Privacy Policy

1. Scope and operator

This policy covers the Zoi Life BioLabs research storefront at https://www.zoifullabs.com, not separate Zoiful.net, Shopify, social-network, or other sites. Operator: [LEGAL BUSINESS NAME AND BUSINESS ADDRESS — OWNER TO CONFIRM]. Contact [PRIVACY CONTACT EMAIL OR VERIFIED MAILING ADDRESS — OWNER TO CONFIRM] about this policy. This is an operational draft requiring owner review.

2. Information collected when you interact

The Contact form requests name, email, and message, which submit to the site's Odoo CRM as an inquiry. Please do not send patient or medical information. Accounts and checkout may collect login identifiers, billing and shipping contact details, order items/history, transaction status, and customer-service correspondence when an order is placed. Products currently listed at $0.00 have no card charge; the Labs site has no active payment provider for positive-total orders.

Odoo hosting and security features may process IP addresses, request metadata, browser/device identifiers, session data, and fraud/security events. Odoo's own website.visitor records are present for Labs and may record visit counts, pages visited and visit times, and link a visitor to an account where applicable; this first-party visitor tracking is distinct from third-party advertising pixels. We have not independently audited provider-side log retention. Do not provide more information than needed for your inquiry.

3. Age-gate data and cookies

The current homepage age gate asks for name and email in the browser. A read-only review of its current JavaScript found no form submission or network transmission of those entries from that age gate; on successful acknowledgment it sets a zrp_age=1 cookie for up to 30 days and redirects to /shop. This client-side gate is not identity verification or an access-control boundary. Inspected anonymous responses set Odoo session_id (HttpOnly, Secure, SameSite=Lax) and frontend_lang cookies; the site may also use cookies for login, security, preferences, visitor history, and shopping functions. Browser settings may block some cookies and disrupt features.

4. Purposes and lawful operations

We use information to answer inquiries, operate and secure this research site, maintain accounts, fulfill and support any future permitted orders, address fraud, process legally required records, and comply with law. Payment providers, if future Labs checkout is enabled, would handle payment-related data under their own practices; [LABS PAYMENT PROCESSOR AND CARD-DATA FLOW — OWNER TO CONFIRM]. We do not claim that Labs stores full card numbers.

5. Sharing and service providers

Information may be processed by the Odoo e-commerce, CRM, hosting, and email infrastructure; by security/IT contractors where applicable; and, if checkout is re-enabled, by confirmed payment, fulfillment/shipping, and fraud-prevention providers. Service providers receive information as needed for their services, subject to contracts and law. [CONFIRM LABS EMAIL, SMS, SHIPPING, PAYMENT AND OTHER PROVIDERS BEFORE CHECKOUT]. No statement here guarantees information is never shared.

6. Cookies, fonts, analytics, and external links

The current site loads Plus Jakarta Sans via Google Fonts, which can cause a request to Google; it shows outbound social-media and Zoiful-network links, not embedded social feeds in the inspected pages. The Contact form uses Odoo's native website form, whose frontend can invoke Google reCAPTCHA depending on its configuration. The current website configuration has no Google Analytics key, custom footer script, or visible advertising pixel in the inspected Labs-specific templates and pages; this is a limited configuration/source audit, not a universal statement that no third-party analytics or tracking can ever operate. [OWNER: VERIFY HOST/PLATFORM TELEMETRY, ALL THIRD-PARTY TAGS, CONSENT SETTINGS AND FUTURE CHANGES].

7. Advertising and marketing communications

The inspected Labs pages did not show an advertising pixel or a marketing opt-in associated with age-gate entries. The age-gate entries are not a marketing subscription. Marketing automation, SMS marketing, and e-commerce marketing modules are installed in the shared Odoo database; no active marketing.campaign records or mailing.mailing records appeared in a read-only check. That does not establish future or external-provider practices. [OWNER: CONFIRM ANY ADVERTISING/RETARGETING, EMAIL OR SMS CAMPAIGNS, LAWFUL OPT-IN, UNSUBSCRIBE MECHANISMS, AND SERVICE PROVIDERS]. We will describe any such practices accurately before enabling them; use unsubscribe instructions in a message if one is sent.

8. Retention, security, and children

Information may be retained as needed for inquiries, accounts, security, legal or tax obligations, and dispute resolution. [OWNER: SET RETENTION PERIODS FOR CRM LEADS, CUSTOMER/ORDER RECORDS, LOGS, AND COOKIES]. We use platform and organizational security measures but cannot promise absolute security. This site is not intended for children under 18; contact us through the verified privacy channel to raise concerns about a minor's information.

9. U.S. state privacy rights — conditional

Depending on your state, our actual processing, and applicable statutory thresholds, you may have rights to request access/knowledge, correction, deletion, or portability; opt out of covered sale, sharing, or targeted advertising; limit certain sensitive-data uses; appeal, and receive non-discriminatory treatment. No determination has been made that a particular state law applies or that this business sells/shares data as those laws define those terms. [OWNER/COUNSEL: CONFIRM STATE THRESHOLDS, PROCESSING CATEGORIES, AND ANY REQUIRED CALIFORNIA OR OTHER STATE DISCLOSURES, OPT-OUT SIGNAL HANDLING, APPEAL, AND NOTICE MECHANISMS]. To ask about a right, use [VERIFIED PRIVACY REQUEST CHANNEL — OWNER TO CONFIRM]; we will assess and respond as applicable law requires. The Contact page is an inquiry channel, not a promise that every statutory mechanism is already implemented.

10. Third-party sites and policy updates

External links, including social sites and other Zoiful properties, follow their own policies. We may update this policy after reviewing actual services and applicable law; the effective date will be updated when approved. For privacy requests use [VERIFIED PRIVACY REQUEST CHANNEL — OWNER TO CONFIRM].