Effective: [DATE] Last updated: [DATE]
Juno Labs, Inc. ("Juno", "we") is a Delaware corporation with its registered office at [ADDRESS]. For privacy inquiries, contact privacy@junolabs.co.
This Policy describes how Juno collects, uses, shares, and protects personal information when you visit junolabs.co, create an account, place an order, subscribe, or otherwise interact with us.
| Purpose | Lawful basis (where GDPR applies) |
|---|---|
| Fulfill orders, ship, invoice, handle returns | Performance of a contract |
| Manage subscriptions and recurring billing | Performance of a contract |
| Customer support and communication | Performance of a contract |
| Verify researcher attestation, age, delivery jurisdiction | Legal obligation + legitimate interest |
| Fraud prevention and chargeback defense | Legitimate interest |
| Send transactional email (order, shipping, renewal) | Performance of a contract |
| Send marketing email (new lots, advisory content) | Consent (opt-in) — unsubscribe any time |
| Analytics and Site improvement | Legitimate interest |
| Comply with law, respond to lawful requests | Legal obligation |
We share personal information only with:
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. If California law changes our obligations, we will update this section accordingly.
Juno operates primarily in the US. If you are in the EU, UK, or another jurisdiction with cross-border transfer restrictions, your information will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms with our service providers where required.
| Category | Retention |
|---|---|
| Order records | 7 years (tax / audit) |
| Account data | While account active + 3 years |
| Researcher attestation logs | 7 years (compliance defense) |
| Payment records | 7 years (tax / PCI obligations with processor) |
| Support tickets | 3 years |
| Marketing consent logs | While consent is active + 3 years after withdrawal |
| Analytics (aggregated / anonymized) | Indefinite, de-identified |
We delete or de-identify data at the end of retention unless a longer period is required by law.
Depending on where you live, you may have the right to:
To exercise any right, email privacy@junolabs.co from the email address associated with your account, or submit a request at junolabs.co/privacy-request. We will respond within 45 days (extendable once by 45 days if the request is complex). We may ask you to verify your identity before fulfilling the request.
privacy@junolabs.co.We use:
We do not use third-party advertising cookies. We do not share data with ad networks. If that changes, we will update this Policy and re-prompt your consent where required.
The Site is intended for researchers 21 years of age or older. We do not knowingly collect information from anyone under 21. If you believe a child under 13 has provided us information, email privacy@junolabs.co and we will delete it.
We apply administrative, technical, and physical safeguards: TLS in transit, encryption at rest for sensitive fields, role-based access, audit logs, vendor due diligence. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you as required by law.
We may update this Policy. Material changes will be posted on the Site with an updated effective date and, for registered users, emailed. Continued use after the effective date constitutes acceptance.
Juno Labs, Inc. [Registered address] privacy@junolabs.co