Last updated: 26 September 2026

This Privacy Policy explains how Prism Research Labs (“Prism Labs”, “we”, “us”, “our”) collects, uses, stores, shares and protects personal information when you visit prismresearchlab.com (the “website”), create an account, sign in with email or with Google, contact us or place an order. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

By using the website you agree to this Privacy Policy. It should be read together with our Terms and Conditions.

1. Who we are and how to contact us

Prism Research Labs is based in Melbourne, Victoria, Australia, and supplies research-grade compounds for in-vitro laboratory research only.

For any question or request about your personal information, email support@prismresearchlab.com.

2. Personal information we collect

2.1 Information you give us

  • Account information: your first name, last name, email address and password. Passwords are stored only in encrypted (hashed) form; we cannot see them.
  • Research-use and age confirmation: when you create an account you must confirm that you are 21 or over and that you are accessing products for in-vitro research only. We record that confirmation together with the date and time, your IP address and the version of the wording you accepted, as proof of the terms you agreed to.
  • Marketing choice: whether you ticked the optional box to receive emails from us. This box is unticked by default.
  • Order information: billing and shipping name, address, phone number and email address, the products ordered, order value and order notes.
  • Verification documents: as set out in our Terms and Conditions, we may ask for information to confirm an order is for legitimate research, such as an institutional email address, purchase authorisation, research or faculty identification, or laboratory registration details.
  • Communications: information you send us through the contact form, by email, or in reviews and support requests.

2.2 Information we receive from Google (Sign in with Google)

You can choose to create an account or sign in with your Google account. If you do, and only after you approve it on Google’s consent screen, Google shares the following with us:

  • your name;
  • your email address and whether Google has verified it;
  • a unique Google account identifier (a number that lets us recognise your Google account the next time you sign in).

We request only Google’s basic sign-in permissions (openid, email and profile). We do not receive your Google password, and we do not access your Gmail, contacts, Google Drive, calendar, photos or any other data in your Google account.

2.3 Information we collect automatically

  • Device and usage information: IP address, browser and device type, pages viewed, links clicked, time spent on pages, the website that referred you, and approximate location based on your IP address.
  • Cookies and similar technologies: see section 6.

2.4 Payment information

Payments are processed by our third-party payment provider on secure systems. Your full card details are entered with and processed by that provider; we do not store your full card number or security code.

3. How we use your personal information

  • to create and manage your account and let you sign in, including with Google;
  • to keep you signed in on your device so you do not have to sign in on every visit;
  • to record and prove that you accepted our research-use and age terms;
  • to review, verify, process, ship and support your orders and handle payments;
  • to send service emails such as order confirmations, shipping updates and password-reset links;
  • to send marketing emails and offers, only if you opted in (you can unsubscribe at any time);
  • to credit referrals made through our affiliate programme;
  • to understand how the website is used, fix problems and improve it;
  • to measure and improve our advertising;
  • to detect and prevent fraud, misuse and security issues; and
  • to comply with our legal obligations.

4. How we use Google user data

This section applies to information we receive through Sign in with Google (section 2.2).

  • Use: we use it only to create your Prism Labs account or sign you in to your existing account, to link your Google account to your Prism Labs account so you can sign in with Google again, and to pre-fill your name and email address in your account.
  • Storage: it is stored with your account in our website database on our hosting provider’s secured servers, and kept for as long as your account exists.
  • Sharing: we do not sell it, rent it or share it with advertisers or data brokers, and we do not use it for advertising or to build profiles. It is only accessible to our hosting and website service providers as needed to run the website, or where required by law.
  • No other access: we cannot read or change anything else in your Google account.
  • Removing access: you can remove Prism Labs’ access at any time from your Google Account at myaccount.google.com/connections. This stops future Google sign-ins but does not delete your Prism Labs account; to delete it, see section 10.

