and acknowledgments; with shipping carriers to deliver your order; and with our email-delivery provider to send transactional emails. We do not sell your personal information.
4. Cookies, Local Storage & Analytics
We use a session cookie and the cm_remember cookie to keep you signed in, and your browser’s local
storage to remember your cart. We also use the Meta Pixel, an analytics and advertising-measurement tool from Meta
Platforms, which records page views and order events. You can limit this through your browser’s tracking or cookie
settings. Signing out removes the stay-signed-in cookie from that device.
5. Data Retention
We retain account records, research use agreement records, order and acknowledgment records, and the lot records linked to shipped orders for at least two years, and longer where tax, accounting, or legal requirements apply.
6. Security
We use industry-standard safeguards including encrypted connections, hashed passwords, CSRF protection, access restrictions on stored records, and rate limiting. No method of transmission is 100% secure, but we work to protect your data.
7. Your Rights
You may request access to, correction of, or deletion of your personal information by emailing us. Records we are required to keep (such as agreement, order, and acknowledgment records) will be retained for the required period. Depending on your location, additional rights may apply.
8. Contact
Legal entity: CoreMesa Labs, LLC
Email: Support@coremesalabs.com
Support hours: 8:00 AM – 10:00 PM Central
Website: https://coremesalabs.com/