Scope
This Privacy Notice explains how Upward Research Co. handles personal information associated with our website, research accounts, communications, and transactions. Our purchasing services are directed to eligible U.S. residents, including independent researchers and authorized research-organization representatives. The notice also covers people who contact us without purchasing. Acknowledgment does not enroll you in marketing.
Information we collect
Account information includes your name, email address, authentication information, optional telephone number, addresses, and preferences. Qualification information includes your age-18 and U.S.-residency attestations, selected research affiliation, organization and authorized role where applicable, intended laboratory use, relevant knowledge and facilities, and review decisions.
Agreement records include the contractual confirmations and Privacy Notice acknowledgment, the exact policy versions and their content, your initials, automatically recorded date and time, and the relevant account or order. We retain evidence of past confirmations without changing it to match later policies or profile information.
Transaction records include cart contents, products, quantities, charges, payment references and status, refunds, disputes, shipping and tracking, and product and lot information needed for fulfillment and traceability. Communications include contact submissions, support and privacy requests, replies, and delivery status.
Technical information can include IP addresses, device and browser information, access times, referring pages, sessions, security and error events, and cookies. We receive information directly from you, through use of our services, and from relevant payment, shipping, communications, and security providers.
Payments
When payment is available, card details are entered through Stripe’s hosted payment process. We receive transaction references, amounts, status, and relevant payment-method, refund, dispute, and risk information. Do not submit full card numbers, security codes, or passwords through contact or support fields. Stripe handles information entered in its payment interface under its own notice. Creating an account does not initiate a payment.
How we use information
We use information to operate and protect accounts; assess research eligibility and purchasing authority; record agreements; enable eligible customers to pay at checkout; validate purchases; fulfill and track orders; address support, payment disputes, and privacy requests; maintain product and lot traceability; and meet applicable legal, tax, accounting, security, and dispute-resolution obligations. We may review relevant information to investigate fraud, prohibited use, or safety concerns.
We use contact details for necessary account, order, security, and safety communications and for optional marketing consistent with your choices. We use technical records to maintain reliability and diagnose problems.
Service providers and disclosures
Our website uses Vercel for hosting and Supabase for database, authentication, and file storage. Stripe supports hosted payments where available. Resend supports email delivery when enabled. Carriers and relevant fulfillment providers receive information needed for delivery. Service providers receive information appropriate to their work and applicable contractual or legal requirements; payment providers and carriers may also act under their own notices and legal obligations.
We may disclose relevant information at your direction; to comply with law or valid legal process; to investigate fraud, prohibited conduct, or threats; to exercise or defend rights; or in a merger, financing, reorganization, or business transfer subject to applicable protections. Aggregated or deidentified information may be used where it is not reasonably associated with an identifiable person.
Cookies and advertising
We use necessary cookies for sign-in, security, the shopping cart, and preferences. The guest-cart cookie expires after seven days. You can clear or block cookies through your browser, but necessary functions may stop working. Infrastructure providers may process technical usage and security information separately from cookies.
We do not sell personal information or share it for cross-context behavioral advertising. We do not deploy advertising pixels or session-replay tools through our website. If optional tracking is introduced, we will provide required information and choices before using it and obtain consent where required. Applicable opt-out preference signals, including Global Privacy Control, are honored where legally required.
Messages and preferences
Optional marketing is separate from registration, account eligibility, and purchasing agreements. You can change the optional email preference in your account or use the applicable unsubscribe mechanism. Turning it off does not stop necessary account, order, security, support, or recall communications. A preference control does not itself mean a marketing campaign is active.
Retention and account closure
We retain information for as long as reasonably necessary for its purpose and applicable obligations. Relevant criteria include account and support needs, uncompleted transactions, tax and financial records, fraud investigations, disputes, signed agreements, qualification evidence, product and lot traceability, security history, and legal holds.
Deactivation preserves records. After review of our record-retention requirements, an erasure request may remove eligible profile information, addresses, and research descriptions. It does not automatically remove authentication identity, agreement/signature evidence, historical qualification decisions, order and financial records, security history, or traceability records that must be retained. Backup copies can also remain subject to appropriate safeguards. When information is no longer needed, we delete, deidentify, or securely dispose of it as appropriate.
An account-closure request immediately deactivates access and turns off optional email while any erasure review proceeds. A general privacy question or request for access does not itself close the account.
Privacy rights and requests
Depending on your residence and applicable law, you may have rights to access, correct, delete, or obtain a portable copy of information; opt out of qualifying sale, sharing, targeted advertising, or certain profiling; limit certain sensitive-information uses; or appeal a decision. Rights may have exceptions.
Use the support/privacy details on our Contact page and identify your message as a privacy request. We may reasonably verify your identity or an authorized representative’s authority, respond within applicable deadlines, and explain any denial or applicable appeal route. We do not discriminate for exercising a protected privacy right. Do not send a password, full card details, or identity documents with your initial request.
Age and sensitive information
Purchaser accounts are for people age 18 or older; our services are not directed to children. Contact us if you believe a child submitted information so we can investigate and take appropriate action. Do not submit patient records, diagnoses, prescriptions, government identification numbers, confidential research details, or information about other people that is unnecessary for your request.
Security and processing locations
We use reasonable safeguards appropriate to our services and information. No system can guarantee absolute security. Protect your credentials and notify us promptly of suspected unauthorized access.
Information may be processed where we or our providers operate, subject to applicable safeguards and law. Our business is based in Ohio, United States. Some service providers may process information in other countries, even though we deliver only within the United States.
Updates and contact
The displayed version and publication date identify this notice. We provide additional notice or request renewed acknowledgment or consent when required. Updates do not remove rights or obligations applying to previously collected information. Contact Upward through the details on our Contact page.