I'm 21 or over, and I'm buying for research use.
Fortis Labs · Dallas, Texas
Effective 15 August 2026
This policy explains what personal information Fortis Labs collects, why, and what rights you have.
Because we verify purchasers before shipping, we hold more identifying information than a typical online store, and we keep verification records longer than commercial records. Section 5 explains why.
We do not knowingly collect information from anyone under 18.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Service providers acting on our instructions — hosting, email, shipping carriers, verification vendors, IT support — who may use it only to provide that service.
Payment processors. Card details are collected and processed directly by our processor under its own terms. Fortis Labs does not collect or store card numbers on this website.
Regulators and law enforcement where required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to investigate suspected misuse or diversion.
Corporate transactions — in a merger, acquisition, or sale of assets, information may transfer subject to this policy.
Professional advisers, including legal counsel and insurers.
We operate from the United States. If you are outside the US, your information will be transferred to and processed there, which may not offer the same protections as your jurisdiction. Where required we use Standard Contractual Clauses or another approved mechanism.
Entry confirmations, Research Use Agreements, verification records, and order history are retained for seven years, and in the case of agreements for the life of the account plus seven years. Lot certificates and traceability records are kept for the shelf life of the material plus five years. Website analytics are kept for 26 months.
We keep compliance records longer than commercial records because they are the evidence that our sales were properly restricted.
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and access controls. No method of transmission or storage is completely secure. If a breach affecting your information occurs, we will notify you and any regulator as required by law.
Strictly necessary — session, security, your entry confirmation, and the contents of your order. These cannot be disabled without breaking the site.
Analytics — aggregate usage measurement.
Preference — remembering settings.
We do not use advertising or cross-site tracking cookies. Most browsers let you block or delete cookies.
Depending on where you live you may have the right to access, correct, delete, or port your information, to object to or restrict processing, to withdraw consent, and to opt out of sale or sharing — we do neither. California, Colorado, Connecticut, Virginia, Utah, and Texas law grant versions of these rights, as do the GDPR and UK GDPR.
Limits. We may decline a deletion request where we must keep a record for compliance. Confirmations, Research Use Agreements, verification records, and order history are retained on that basis even after an account closes.
To exercise a right, contact support@fortislabs.info. We verify identity before acting and respond within the period required by law. We will not discriminate against you for exercising a right.
We may update this policy. Material changes are posted here with a revised effective date.
Fortis Labs — Privacy, 2626 Cole Avenue, Suite 300, Dallas, Texas 75204
support@fortislabs.info