INTRODUCTION
LKT Laboratories, Inc. (“LKT Labs,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of our customers, website visitors, and business contacts. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit lktlabs.com or purchase from our online store.
This policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and applicable US privacy laws. If you are located in the European Economic Area (EEA) or United Kingdom, the additional provisions in the “Your Rights Under GDPR” section below apply to you.
DATA CONTROLLER
The data controller responsible for your personal information is:
LKT Laboratories, Inc.
545 Phalen Blvd.
St. Paul, Minnesota 55130
Phone: (651) 644-8424 | Toll-free: (888) 558-5227
Fax: (888) 558-7329
Email: getinfo@lktlabs.com
Website: lktlabs.com
DATA WE COLLECT
We collect the following categories of personal data:
Information you provide directly: identity data (name, job title, institutional affiliation); contact data (email address, phone number, shipping and billing address); account data (username and password if you create an account); transaction data (products ordered, order history, purchase amounts); payment data (credit/debit card details, which are processed and tokenized by our payment processor — we do not store raw card numbers); and communications you send via contact forms, email, or customer service inquiries.
Information collected automatically: usage data (pages visited, time on site, referring URLs); technical data (IP address, browser type and version, device type, operating system); and cookie data (session identifiers, preference cookies, and analytics identifiers — see the “Cookies” section below).
Information from third parties: payment verification data from our payment gateway (transaction status, fraud signals) and analytics data from website analytics services.
LEGAL BASIS FOR PROCESSING (GDPR)
For individuals in the EEA or UK, we process personal data under the following lawful bases: contract performance (processing necessary to fulfill your order, manage your account, and provide customer support); legitimate interests (website security, fraud prevention, improving our services, and direct B2B marketing outreach to research professionals where we have a reasonable basis to believe our products are relevant to their work); legal obligation (compliance with applicable tax, export control, and financial record-keeping laws); and consent (where you have opted in to marketing communications or non-essential cookies, which you may withdraw at any time).
HOW WE USE YOUR DATA
We use personal data to process and fulfill product orders including shipping and invoicing; manage customer accounts and provide customer support; process payments securely through our payment gateway; send order confirmations, shipping notifications, and service-related communications; send marketing newsletters and product updates where you have consented or where permitted under legitimate interests for research professionals; improve our website, products, and services through analytics; detect and prevent fraud, security incidents, or technical issues; comply with legal obligations including export control regulations applicable to research chemicals; and maintain business records and financial accounts.
DATA SHARING AND THIRD-PARTY PROCESSORS
We do not sell your personal data. We share data only with trusted third-party service providers acting as data processors on our behalf, or where required by law.
Service providers we work with include: Cybersource (Visa) for payment processing and fraud management; Mailgun for transactional email delivery; Amazon Web Services (AWS S3) for secure cloud storage of database backups and archives; Mailchimp (Intuit) for email newsletter distribution to research professionals and subscribers (all recipients have the ability to unsubscribe from any communication); Google LLC for online advertising via Google Ads (Google may process technical and usage data in connection with ads served on or off our website — see Google’s privacy policy at policies.google.com/privacy); CookieYes for cookie consent management (records and enforces your cookie preferences); DB Services / FileMaker Server for internal database hosting; DigitalOcean for web hosting; and Cloudflare for DNS, content delivery, and DDoS protection. All service providers are contractually required to protect your data and use it only for the services they provide to us.
We may also disclose personal data to government authorities, regulators, or law enforcement agencies where required by applicable law, court order, or regulatory authority, including US export control regulations applicable to research chemicals.
INTERNATIONAL DATA TRANSFERS
LKT Labs is based in the United States. If you are accessing our website from the EEA, UK, or other regions with data protection laws, your personal data will be transferred to and processed in the United States. Where we transfer EEA or UK personal data to third-party processors located in the US, we rely on appropriate transfer mechanisms including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Agreement (IDTA), or we use processors participating in recognized certification frameworks such as the EU-US Data Privacy Framework.
COOKIES
Our website uses cookies and similar tracking technologies, managed through a CookieYes consent banner. Strictly necessary cookies are essential for the website to function (such as shopping cart and login sessions) and cannot be disabled. Functional cookies remember your preferences. Analytics cookies help us understand how visitors use our site and are only placed with your explicit consent. When you first visit our website, you will be asked to accept or decline non-essential cookies. You can change or withdraw your consent at any time by clicking the cookie preferences link in the footer of our website. You can also control and delete cookies directly through your browser settings, though disabling certain cookies may affect website functionality.
DATA RETENTION
We retain personal data for as long as necessary to fulfill the purposes described in this policy or as required by law. Order and transaction records are retained for 7 years to comply with US tax and accounting requirements. Customer account data is retained for the duration of the account plus 3 years after closure. Marketing contact data is retained until you unsubscribe or withdraw consent. Website analytics data is retained for up to 26 months. Correspondence and support records are retained for 3 years. When personal data is no longer required, we securely delete or anonymize it.
YOUR RIGHTS UNDER GDPR (EEA AND UK RESIDENTS)
If you are located in the EEA or UK, you have the following rights under the GDPR and UK GDPR: the right of access (to request a copy of personal data we hold about you); the right to rectification (to request correction of inaccurate or incomplete data); the right to erasure, or “right to be forgotten” (to request deletion of your personal data, subject to legal obligations); the right to restriction of processing (to request that we limit how we use your data in certain circumstances); the right to data portability (to receive your data in a structured, machine-readable format); the right to object (to processing based on legitimate interests or for direct marketing); and the right to withdraw consent (where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing).
To exercise any of these rights, please contact us at getinfo@lktlabs.com. We will respond within 30 days. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with your national data protection authority (e.g., your EU member state’s supervisory authority, or the UK Information Commissioner’s Office at ico.org.uk).
US PRIVACY RIGHTS
Depending on your state of residence, you may have additional privacy rights under applicable US state laws, including the California Consumer Privacy Act (CCPA/CPRA) and similar statutes. These rights may include the right to know what personal information we collect, the right to request deletion of personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a privacy request under applicable US law, please contact us at getinfo@lktlabs.com.
DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include HTTPS/TLS encryption for all data transmitted between your browser and our website; payment card data tokenization and encryption through our PCI-DSS compliant payment processor; access controls limiting data access to authorized personnel only; regular database backups stored securely in AWS S3; and DDoS protection and network security via Cloudflare. No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.
CHILDREN’S PRIVACY
Our website and services are intended exclusively for professional researchers, academic institutions, and businesses engaged in life science research. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.
THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or prominent notice on our website. Your continued use of our website after any update constitutes acceptance of the revised policy.
CONTACT US
For questions, concerns, or to exercise your data rights, please contact:
LKT Laboratories, Inc.
545 Phalen Blvd.
St. Paul, Minnesota 55130
Phone: (651) 644-8424 | Toll-free: (888) 558-5227
Email: getinfo@lktlabs.com
EEA and UK residents may also lodge a complaint with their local supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu. The UK Information Commissioner’s Office can be reached at ico.org.uk.