Privacy Policy

1) Personal Information We Collect

The personal information we collect depends on how you interact with the Site and may include:

• Identity and contact information: name, email address, telephone number, billing address, shipping address, and account details.
• Order information: products ordered, order value, discounts, payment status, shipping method, tracking information, order history, refunds, replacements, customer-service notes, and related transaction records.
• Payment information: payment method, payment status, transaction references, partial payment-card details supplied by a processor, and information needed to match or verify a payment. Full card numbers are processed by third-party payment providers and are not directly stored by Nordexa Research.
• Account information: username, encrypted password credentials, account preferences, saved addresses, and account activity.
• Communications: emails, contact-form submissions, support messages, order-related correspondence, complaints, photographs, delivery evidence, review submissions, and other information you choose to provide.
• Marketing and preference information: email-subscription status, consent records, unsubscribe activity, communication preferences, promotional-code use, and engagement with marketing messages.
• Technical and usage information: Internet Protocol address, browser type, device type, operating system, approximate location derived from an IP address, referring pages, pages viewed, actions taken, timestamps, cookie identifiers, session information, and security or diagnostic records.
• Fraud and security information: order-risk indicators, failed or disputed payment information, login records, security events, account restrictions, and information reasonably required to investigate suspected fraud or misuse.

2) How We Collect Information

We collect personal information:

• Directly from you when you create an account, place an order, subscribe, submit a review, contact support, or provide information through the Site.
• Automatically through cookies, server logs, analytics technologies, security systems, and similar tools.
• From service providers involved in payments, shipping, email delivery, fraud prevention, analytics, hosting, website operations, and customer support.
• From payment networks, financial institutions, carriers, or other parties when reviewing a payment, delivery, refund, fraud, or dispute issue.

3) How We Use Personal Information

Nordexa Research may use personal information to:

• Process and fulfill orders: review orders, confirm payments, prepare shipments, create shipping labels, send tracking details, and provide order support.
• Operate customer accounts: create and manage accounts, save preferences, provide order history, and secure account access.
• Communicate with customers: deliver order confirmations, payment instructions, shipping updates, service notices, support responses, recall or safety-related notices, and other transactional communications.
• Provide customer service: investigate missing, damaged, delayed, incorrect, disputed, or fraudulent orders and administer refunds, replacements, reshipments, and carrier claims.
• Recover incomplete orders: identify abandoned carts or incomplete checkouts and send permitted reminders based on available contact and consent information.
• Administer promotions: apply discounts, validate promotional codes, prevent misuse, and administer customer-review or loyalty offers.
• Send marketing communications: send promotional emails or other commercial messages where we have the required consent or another permitted basis. Recipients may unsubscribe using the method provided in the message.
• Secure the Site and prevent fraud: detect suspicious activity, investigate misuse, protect accounts, enforce policies, and reduce payment and order fraud.
• Analyze and improve operations: understand Site usage, improve navigation and checkout, measure website and marketing performance, diagnose errors, and maintain website stability.
• Maintain records and meet obligations: maintain accounting, tax, transaction, consent, security, dispute, and compliance records and respond to lawful requests.

4) Consent and Marketing Communications

Where consent is required, we seek consent appropriate to the nature and sensitivity of the information and the purpose for which it is collected, used, or disclosed.

Transactional communications relating to an order, account, payment, delivery, policy, security matter, or customer-service request are separate from optional marketing communications.

Marketing emails may be sent where consent has been provided or where another basis permitted by Canadian law applies. Each marketing email will include an unsubscribe mechanism. Unsubscribing from marketing does not prevent us from sending necessary transactional or service communications.

Consent may be withdrawn where applicable, subject to reasonable notice and any legal, contractual, fraud-prevention, record-keeping, or transaction requirements.

5) Cookies and Similar Technologies

The Site uses cookies, local storage, pixels, tags, and similar technologies for functions that may include:

• Maintaining the shopping cart and checkout session
• Remembering account, language, or display preferences
• Maintaining login and security sessions
• Preventing fraud and malicious activity
• Measuring page visits, traffic sources, and customer journeys
• Diagnosing errors and improving website performance
• Measuring advertising or email effectiveness
• Supporting abandoned-cart and customer-communication functions

Some cookies are necessary for the Site to function. Others may support analytics, performance, or marketing. Browser settings may allow you to block or delete cookies, but disabling necessary cookies may prevent the cart, checkout, account, or other Site features from working correctly.

6) Sharing With Service Providers

We may disclose personal information to service providers that perform functions for Nordexa Research, including:

• Payment processing and payment verification
• Shipping, tracking, delivery, and carrier investigations
• Website hosting, storage, backups, and content delivery
• Email delivery, transactional messaging, and marketing automation
• Analytics, website measurement, and performance monitoring
• Fraud prevention, cybersecurity, and access control
• Customer-support, review, cart-recovery, and account services
• Accounting, tax, legal, insurance, and professional advisory services

Service providers receive only the information reasonably required to perform their services and are expected to handle it in accordance with their agreements, applicable law, and appropriate safeguards.

