Privacy
Privacy policy
Quest Brands LLC DBA Healix Labs ("Healix Labs") collects only the personal data it needs to sell, ship, and verify analytical reference standards. This page sets out what is collected, how it is used, who it is shared with, and the rights you hold over it.
Data
What we collect
Name, email, and shipping address.
Products, quantities, lot identifiers, prices, and the researcher attestation submitted at checkout.
Handled by an external payment processor. Healix Labs receives only a confirmation, the amount, and the payment-method category — never card details.
A hashed password, reset tokens, and session identifiers. Plaintext passwords are never stored.
IP address, user-agent, and approximate location derived from IP, used for fraud and security monitoring.
Emails you send to Healix Labs and our replies, kept as customer-service records.
Usage
How we use it
Processing, packing, shipping, and supporting the orders you place.
Authenticating sign-in and maintaining your account and order history.
Meeting tax, recordkeeping, and research-use documentation obligations.
Detecting fraud, preventing diversion, and protecting the site and its data.
Technical data is used only for fraud prevention and security. It is never used for advertising or behavioural profiling.
Processors
Who we share with
Healix Labs does not sell personal data. It shares only what is necessary with providers that are contractually bound to use the data solely to perform their service.
Billing details and amount, to take payment. Card data is handled by the processor, not by Healix Labs.
Recipient name, shipping address, and order contents, to pick, pack, and dispatch.
Email address and message content, to send order and account notifications.
Data stored and served in the ordinary course of running the site, under contract.
Retention
Retention and your rights
Order records and attestations are kept for at least seven years to meet US tax and recordkeeping obligations. Account contact details are held for the active life of the account plus seven years. Server logs are kept for a limited period; email correspondence for two years from the last contact.
Depending on your jurisdiction you may request access, correction, portability, deletion, or object to processing. Order records and attestations cannot be deleted before their retention period ends. Requests must come from the account email address on file.
Legal
Cookies · Age · Changes · Contact
First-party only, for authentication, preferences, and cart state. No advertising cookies and no third-party analytics.
The site is intended for qualified researchers 21 years or older. Healix Labs does not knowingly collect data from anyone under 21.
The revision date is shown at the top of this page. Material changes are summarised in the first order confirmation email sent after a revision.
Privacy enquiries can be sent to [email protected]. See also the research use policy and the terms of sale. The data controller is Quest Brands LLC DBA Healix Labs, at:
Quest Brands LLC7901 4th St N, Ste 26860St. Petersburg, FL 33702HRL-DOC-P · REV 2026.07