For laboratory and research use only. Not for human or animal consumption.

Privacy Policy

Last updated: May 2026

1. Who We Are

We operate the website buyvial.com and are responsible for personal data collected through this site.

2. Data We Collect

We collect and process the following categories of personal data:

  • Contact Information: Name, email address, shipping address, phone number — collected during checkout for order fulfillment.
  • Payment Information: We do not store credit card details. Bitcoin payments are processed via BTCPay Server, a self-hosted open-source payment processor.
  • Transaction Data: Order history, product selections, and purchase amounts — for record-keeping and customer service.
  • Technical Data: IP address, browser type, device information — collected automatically via server logs for security and analytics.
  • Cookies: Essential cookies for cart functionality and session management. See our Cookie Policy.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

  • Contract: Processing necessary to fulfill your order (shipping, payment, customer service).
  • Legal Obligation: Record-keeping for tax and accounting purposes as required by applicable law.
  • Legitimate Interests: Fraud prevention, website security, and analytics to improve our services.
  • Consent: Where required by law, for non-essential cookies and marketing communications.

4. How We Use Your Data

We use your personal data solely for the purpose of fulfilling your orders, providing customer support, complying with legal obligations, and improving our website. We do not sell your personal data to third parties.

5. Data Sharing

We share data only with:

  • Shipping carriers: To deliver your order (name, address, contact details).
  • BTCPay Server: For processing Bitcoin payments (self-hosted, no third-party data sharing).
  • Legal authorities: When required by applicable law or court order.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:

  • Order and transaction data: Retained as required by applicable tax and accounting law.
  • Account data: Until you request deletion or close your account.
  • Server logs: 30 days.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (EU 2016/679), you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request erasure of your personal data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability — receive your data in a structured format
  • Withdraw consent at any time

To exercise any of these rights, contact us at contact@buyvial.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including SSL/TLS encryption for data in transit, access controls, and regular security assessments.

9. International Transfers

Your data is stored and processed within the European Union. We do not transfer personal data to countries outside the EEA.

10. Contact & Supervisory Authority

For privacy-related questions, contact us at contact@buyvial.com.

You also have the right to lodge a complaint with your local data protection supervisory authority.