Legal
Privacy Policy
Last updated: June 5, 2026
Vellara Wellness is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, protect, and share data when you access our platform. Please read this policy carefully. By creating an account or using our services, you consent to the practices described herein.
1. Who We Are
Vellara Wellness ("we," "us," or "our") operates a private research platform providing pharmaceutical-grade amino acids and related compounds exclusively to verified independent researchers, laboratories, academic institutions, and qualifying business organizations. Our platform is not a retail service and is not intended for general public use.
For any privacy-related questions or requests, please contact us at: privacy@vellarawellness.com
2. Information We Collect
We collect the following categories of personal information:
Account Information
- First and last name
- Email address
- Encrypted password credential
- Research classification (who you represent)
- Compliance acknowledgements and attestations
Order & Transaction Data
- Products requested
- Shipping and contact information provided at checkout
- Payment method type (logged for fulfillment purposes only — no full payment credentials stored on our servers)
- Order history and status
Usage & Technical Data
- IP address and device type
- Browser type and version
- Pages visited and session duration
- Error logs and diagnostic information
Communications Data
- Support inquiries and correspondence
- Email notifications you receive from us
- Feedback and responses you provide
3. How We Use Your Information
We use your personal information for the following purposes:
- To verify your identity and researcher qualifications during account creation
- To authenticate your access to the platform and protect account security
- To process and fulfill product orders and shipment notifications
- To communicate with you regarding your account, orders, and platform updates
- To maintain records of research compliance acknowledgements as required for regulatory purposes
- To detect, investigate, and prevent fraudulent activity, misuse, or violations of our Terms of Service
- To improve and optimize our platform's performance and user experience
- To comply with applicable laws, regulations, and legal obligations
We will never sell, rent, or trade your personal information to third parties for marketing or commercial purposes.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
Contract Performance
Processing necessary to fulfill your account agreement and product orders.
Legitimate Interest
Fraud prevention, platform security, and compliance enforcement.
Legal Obligation
Compliance with applicable laws including research chemical regulations.
Consent
Where you have given explicit consent, such as marketing communications (always opt-in only).
5. Research Compliance Records
Because our platform operates in the research chemicals sector, we are required to maintain records of the compliance attestations each user makes at registration. This includes confirmation of researcher status, age verification (21+), and acknowledgement that all products are for research use only. These records are maintained securely for a minimum of 7 years in accordance with applicable regulatory guidance and may be disclosed to law enforcement or regulatory authorities if required by law.
6. Data Security
We implement robust technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
Password Security
All passwords are hashed using salted cryptographic algorithms before storage. Plaintext passwords are never stored or logged.
Encrypted Transmission
All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
Access Controls
Access to user data is restricted to authorized personnel only, on a need-to-know basis. All access is logged and audited.
Database Security
Our databases are hosted on secured, isolated infrastructure with automated backups, encryption at rest, and network-level access controls.
Authentication Tokens
Session tokens are time-limited and tied to your account. Suspicious activity triggers automatic invalidation.
No Third-Party Payment Storage
We do not store full payment credentials on our servers. Payment information is handled through trusted, compliant third-party processors.
While we implement industry-standard security practices, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account and to contact us immediately if you suspect any unauthorized access.
7. Data Retention
We retain your personal data for as long as your account remains active or as needed to provide you with our services. If you request account deletion, we will remove your personal profile data within 30 days. However, we may retain certain records — including compliance attestations, order history, and communications — for up to 7 years as required by applicable laws governing research chemical distribution and financial record-keeping.
8. Your Rights
Depending on your location, you may have the following rights with respect to your personal data:
To exercise any of these rights, please email privacy@vellarawellness.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
9. Cookies & Tracking
We use essential cookies and session storage to maintain your login state and platform preferences. We do not use third-party advertising cookies or behavioral tracking. Analytics data, if collected, is used solely to improve platform performance and is not shared with advertising networks. You may disable cookies in your browser settings; however, this may affect platform functionality, including your ability to remain logged in.
10. Third-Party Services
We use trusted third-party services to operate our platform. Each partner is bound by data processing agreements and applicable privacy laws. Current third-party service categories include:
- •Cloud Hosting & Infrastructure — Servers and databases hosted on secured, compliant cloud infrastructure.
- •Email Delivery — Transactional emails (order confirmations, shipping notifications) sent via a compliant email service provider.
- •Payment Processing — Payment transactions handled by PCI-DSS compliant processors. We do not store card data.
11. Children's Privacy
Our platform is strictly not intended for individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. Account creation requires explicit confirmation of age eligibility. If we become aware that a minor has created an account without appropriate consent, we will immediately deactivate the account and delete all associated data.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. We will notify you of material changes via email and by posting the updated policy on this page with a revised "last updated" date. Your continued use of the platform following such notification constitutes your acceptance of the updated policy.
13. Contact Us
For any privacy-related questions, data requests, or concerns, please contact our Privacy Team:
Vellara Wellness — Privacy Office
Email: privacy@vellarawellness.com
Response time: within 30 days
Related policies: Terms of Service · Research Disclaimer · Legal Notice
Last updated: June 5, 2026. This Privacy Policy is governed by the laws of the United States.