KLOWLA Privacy Policy

Last Updated: August 24, 2026

Introduction

This Privacy Policy describes how KLOWLA (“KLOWLA,” “we,” “us,” “our,” or “the Company”) collects, uses, discloses, and safeguards information in connection with your access to and use of klowla.com and the products and services offered through it (collectively, the “Services”). Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Use and Service (the “Terms”), including the Research Use Only (RUO) Policy and Waiver and Release Agreement referenced therein (together with the Terms, the “Related Documents”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. As stated in Section 8 of the Terms, this Privacy Policy describes our current data practices; it is not incorporated into the Terms and does not create contractual rights or obligations beyond those expressly stated in Section 8 of the Terms. Any dispute relating to your personal information is subject to the informal dispute resolution, arbitration, class-action waiver, and governing-law provisions set forth in Sections 18 and 19 of the Terms.

Eligibility and Purchaser Certification

Our Services are intended solely for individuals who are at least 21 years of age and who meet the purchaser certification requirements set forth in Section 5 of the Terms, including research qualifications or credentials. Information collected in connection with your account, purchase, or use of the Services reflects this intended audience, and this Privacy Policy should be read in that context. We do not knowingly offer the Services to, or collect information from, individuals who do not meet this eligibility requirement. See “Children’s Privacy and Age Restrictions” below.

Information We Collect

Information You Provide to Us

We collect information you provide directly, including when you create an account, place an order, complete purchaser certification or Related Document acknowledgments, contact customer support, or otherwise communicate with us. This may include:

• Name, email address, telephone number, and billing and shipping addresses
• Account credentials (e.g., username and password)
• Professional, institutional, or laboratory affiliation, and other information provided to satisfy any purchaser certification requirements.
• Order history, product selections, and correspondence regarding your orders
• Information provided in connection with order verification under Section 9 of the Terms, including documentation submitted to establish researcher or institutional qualification
• Payment information, which is collected and processed by our third-party payment processor(s) and is not stored by us (see “Payment Information” below)
• Information submitted in connection with a return, refund, or damaged/defective-product claim, including photographic evidence you provide
• Communications you send to us, including customer support inquiries, DMCA or intellectual property notices, and correspondence relating to a Dispute Notice under Section 18.1 of the Terms
• If you elect to receive marketing communications, your contact information and your opt-in or out communication preferences.

Information Collected Automatically

When you use the Services, we and our service providers may automatically collect:

• IP address, device and browser type, operating system, and general location derived from IP address
• Pages viewed, links clicked, referring/exit pages, and similar usage data
• Cookies and similar tracking technologies, as described in “Cookies and Tracking Technologies” below
• Acceptance metadata associated with your acceptance of the Terms and Related Documents, including the date, time, IP address, user-agent data, and agreement version identifier, as described in Section 1.2 of the Terms. We retain this information as evidence of assent and formation of the agreement between you and the Company.

Information We Obtain from Third Parties

We may receive information about you from:

• Payment processors, regarding the status of a transaction (e.g., authorization, decline, or chargeback)
• Shipping carriers (UPS, FedEx, and USPS), regarding shipment status and delivery confirmation
• Fraud-prevention, order-verification, and compliance screening providers, including providers who screen order and customer information against U.S. government denied-party, restricted-party, and sanctions lists in connection with Section 16.1 of the Terms (Export Controls and Sanctions)
• Parties who submit a DMCA or intellectual property notice concerning your conduct, or a Dispute Notice concerning a claim involving you

Payment Information

We do not directly collect, process, or store full payment card information. Payment is handled by one or more third-party payment processors Paylync Inc DBA, whose collection and use of your payment information is governed by their own privacy policies. We receive limited transaction information from our payment processor(s) (such as confirmation of payment, the last four digits of a payment card, and billing name/address) necessary to process, verify, and support your order.

Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies (such as web beacons and similar scripts) to operate the Website, remember your preferences, maintain your session (including during account login and checkout), detect and prevent fraud and security incidents, and analyze Website usage and performance. Cookies may also be used for marketing/advertising purposes.

You can control cookies through your browser settings, including by blocking or deleting cookies; doing so may affect the availability of certain Website features, including account login and checkout functionality.

How We Use Your Information

We use the information described above to:

• Create and administer your account and verify your eligibility and purchaser certification under Sections 2 and 5 of the Terms
• Process, verify, fulfill, and ship your orders, including additional order verification required under Section 9 of the Terms
• Process payments and manage billing, refunds, and chargebacks
• Screen orders and customer information against denied-party, restricted-party, and sanctions lists, and otherwise comply with export control and sanctions laws under Section 16.1 of the Terms
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Communicate with you regarding your account, orders, shipping, returns, product recalls or withdrawals (Section 10 of the Terms), and customer support inquiries
• Maintain records of your acceptance of the Terms and Related Documents as evidence of assent and agreement formation, and to establish the specific version of the Terms applicable to a given order (Section 24 of the Terms)
• Respond to Dispute Notices, DMCA and intellectual property notices, legal process, and requests from government or regulatory authorities
• Enforce the Terms and Related Documents, including the purchaser certification, RUO restrictions, and acceptable-use provisions
• Send you marketing communications
• Maintain, secure, and improve the Website and Services, including through aggregated or de-identified analysis of usage data

