Privacy Policy

Depending on your interaction with Vial Drop Labs, we may collect or process:

Account information, including your name, email address, account credentials, and account identifiers.

Age attestation information. Customers must confirm that they are at least 21 years old. We maintain the fact and time of that confirmation. We do not collect a date of birth or identity document as part of the current age-attestation process.

Order and checkout information, including billing name and address, shipping address, email address, telephone number where provided, products purchased, quantities, coupon information, order totals, order status, shipping information, and customer/order notes.

WooCommerce may also record technical information associated with an order, including IP address and browser user-agent information.

Communications, including information you send directly to Vial Drop Labs by email or other functioning support channels.

Contact and Support Information. When you contact us through our website, we may collect your name, email address, inquiry category, optional order number, and the contents of your message. We use this information to respond to inquiries, provide customer support, address order or product-related questions, and maintain appropriate business records.

Technical and device information, including cookies, session information, browser/device information, referral or attribution information, security information, IP address, and similar technical information generated through use of our services.

Our customer-facing storefront uses a separate ecommerce backend for accounts and order processing.

Account registration, login, password-reset requests, and age attestation are securely transmitted to our WordPress/WooCommerce backend for processing. Passwords are not retained in the Lovable storefront's browser storage or application database.

The shopping cart on vialdrop.com is stored locally in the customer's browser until checkout begins.

At checkout handoff, the system transfers product variation identifiers, quantities, and limited session/security information necessary to establish the WooCommerce checkout.

Billing information, shipping information, and payment information are entered afterward on the secure checkout system and are not transmitted through the Lovable storefront during that handoff.

We may use information to:

• create and maintain accounts;
• authenticate customers;
• record and verify the 21+ attestation;
• maintain shopping-cart and checkout functionality;
• process and fulfill orders;
• process or facilitate payments;
• arrange shipping and tracking;
• communicate about accounts, orders, payments, and shipments;
• respond to customer inquiries;
• detect and prevent fraud, abuse, and unauthorized activity;
• maintain website and information security;
• maintain business, accounting, transaction, and tax records;
• enforce our policies and agreements;
• comply with legal obligations; and
• operate and improve our services.

Vial Drop Labs currently supports multiple payment methods.

Card payments are processed through Tagada Pay. The current integration redirects the customer to a Tagada-hosted secure payment environment for card entry. Tagada may receive customer, transaction, device, and other information necessary to process and support the transaction and may use its own cookies or similar technologies.

Cryptocurrency payments are supported through MyCryptoCheckout, which facilitates cryptocurrency payment verification. Cryptocurrency transactions may also be publicly recorded on the applicable blockchain.

Direct bank transfer is also available. Orders using this method may remain on hold until payment is received and confirmed.

Payment providers process information according to their own terms and privacy practices.

We process customer name, address, contact information, order information, and other information necessary to arrange shipment and provide tracking.

Our current checkout uses a flat-rate shipping method and does not transmit the customer's address to UPS for live rate calculation.

Shipping or fulfillment providers may receive information necessary to generate shipping labels, transport packages, fulfill orders, or provide tracking when those services are used.

Vial Drop Labs uses cookies and browser-storage technologies for account authentication, security, cart functionality, preferences, ecommerce sessions, attribution, and related website operations.

On vialdrop.com, these currently include technologies used for:

• authentication;
• security and bot management;
• storefront infrastructure;
• browser-local shopping-cart storage;
• preference storage; and
• page/session functionality.

On store.vialdrop.com, WooCommerce uses cookies necessary for authentication, customer sessions, and cart/checkout functionality.

WooCommerce also currently uses order-attribution technologies that can record referral source, campaign/UTM information, landing information, session information, and device-related attribution.

Our card-payment provider may also use cookies and browser storage in connection with its services.

We use analytics, advertising, attribution, and performance-measurement technologies on the customer-facing storefront. These currently include:

• Google Analytics 4, which measures page views and engagement with website content;
• Microsoft Advertising Universal Event Tracking (UET), which records page visits for advertising measurement;
• the Meta Pixel, which records page views for advertising attribution and measurement; and
• the Reddit Pixel, which records page visits and on-site activity such as product views, additions to the shopping cart, and account signups.

