Privacy Policy

Effective Date: 9/23/2026

Windfall Research Compounds (“we,” “us,” or “our”) respects your privacy and is dedicated to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit or make a purchase from our website (the “Site”).

Please read this Privacy Policy carefully. By accessing or using the Site, you acknowledge that you have read, understood, and agreed to the practices described in this policy.

1. Information We Collect

We collect personal information that you provide directly to us, information collected automatically during your visit, and information from trusted third parties.

A. Personal Information You Provide

• Identification and Contact Details: Full name, billing address, shipping address, email address, and phone number.
• Account Details: Username, password, security questions, and purchase preferences.
• Payment and Transaction Information: Billing address and payment transaction confirmations. (Note: All payment card details are processed directly through secure, third-party payment gateways; we never store full credit or debit card numbers on our servers).
• Order History: Details regarding research compounds or items ordered, transaction totals, and customer support communications.
• Direct Inquiries: Any correspondence, inquiries, or feedback submitted through our contact forms or support channels.

B. Information Collected Automatically

• Device and Browsing Data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time spent on pages, and clickstream activity.
• Cookies and Tracking Technologies: Cookies, local storage, and pixel tags used to retain your session, manage shopping cart state, and evaluate aggregate site traffic.
• We count visits to this site without cookies. To tell visits apart, your IP address and browser type are combined into a code that changes every day and cannot be traced back to you; the address itself is not stored. We record which page you asked for, the site that linked to us, and whether an account was created, and keep these counts for up to 400 days.

C. Information from Third Parties

We may receive relevant information from third-party service providers, including high-risk payment processing gateways, fraud mitigation networks, shipping and courier carriers, and web analytics tools.

2. How We Use Your Information

We use your information for core business and operational purposes, including:

• Order Processing and Fulfillment: Verifying order details, processing transactions, coordinating packaging and logistics, and sending transaction status notices. This includes cart reminder emails.
• Account Administration: Maintaining your customer account and verifying identity upon login.
• Customer Inquiries: Addressing customer support questions, resolving service issues, and communicating updates.
• Security and Fraud Prevention: Monitoring transactions, detecting malicious activity, verifying identity, and protecting against unauthorized access.
• Site Functionality and Optimization: Evaluating system performance, troubleshooting technical issues, and improving browsing speed and navigation.
• Legal and Regulatory Compliance: Fulfilling recordkeeping, tax, and reporting obligations under applicable state and federal laws.

3. How We Disclose Your Information

Windfall Research Compounds does not sell, rent, or lease your personal information for monetary consideration. We disclose data solely under the following circumstances:

• Service Providers: Specialized third-party vendors operating on our behalf (such as payment processing partners, order fulfillment carriers, hosting providers, and technical maintenance services).
• Legal Requirements: If mandated by subpoena, court order, regulatory investigation, or applicable law, or when necessary to protect the safety, property, or legal rights of our business, our users, or others.
• Business Transitions: In the event of a merger, acquisition, restructuring, or transfer of business assets, subject to standard confidentiality protections.
• With Your Consent: When you provide express authorization to disclose information for an explicitly designated purpose.

4. Age Verification and Eligibility

Our Site and products are directed strictly to individuals who are at least 21 years of age. We do not knowingly solicit or collect personal information from individuals under 21 years of age. If we become aware that an individual under the age of majority has provided personal information, we will take immediate steps to delete the records from our systems.

5. Security of Your Information

We employ administrative, technical, and physical security standards designed to safeguard your personal data from unauthorized access, loss, misuse, or alteration. These measures include transport encryption protocols (such as TLS/SSL), restricted administrative access, and network firewalls. However, no internet transmission or electronic data storage facility can guarantee absolute security.

6. Data Retention

We retain personal information only for the period necessary to fulfill the purposes set out in this Privacy Policy, satisfy our statutory record retention obligations (such as tax and accounting mandates), resolve disputes, and enforce contractual agreements.

7. Cookies and Tracking Technologies

We use session and persistent cookies to:

• Maintain active login sessions and verify authentication status.
• Retain items added to your shopping cart across browsing sessions.
• Analyze website metrics, traffic volume, and technical performance.

You can configure your browser to reject cookies or prompt you before accepting them. Disabling cookies may disrupt essential website functions, such as checkout processes and account access.

Records of cart reminders are kept for 400 days and are deleted with your account. A discount code sent in a reminder that has not been used is deleted once it expires. Your consent record is kept for as long as your account exists, so we can show when and how you agreed to marketing email.

8. State-Specific Privacy Rights (United States)

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, and other jurisdictions with comprehensive privacy frameworks), you may possess statutory rights regarding your personal information:

• Right to Know / Access: Request confirmation regarding whether we process your data and obtain a copy of the specific pieces of information collected.
• Right to Delete: Request the deletion of personal information collected directly from you, subject to legal and statutory exceptions.
• Right to Correct: Request that inaccurate or outdated personal data be updated or corrected.
• Right to Opt-Out: Direct us not to process your personal data for targeted advertising, the sale of personal information, or automated profiling producing significant legal effects.
• Non-Discrimination: We will not discriminate against you, deny goods, or charge varying rates solely for exercising statutory privacy rights.

To exercise any of these privacy rights, please submit a verified request to our compliance team using the contact details provided in Section 10.

9. Changes to This Privacy Policy

We reserve the right to revise and amend this Privacy Policy at our discretion to reflect technical, operational, or legal developments. When changes occur, we will post the updated version on this page with an updated “Last Updated” date. Continued use of our Site following the posting of updates confirms acceptance of the revised terms.

10. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: