Policies

Privacy Policy

How Brightline Scientific collects, uses, and protects your information.

Last Updated: June 27, 2026

This Privacy Policy explains how Brightline Scientific, operated by Cross & Compass Ventures, LLC, collects, uses, discloses, stores, and protects personal information when you visit brightlinescientific.com, request access, create an account, communicate with us, or place an order.

1. Information We Collect

We may collect:

• Identity information, including name, age verification information, business name, job title, and account credentials.
• Contact information, including email address, telephone number, billing address, and shipping address.
• Transaction information, including products ordered, payment status, transaction identifiers, invoices, refunds, and account history.
• Qualification and access information supplied during account review.
• Communications, including emails, forms, support requests, survey responses, and other correspondence.
• Device and usage information, including IP address, browser type, device type, operating system, referring pages, pages viewed, timestamps, and website interactions.
• Cookie, analytics, advertising, and preference information.
• Fraud-prevention, security, and verification information.

Payment card or bank information may be collected and processed directly by third-party payment providers. Brightline Scientific may receive limited transaction and verification details rather than complete payment credentials.

2. How We Use Information

We may use personal information to:

• Operate, maintain, secure, and improve the website.
• Review access requests and manage controlled accounts.
• Process and fulfill orders.
• Verify identity, payment, shipping, and account information.
• Provide customer support and transactional communications.
• Maintain records, documentation, invoices, and order history.
• Detect fraud, misuse, prohibited activity, chargeback risk, and security incidents.
• Enforce policies, protect legal rights, and comply with law.
• Send marketing communications where permitted and subject to opt-out rights.
• Analyze website performance and customer interactions.
• Establish, exercise, or defend legal claims.

3. Legal Bases for Processing

Where the GDPR or similar law applies, we may process information based on:

• Performance of a contract or steps requested before entering a contract.
• Compliance with legal obligations.
• Legitimate interests, such as operating the business, preventing fraud, securing accounts, and improving services.
• Consent, where required.
• Establishment, exercise, or defense of legal claims.

4. How We Disclose Information

We may disclose information to:

• Payment processors, banks, accounting providers, and fraud-prevention services.
• Hosting, ecommerce, email, analytics, security, customer-service, and technology providers.
• Shipping carriers, fulfillment providers, and logistics partners.
• Professional advisers, including attorneys, accountants, insurers, and consultants.
• Suppliers or laboratories when reasonably necessary to address documentation, quality, or order issues.
• Government authorities, regulators, law enforcement, courts, or other parties when required by law or reasonably necessary to protect rights, safety, security, or property.
• A buyer, successor, investor, lender, or adviser in connection with a merger, financing, reorganization, sale, or transfer of assets.

We do not sell personal information for monetary consideration. We may use analytics, advertising, or cookie technologies that may be treated as “sharing” or targeted advertising under certain privacy laws. Where required, we will provide opt-out mechanisms.

5. Cookies and Analytics

We may use essential cookies, preference cookies, analytics tools, fraud-prevention technologies, and similar technologies.

Essential technologies support login, security, cart, checkout, and account functions. Optional analytics or advertising technologies should be managed through the website’s cookie-consent settings where required.

You may adjust browser settings or available cookie controls, but disabling essential cookies may prevent parts of the website from working.

6. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including account management, order fulfillment, tax and accounting obligations, fraud prevention, dispute resolution, regulatory compliance, and enforcement of agreements.

Retention periods vary by information type, legal requirements, transaction history, and operational need.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and notifying us promptly of suspected unauthorized access.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request restriction of processing.
• Object to certain processing.
• Request portability of information.
• Withdraw consent where processing relies on consent.
• Opt out of certain targeted advertising, sharing, or sale activities.
• Limit certain uses of sensitive personal information where applicable.
• Appeal a denied privacy request where applicable.
• Lodge a complaint with a data-protection authority.

These rights may be subject to verification, exceptions, and legal limitations.

9. California Privacy Notice

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and opt out of the sale or sharing of personal information, and the right not to receive discriminatory treatment for exercising applicable rights.

Brightline Scientific does not knowingly sell personal information for money. If our use of advertising or analytics technology constitutes “sharing” under California law, California residents may request to opt out through available cookie controls or by contacting us.

We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law and may be required to provide proof of authority.

10. EEA, UK, and Swiss Users

Where applicable, individuals in the European Economic Area, United Kingdom, or Switzerland may exercise rights under applicable data-protection law, including access, correction, erasure, restriction, objection, portability, and complaint rights.

Personal information may be processed in the United States or other countries where privacy laws may differ. Where legally required, appropriate safeguards will be used for cross-border transfers.

11. Children

The website is not directed to children or minors. We do not knowingly collect personal information from anyone under 18, and product access is limited to persons at least 21 years old.

12. Marketing Communications

You may unsubscribe from promotional emails using the unsubscribe link in the message or by contacting us. Transactional, security, legal, and account communications may still be sent where necessary.

13. Do Not Track and Global Privacy Signals

Browser “Do Not Track” signals are not uniformly standardized. Where legally required and technically supported, we will honor recognized opt-out preference signals, such as Global Privacy Control, for applicable processing.

14. Third-Party Links

We are not responsible for the privacy practices of third-party websites or services linked from the website.

15. Changes to This Policy

We may update this Privacy Policy periodically. The revised version will be posted with an updated date.

16. Privacy Requests and Contact

To submit a privacy request or ask a question, contact:

Brightline Scientific

Operated by Cross & Compass Ventures, LLC

Email: contact@brightlinescientific.com

Please include “Privacy Request” in the subject line. Do not send sensitive identity documents unless specifically requested through a secure method.