Prism Labs’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share personal information with

We do not sell your personal information. We share it only with service providers who help us operate the website and business, and only as needed for the purposes in section 3:

  • Website hosting and email delivery: Hostinger (hosting), and our email-sending services for order and account emails.
  • Payments and checkout: our payment and checkout provider (Tagada).
  • Shipping: our distribution facilities and couriers, to pack and deliver your order.
  • Email marketing: Omnisend and Hostinger Reach, only if you opted in to marketing emails.
  • Affiliate programme: SliceWP and Whop, to track and credit referrals when you arrive through an affiliate link.
  • Analytics and advertising: Google (Google Analytics, Google Tag Manager and Google Ads), Meta (Facebook and Instagram) and Microsoft Clarity — see section 6.
  • Professional advisers and authorities, where required by law or to protect our rights.

Overseas disclosure

Some of these providers store or process information outside Australia, including in the United States and the European Union, and our products may ship from distribution facilities outside Australia. Where personal information is sent overseas, we take reasonable steps to ensure it is handled in a way that is consistent with the Australian Privacy Principles.

6. Cookies, analytics and advertising

Cookies are small files stored in your browser. We use:

  • Essential cookies: to keep you signed in, remember your cart and checkout, remember access granted through a guest access link, and keep the website secure.
  • Analytics cookies: Google Analytics (via Google Tag Manager, including server-side tagging) and WordPress statistics measure visits and how the website is used. Microsoft Clarity records how visitors interact with pages (for example clicks, scrolling and mouse movement) so we can find and fix usability problems; it does not record what you type in password or payment fields.
  • Advertising cookies: the Meta Pixel and Google Ads help us measure the results of our ads and show relevant ads on those platforms. Information such as pages viewed and purchases may be shared with Meta and Google for this purpose.
  • Attribution cookies: to record how you found us (for example the referring website or campaign) and to credit affiliate referrals.

You can block or delete cookies in your browser settings. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout, manage Google ad personalisation at adssettings.google.com and Meta ad preferences in your Facebook or Instagram settings. If you block essential cookies, some parts of the website (such as signing in and checkout) will not work.

7. How long we keep personal information

  • Account information, including information received from Google: while your account is open, and deleted when you ask us to delete your account (except as below).
  • Research-use and age confirmation records: while your account exists and for a reasonable period afterwards, as proof of the terms accepted.
  • Orders and payment records: as long as required for tax, accounting and legal purposes (generally up to 7 years).
  • Marketing data: until you unsubscribe or ask us to delete it.
  • Analytics data: according to the retention settings of the analytics providers.

8. How we protect personal information

The website uses HTTPS encryption, passwords are stored hashed, sign-in forms are protected against automated abuse, and access to customer information is limited to people and providers who need it. No website or method of storage is completely secure, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure.

9. Age requirement

The website and our products are only for people aged 21 or over. We do not knowingly collect personal information from anyone under 21. If you believe someone under 21 has given us personal information, contact us and we will delete it.

10. Your rights and choices

  • Access and correction: you can view and update most of your details in My Account, or ask us for a copy of the personal information we hold about you and to correct it.
  • Account deletion: email support@prismresearchlab.com from the email address on your account and ask us to delete your account. We will delete your account and associated personal information, including information received through Sign in with Google, within 30 days, except records we must keep by law (such as order and tax records).
  • Marketing emails: click “unsubscribe” in any marketing email, or email us.
  • Google sign-in: remove Prism Labs’ access at myaccount.google.com/connections at any time.
  • Cookies: manage them in your browser as described in section 6.

We will respond to requests within a reasonable time, usually within 30 days. We may need to confirm your identity first.

11. Complaints

If you have a concern about how we handled your personal information, please contact us first at support@prismresearchlab.com and we will try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when we add new features or service providers. The “Last updated” date at the top shows when it last changed. If we make significant changes we will take reasonable steps to let you know.

13. Contact us

Prism Research Labs
Melbourne, Victoria, Australia
Email: support@prismresearchlab.com