Each of these technologies may set or read cookies and similar browser identifiers associated with the vialdrop.com domain so that activity can be attributed to a browser across pages and sessions.

We do not currently use Google Tag Manager, Hotjar, or Microsoft Clarity on the customer-facing storefront.

We may disclose information to providers where reasonably necessary to operate our business and services.

Current systems and providers include services supporting:

• storefront infrastructure and hosting;
• WordPress/WooCommerce hosting and ecommerce operations;
• payment processing;
• cryptocurrency payment verification;
• transactional email;
• security and bot management;
• web-font delivery;
• data backup; and
• other infrastructure necessary to operate the service.

Our current environment includes Lovable, Hostinger, Cloudflare, Google Fonts, Tagada Pay, MyCryptoCheckout, WooCommerce, and backup infrastructure provided through UpdraftPlus.

We may also disclose information when reasonably necessary to comply with law, legal process, enforce our agreements, prevent fraud or abuse, or protect our rights, customers, systems, or others.

Our WooCommerce checkout currently uses order-attribution functionality that may associate orders with information such as referral source, UTM/campaign information, landing page, session count, and device type.

This information may be used to understand how customers reach the store and how orders originate.

On vialdrop.com, we may use first-party cookies to understand how visitors arrive at and interact with the website.

Our attribution cookie is named vdl_attr. It may retain:

• traffic source;
• traffic medium;
• campaign information;
• advertising click identifiers such as msclkid, gclid or fbclid;
• the referring website domain;
• the landing page path; and
• timestamps.

The vdl_attr cookie is not intended to store your name, email address, account information, order information, full referring URLs or IP address. It may remain for up to 90 days.

A separate cookie named vdl_consent stores your attribution and privacy preference, together with the date of your choice and the version of the notice shown. It may remain for up to one year.

Visitors in the European Economic Area, the United Kingdom and Switzerland, and visitors whose region cannot be determined, are asked for their preference. Until they accept, vdl_attr is not stored and the analytics and advertising tags described in this policy are not loaded. For other visitors these are enabled by default.

You can review or change your preference at any time using the “Cookie settings” link in the website footer. Declining or withdrawing consent deletes vdl_attr and prevents new attribution information from being stored, and prevents analytics and advertising tags from loading, while consent remains declined. If those tags were already active, the page reloads once to apply your choice.

Account, password-reset, order, and related transactional emails are currently generated through our WordPress/WooCommerce environment and delivered through our hosting infrastructure.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business and legal purposes, including order fulfillment, accounting, taxation, fraud prevention, security, dispute resolution, recordkeeping, and enforcement of agreements.

Certain ecommerce logs may have shorter technical retention periods, while customer accounts and order records may be retained for longer periods unless deleted or otherwise managed.

Our current system does not apply a single universal retention period to all customer and order information.

Information may also remain in backups for a period of time after deletion from active systems.

Customers may contact support@vialdrop.com with questions or requests concerning personal information.

Depending on the request and applicable law, we may need to verify identity before providing access, correction, export, or deletion assistance.

Certain information may need to be retained notwithstanding a deletion request where reasonably necessary or legally required for transaction records, taxation, accounting, fraud prevention, dispute resolution, security, or other legal obligations.

The current customer interface does not provide a self-service account-deletion or personal-data-export tool; these requests should be directed to support.

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

Current safeguards include HTTPS, secure authentication cookies, server-side credential handling, limited-duration sessions, server-to-server authentication, replay protections, and restrictions intended to prevent secrets and credentials from being exposed through the customer-facing application.

No method of electronic transmission or storage can be guaranteed completely secure.

Vial Drop Labs does not permit purchases by persons under 21.

Our services are not directed to children, and we do not knowingly seek to collect personal information from children through the purchasing process.

We may update this Privacy Policy as our services, technology, providers, or legal obligations change.

The Effective Date at the top identifies the current version.

Vial Drop Labs, LLC

support@vialdrop.com