Privacy Policy

This Privacy Policy describes how ERZA Lab LLC ("ERZA," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website, purchase our products, or otherwise interact with our services (collectively, the "Service").

We are committed to handling your personal data responsibly and transparently. By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Service.

We collect information that you provide directly to us, including your name, email address, postal address, shipping and billing details, telephone number, and any correspondence you send to our support team.

When you visit or navigate our Service, we automatically collect certain technical and usage information from your device, including your IP address, browser type and version, operating system, referring website, device identifiers, and pages visited.

All payment transactions are handled directly by PCI-DSS compliant third-party payment processors. We do not store or retain full credit card or payment card account numbers on our servers.

We use your personal data to process and fulfill orders, coordinate shipping and delivery, issue order confirmations and receipts, and provide customer care and technical support.

We also use personal data to maintain, secure, and improve our website and services, monitor usage patterns, prevent fraudulent transactions or security incidents, and comply with applicable legal obligations.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the legal bases established by the General Data Protection Regulation (GDPR) and UK GDPR:

Contractual Necessity: To perform our contract with you, such as fulfilling orders and managing your account. Legal Obligations: To satisfy mandatory accounting, tax, and consumer protection requirements. Legitimate Interests: To operate, optimize, and protect our business and Service. Consent: Where you have given specific consent, such as for optional marketing notifications.

We do not sell, rent, or trade your personal information to third parties. We share information only with trusted third-party service providers who assist us in operating our business, including website hosting, payment processing, shipping and logistics, fraud detection, and customer support.

We may also disclose personal data if required to do so by applicable law, regulation, subpoena, or legal process, or to protect the rights, property, safety, or security of our users or the public.

In the event of a merger, acquisition, reorganization, financing, or sale of company assets, personal data may be transferred as part of that corporate transaction, subject to appropriate confidentiality obligations.

Personal data collected through the Service may be transferred to, stored, and processed in the United States and other jurisdictions where our service providers operate.

When we transfer personal data originating in the EEA, UK, or Switzerland to countries outside those regions, we ensure appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK transfer mechanisms.

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, such as completing purchases, maintaining your account, providing customer service, and resolving disputes.

We also retain information as required to satisfy statutory tax, accounting, and legal requirements. When personal data is no longer necessary, it is securely deleted or anonymized.

We implement appropriate technical, organizational, and physical safeguards designed to protect personal information against unauthorized access, loss, alteration, destruction, or disclosure.

While we make every effort to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Depending on your location and applicable data protection legislation (including GDPR, UK GDPR, and US state privacy laws such as the CCPA/CPRA), you may have the right to request access to your personal data, request correction of inaccurate data, request erasure of your data, or restrict or object to certain processing activities.

To exercise any of these rights, please email us at care@erzalab.com with the subject line "Privacy Request." We will verify and respond to your request in accordance with applicable statutory timelines.

Our Service is not directed to individuals under the age of 16 (or the legal age of majority in your jurisdiction). We do not knowingly collect or solicit personal information from children.

If you have reason to believe that a child has provided us with personal information without parental or guardian consent, please notify us at care@erzalab.com and we will take immediate steps to delete the information.

We may update or revise this Privacy Policy periodically to reflect changes in our practices, services, or legal obligations. When changes are made, we will update the effective date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect and safeguard your personal information.

If you have questions, comments, or requests regarding this Privacy Policy or our data practices, please reach out to us at care@erzalab.com.