How We Share Your Information

We do not sell your personal information for monetary consideration. We disclose personal information as follows:

• Service providers. To payment processors, shipping carriers, hosting and IT providers, customer support platforms, and fraud-prevention, order-verification, and compliance-screening vendors, solely to perform functions on our behalf.
• Compliance, legal, and regulatory disclosures. Where required by law, subpoena, or other legal process; to comply with export control, sanctions, and denied-party screening obligations under Section 16 of the Terms; to cooperate with regulators or law enforcement in connection with suspected misuse, fraud, or non-compliance as described in Section 17 of the Terms; and to establish, exercise, or defend legal claims.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, consistent with Section 22.5 of the Terms.
• Recalls and withdrawals. With affected customers and, where necessary, with regulatory authorities or carriers, in connection with a product recall or withdrawal under Section 10 of the Terms.
• General business operations. With our affiliates, subsidiaries, and professional advisors (such as attorneys, accountants, auditors, and insurers), and as otherwise reasonably necessary to operate, maintain, and support our business, consistent with the purposes described in this Privacy Policy.
• With your consent or at your direction.

International Shipments and Cross-Border Data Handling

If you place an order for international shipment, information necessary to process, ship, and screen your order (including your name, address, and country) may be transferred to, and screened against, U.S. government and international denied-party or sanctions lists, and may be shared with customs authorities, carriers, or compliance-screening vendors as necessary to complete the shipment or satisfy Section 16 of the Terms. You remain solely responsible for compliance with destination-country import laws, as set forth in Section 16.2 of the Terms.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to service your account and orders, comply with our legal and regulatory obligations (including export-control and tax recordkeeping), resolve disputes, and enforce the Terms and Related Documents.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. Our store operates on the Shopify platform, and personal information is transmitted using industry-standard encryption (TLS/SSL) and stored in encrypted form. Payment card transactions are processed by a PCI DSS Level 1 compliant payment provider; full payment card numbers are tokenized and are not stored or accessible by us. We limit access to personal information to authorized personnel on a role-based basis, require multi-factor authentication for administrative accounts, and maintain timestamped records of your acceptance of these Terms. We engage third-party service providers who are contractually obligated to protect personal information consistent with this policy.

No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account, as set forth in Section 7 of the Terms. Please notify us promptly at [support email] if you believe your account has been compromised.

Your Choices

• Marketing communications. If you have opted in to receive marketing emails, you may opt out at any time by clicking the unsubscribe link included in every marketing email, or by emailing us at info@klowla.com with the subject line “Unsubscribe.” We will process your request within ten (10) business days. Opting out of marketing communications does not affect transactional communications relating to your account, orders, returns, or legal notices.
• Account information. You may review and update certain account information by logging into your account or contacting us at info@klowla.com.
• Access, correction, and deletion requests. You may contact us to request access to, correction of, or deletion of personal information we hold about you. We will respond to verified requests within a reasonable time. We may decline a request, or retain certain information notwithstanding a deletion request, where necessary to comply with a legal obligation, complete a transaction, enforce the Terms and Related Documents, or exercise or defend a legal claim, including the acceptance and audit records described under “Data Retention” above.

If you reside in a jurisdiction that grants you additional statutory privacy rights, we will honor valid requests to the extent required by applicable law.

Children’s Privacy and Age Restrictions

Our Services are intended for use only by individuals who are at least 21 years of age and meet the purchaser certification requirements of Section 5 of the Terms; the Services are not directed to individuals under 21. Consistent with Section 2 of the Terms, orders from individuals we identify as under 21 will be denied and cancelled without notice. We do not knowingly collect personal information from anyone under the age of 13. If we become aware that we have collected personal information from a child under 13, we will delete that information.

Third-Party Links and Content

The Website may link to or reference third-party websites, marketplaces, social media, or content that we do not control, including the third-party content addressed in Section 6 of the Terms. This Privacy Policy does not apply to, and we are not responsible for, the privacy or data practices of any third party. We encourage you to review the privacy policy of any third-party site before providing information to it.

Relationship to the Terms of Use and Service

This Privacy Policy supplements, and should be read together with, the Terms and the Related Documents. As stated in Section 8 of the Terms, this Privacy Policy is not incorporated into the Terms and does not itself create contractual rights or obligations beyond those expressly stated in Section 8 of the Terms. Any dispute relating to your personal information is governed by the informal dispute resolution, binding arbitration, class-action waiver, and governing-law provisions of Sections 18 and 19 of the Terms, and is subject to the limitation of liability and indemnification provisions of the Terms and the Waiver and Release Agreement.

Changes to This Privacy Policy

We may revise this Privacy Policy at any time by posting an updated version on the Website and updating the “Last Updated” date above, consistent with Section 8 of the Terms. Your continued use of the Services after a revision becomes effective constitutes your acceptance of the revised Privacy Policy.

Governing Law

This Privacy Policy is governed by the laws of the State of New Mexico, United States, without regard to its conflict-of-law principles, consistent with Section 19 of the Terms.

Contact Us

If you have questions about this Privacy Policy or wish to exercise any of the choices described above, please contact us at:

Email: info@klowla.com