Privacy Policy

1 Summary

Limitless Clinic operates limitlessclinic.shop. This policy explains what we collect, why, and what you can do about it.

We collect only what we need to send you the products you order and to answer your questions. We do not sell personal data, and we do not share it with advertisers.

Because we sell research chemicals for laboratory use only, we also record your confirmation that you are ordering on that basis. That record is a compliance obligation, and we keep it with your order.

For data-protection questions, contact us at sublango@gmail.com.

2 What we collect

Order details: your name, email address, phone number, delivery address or parcel terminal, chosen carrier, the items you ordered and the total paid.

Compliance record: your confirmation that the products are for laboratory research use only, your acceptance of the Terms, and the IP address and timestamp of the order. We keep this so we can show that every sale was made on a research-use basis.

Payment information: the payment method you chose, the payment reference, and any payment receipt you upload. We never see or store your full card or bank credentials — payments happen through your own bank or wallet.

Correspondence: messages you send us by email, Telegram or WhatsApp, and our replies.

Technical data: standard web-server logs, including IP address, browser type and pages requested, kept for security and diagnostics.

Your language preference, stored in a cookie so the site opens in the language you chose.

3 Why we use it, and our legal basis

To perform our contract with you — processing, packing, shipping and supporting your order (GDPR Article 6(1)(b)).

To meet legal obligations — keeping accounting and tax records, and keeping the research-use declarations that let us evidence how the products were sold (Article 6(1)(c)).

For our legitimate interests — preventing fraud and abuse, securing the website, and declining orders that appear to be intended for human use (Article 6(1)(f)).

With your consent — where you have opted in to something specific, such as being told when a product is back in stock. You can withdraw consent at any time.

4 Cookies

We use only the cookies the site needs to function: one that remembers your cart, one that remembers your language, and WordPress's own session cookies if you log in.

We do not run advertising trackers or third-party analytics profiling on this site. There is nothing here that follows you to other websites.

5 Who we share it with

Carriers — Omniva, LP Express and DPD receive the name, address or terminal, and phone number needed to deliver your parcel.

Our hosting and email providers, who process data on our instructions under a data-processing agreement.

Banks and payment networks, to the extent needed to receive and reconcile your payment.

Authorities, where we are legally required to disclose information.

We do not sell personal data and we do not share it for advertising.

6 International transfers

Our providers are based in the European Economic Area wherever possible. Where a provider is outside the EEA, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

7 How long we keep it

Order and accounting records, including the research-use declaration: 10 years, as required by accounting and tax law.

Payment receipts you upload: kept with the order for as long as the order record is kept.

Correspondence: 3 years from our last exchange.

Web-server logs: 12 months.

Cart and language cookies: 30 days and 12 months respectively, or until you clear them.

8 Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, object to processing based on legitimate interests, and ask for your data in a portable format.

Some of these rights are limited where the law requires us to keep a record — we cannot, for example, delete an invoice or a research-use declaration within its statutory retention period.

Email sublango@gmail.com to exercise any of these rights. We respond within one month.

If you think we have handled your data badly, you can complain to your national data-protection authority.

9 Security

The site runs over HTTPS. Order data sits in an access-controlled database, and payment receipts are stored privately rather than in the public media library.

No system is perfectly secure, but if a breach ever affects your rights we will tell you and the regulator as the law requires.

10 Children

This site is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

11 Changes to this policy

We update this policy when our practices or the law change. The date at the top of the page shows when it last changed.