Nordexa Research does not sell customer personal information.

7) Other Permitted Disclosures

We may disclose personal information where reasonably necessary:

• To complete a transaction or provide a service requested by you
• To investigate fraud, misuse, payment disputes, delivery disputes, or security incidents
• To establish, exercise, or defend legal rights
• To comply with a subpoena, court order, lawful demand, regulatory requirement, or other legal obligation
• To protect Nordexa Research, our customers, service providers, or others from harm, fraud, or unlawful activity
• As otherwise permitted or required by applicable law

8) International and Interprovincial Processing

Nordexa Research sells and ships within Canada. However, some technology, hosting, payment, analytics, email, storage, security, or other service providers may process or store personal information outside Ontario or outside Canada.

When information is processed in another jurisdiction, it may be accessible to courts, law-enforcement bodies, regulators, or other authorities under the laws of that jurisdiction.

Nordexa Research remains responsible for personal information transferred to service providers for processing and uses contractual, technical, organizational, or other measures appropriate to the circumstances.

9) Security Safeguards

We use administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information we handle. These may include access restrictions, account controls, encryption provided by service platforms, security monitoring, backups, fraud screening, software maintenance, and restricted administrative access.

No website, network, transmission method, or storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for contacting us promptly if you believe an account, order, or communication has been compromised.

10) Privacy and Security Incidents

If we become aware of a privacy or security incident, we will assess the circumstances and take steps reasonably appropriate to contain, investigate, document, and address the incident.

Where required by applicable law, we will notify affected individuals, regulators, or other parties and maintain required records.

11) Retention and Deletion

We retain personal information only for as long as reasonably required for the purposes described in this Policy or to meet legal, accounting, tax, fraud-prevention, security, dispute-resolution, warranty, carrier, and contractual requirements.

Retention periods vary according to the type of information and the purpose for which it is held. For example, order, payment, tax, refund, delivery, consent, and dispute records may need to be retained longer than abandoned-cart, analytics, or routine support information.

When personal information is no longer required, we may delete, anonymize, aggregate, or securely dispose of it, subject to backup cycles and legal or operational requirements.

12) Access, Correction and Privacy Requests

Subject to applicable law, you may request:

• Access to personal information we hold about you
• Correction of inaccurate or incomplete information
• Information about how your personal information has been used or disclosed
• Withdrawal of consent where consent is the applicable basis
• Deletion of information that is no longer required, where deletion is legally and operationally available
• Review of a concern about our privacy practices

Requests may be sent to support@nordexaresearch.com. We may request information reasonably necessary to verify your identity and locate the relevant records.

Access may be limited where permitted or required by law, including where disclosure would reveal another individual’s information, confidential commercial information, privileged material, security information, fraud-prevention methods, or information that cannot lawfully be disclosed.

13) Communication Preferences

• Marketing opt-out: use the unsubscribe link included in a marketing email or contact support.
• Transactional messages: order, payment, shipping, security, account, policy, or support messages may still be sent when required to provide the requested service.
• Cookie controls: manage cookies through available Site controls, where provided, and through your browser settings.
• Account information: certain details may be reviewed or updated through your customer account.

14) Reviews and User-Submitted Content

If you submit a review, image, testimonial, or other content, the information you submit may be displayed publicly according to the review form and moderation process.

Do not include sensitive personal information, payment information, medical information, private order details, or information about another person in a public review.

We may retain review-submission records, moderation information, incentive records, and related communications for operational, fraud-prevention, disclosure, and compliance purposes.

15) Children and Age Restrictions

The Site and its products are intended for adults. Nordexa Research restricts purchases to individuals who are at least 21 years old.

We do not knowingly solicit orders or account registrations from individuals under 21. If you believe that an underage individual has provided personal information, contact us so that we can review the matter and take appropriate action.

16) Business Transactions

Personal information may be disclosed or transferred in connection with a proposed or completed financing, reorganization, merger, acquisition, sale, insolvency proceeding, or transfer of all or part of the business or its assets.

Any such disclosure or transfer will be handled subject to applicable law and appropriate confidentiality or use restrictions.

17) Third-Party Websites and Services

The Site may contain links to independent websites, scientific databases, laboratories, carriers, payment services, social platforms, or other third-party services.

Nordexa Research does not control those third parties and is not responsible for their content, privacy practices, security, availability, or use of information. Review the applicable third-party privacy policy before providing information directly to that party.

18) Canadian Privacy Framework

Nordexa Research handles personal information with reference to the Personal Information Protection and Electronic Documents Act (PIPEDA) and other Canadian privacy requirements that may apply to its activities.

Our privacy practices are intended to reflect principles concerning accountability, identifying purposes, consent, limiting collection, limiting use and retention, accuracy, safeguards, openness, individual access, and the ability to challenge compliance.

19) Changes to This Privacy Policy

We may update this Privacy Policy when our operations, technology, service providers, practices, or legal obligations change.

The updated version will be posted on this page with a revised effective date. Material changes may also be communicated through the Site, customer accounts, or email where appropriate.

Effective date: July 24, 2026