Privacy policy

The controller of the personal data described here is ARDEN ONE, registered with the Netherlands Chamber of Commerce under number 42130864, at Hazenkamp 60, 6836 BA Arnhem, the Netherlands.

For anything in this policy, or to exercise a right below, write to [privacy email].

ARDEN ONE is a research-use-only storefront intended for persons aged 21 and over, buying for in-vitro and laboratory research. We do not knowingly serve consumers, and our products are not for human or veterinary use. This policy covers this website and the ordering and notification services on it.

We do not ask for, want, or knowingly process any health data about you. Please do not send us clinical or medical information about yourself or anyone else.

We handle three small categories of personal data.

As you browse

Your device stores your age and research-use confirmation, your cookie choice, the contents of your research case, any notification signups, and your 3D-viewer preference. This stays in your browser; see the cookie policy.

Notification list

When you ask to be told a batch has been verified, we record the email address you give us and the product it relates to, so we can send that one message.

Orders

To fulfil an order we collect your email, name, optional institution and a shipping address. Payment for research accounts is by proforma invoice and bank transfer; we do not collect or store card numbers.

We do not build profiles, we do not run advertising or analytics trackers, and we do not buy or enrich personal data from third parties.

Each use has a specific purpose and a lawful basis under the GDPR.

Running the shop

Keeping your case, viewer and gate working. Legitimate interest in a site that functions, using storage that is necessary for a service you asked for.

Notification list

Emailing you once when a batch is verified. Your consent, given when you submit the form, which you can withdraw at any time.

Fulfilling orders

Processing and shipping what you buy and meeting our tax and record-keeping duties. Performance of a contract, and legal obligation for the records.

Security

Protecting the site from abuse. Legitimate interest in keeping the service safe and available.

We currently set no analytics or advertising cookies, and there is no consent banner because everything we store is strictly necessary to run the site. The full list, and how to clear it, is in our cookie policy.

We do not sell personal data. We share it only with the service providers that let us operate, each acting on our instructions under a data-processing agreement.

Cloudflare

Hosts and serves this website, and processes technical data such as IP addresses to deliver pages and block abuse.

Google

The notification list is collected through Google Forms and stored in Google Sheets, so a notification signup reaches Google.

Shipping and payment

At launch, a carrier and a payment or invoicing provider will receive the details needed to deliver and bill an order. This policy will name them before that goes live.

Some providers, including Google, may process data outside the European Economic Area, principally in the United States. Where they do, transfers are covered by the European Commission’s standard contractual clauses or an equivalent approved safeguard, so the data keeps EU-level protection.

We keep personal data only as long as its purpose needs.

On your device

Until you clear it or, for the session gate, until you close the browser. You are always in control of this.

Notification list

Until the batch is verified and you have been emailed, or until you ask to be removed, whichever comes first.

Orders

For as long as needed to complete the order and support it, then for the period tax and commercial law require us to retain invoicing records.

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting what came before.

To exercise any of these, contact us at [privacy email]. We answer within one month and we do not charge for a reasonable request.

The site is served over encrypted connections, and access to the notification list and any order data is limited to the people who need it to do their work. No system is perfectly secure, but we keep the amount of data we hold small precisely so there is little to lose.

Entry is gated to visitors who confirm they are 21 or over and are buying for research use. ARDEN ONE is not intended for anyone under 21, and we do not knowingly collect data from them. If you believe a minor has contacted us, tell us and we will remove the data.

When we change this policy we update the date at the top. Where a change materially affects you, for example a new processor for payments or shipping, we will make that clear rather than rely on the date alone.

Questions or requests go to [privacy email].

If you are not satisfied with our response, you have the right to complain to Autoriteit Persoonsgegevens, the data protection authority in the Netherlands, at autoriteitpersoonsgegevens.nl.