Privacy Notice
What personal data Aminopia collects, why we hold it, how long we keep it, and the rights you have over it.
Effective 21 September 2026
1. Who we are
Aminopia is the controller of the personal data described in this notice. Contact us at support@aminopia.com with any privacy question or request.
2. What we collect
You give us: name, institution, email address, telephone number, shipping and billing addresses, and the content of any message you send us.
Site analytics: We keep daily aggregate counts of page and product views, product-tab interactions, cart actions, checkout attempts, and search/filter use, grouped by product and broad device category. These counters do not contain visitor identifiers, account identifiers, IP addresses, search text, form content, or individual browsing histories. Account-creation totals are calculated separately from our operational account records. Counts describe activity, not identifiable people or individual journeys.
Our hosting provider processes network information, including IP addresses, to deliver and protect the site. This is separate from our aggregate analytics database. We do not use Google Analytics, advertising trackers, or session recordings. Our optional activity counters respect browser Global Privacy Control and Do Not Track signals.
For U.S. page views, we also use our hosting provider’s approximate state, city and five-digit ZIP information to keep separate daily geographic counts. State totals contain only date, state and count; city totals contain date, state, a reference city identifier and count; ZIP totals add the five-digit ZIP to those geographic fields. They are not linked to products, devices, accounts or individual browsing histories. We do not save IP addresses, ZIP+4 extensions or visitor coordinates in these counters. ZIP estimates are network locations, not verified home or shipping addresses. The city map uses fixed reference city centers, not visitor positions. City and ZIP names and counts are shown in reports only after at least five page views within the selected period; these are views, not five distinct people. Unknown or unmatched locations are omitted. The same browser privacy signals and collection controls apply.
We do not collect: payment card numbers. Payments are processed by our payment provider; card details go to them, never to us.
3. Why we hold it
Our private reporting dashboard also reads Cloudflare’s aggregate unique-IP visitor estimates and request totals by country. We do not retrieve or store individual IP addresses or visitor-level locations for these reports. Country locations are approximate; this reporting is separate from our browser activity counters.
| Purpose | Lawful basis |
|---|---|
| Fulfilling and shipping your order | Performance of a contract |
| Responding to your enquiry | Legitimate interests |
| Verifying research-use eligibility | Legal obligation, legitimate interests |
| Keeping tax and transaction records | Legal obligation |
| Improving the site | Legitimate interests |
We do not sell your personal data. We do not share it with advertisers.
4. Who we share it with
Only with processors who need it to deliver the service: our shipping carriers, our payment processor, our email provider, and our hosting provider. Each is bound by contract to process the data only on our instructions.
We may disclose data where legally compelled to do so.
5. How long we keep it
Order and transaction records are kept for the period required by tax and commercial law in our jurisdiction — typically seven years. Enquiry correspondence is kept for two years. Analytics data is retained in aggregate form only.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent where consent is the basis. To exercise any of these, email us. We respond within one month.
You may also complain to your local data protection authority.
7. Cookies
We set only what is necessary to operate the site — a session identifier, and your appearance preference if you override the default. We do not set advertising or cross-site tracking cookies. Your appearance preference is stored in your browser and never reaches our servers.
8. International transfers
Where data is transferred outside your region, we rely on appropriate safeguards, including standard contractual clauses with our processors.
9. Changes
We will post any change to this notice here and update the effective date above.
Template notice. Confirm the specifics — retention periods, processors, and lawful bases — against your actual operations, and have counsel review before publishing.