Last Updated: September 23, 2026
INTRODUCTION
Start Bioservices Inc. (“Start
Bioservices”, “we”, “us”, “our”) is committed to protecting your privacy and
handling personal data responsibly.
This Privacy Policy explains how
we collect, use, store, transfer, and protect personal information when you
access www.startbioservices.us or use our marketplace platform and related
services (collectively, the “Services”).
By accessing or using the Services,
you acknowledge that you have read and understood this Privacy Policy.
1. INFORMATION WE COLLECT
We
may collect the following categories of information:
Account
Information
- Name, company, job title
- Email address, phone number
- Account credentials
Business
Verification and Compliance
- Business licenses and certifications
- Tax and regulatory information
- Identity verification documents
Transaction
and Order Data
- Quotes, orders, invoices, product details
- Shipping addresses and tracking information
- Payment confirmations
Technical
and Cookie Data
- IP address, browser type, device identifiers
- Cookies, analytics, and usage statistics
- Log files and security event records
We
may also use cookies and analytics tools to understand usage, prevent fraud,
and improve our platform.
2. HOW WE USE INFORMATION
We
use personal information for the following purposes:
- To operate and provide the marketplace Services
- To process transactions, payments, and order fulfillment
- To verify business identity, credentials, and compliance
- To prevent fraud, money laundering, export-control violations,
and illegal activity
- To provide customer service, technical support, and communication
- To enforce our Terms of Service and Global Compliance Standard
- To improve platform performance and functionality
We
do not sell personal information.
3. LEGAL BASIS FOR PROCESSING (GDPR)
For
users located in the EU/EEA, our processing is based on:
- Contract necessity – providing marketplace services
- Compliance with legal obligations
- Legitimate interest – fraud prevention, business security
- Consent – where required for optional data collection such as
marketing
Users
have the right to withdraw consent at any time.
4. DISCLOSURE OF INFORMATION
We
may share information with:
- Payment processors and financial institutions
- Shipping and logistics partners
- Identity verification and compliance screening vendors
- Service providers supporting hosting, analytics, and security
- Government authorities, regulatory agencies, or courts when
required by law
We
do not share information with third parties for advertising or data brokering.
5. INTERNATIONAL TRANSFERS (GDPR / PIPL)
If
you access the platform from outside the United States, your data may be
transferred to and processed in the United States.
To protect international transfers, we apply:
- Standard Data Protection Clauses or international transfer
contracts
- Encryption and secure transmission
- Access controls and minimization of retained data
- Cross-border compliance reviews where required under China PIPL or other laws
6. CCPA – CALIFORNIA PRIVACY RIGHTS
If
you are a California resident, you may:
- Request disclosure of personal information collected
- Request deletion of personal information, subject to legal
exceptions
- Request disclosure of categories of personal data shared or
disclosed
- Request copies of your personal information
We
do not sell personal information. We do not discriminate against users for
exercising privacy rights.
7. DATA RETENTION
We
retain information only as long as needed for lawful purposes, including:
- Transaction and financial records – up to 5 years
- Compliance and audit documentation – up to 5 years
- Account records – until account closure or required retention
period
- Cookie and analytics data – according to browser settings or
lawful retention limits
After
these periods, data may be securely deleted, anonymized, or archived.
8. SECURITY MEASURES
We
implement administrative, technical, and physical safeguards, including:
- Encryption in transit and at rest
- Access-control restrictions
- Secure hosting and network protection
- Fraud monitoring and audit logs
- Regular system updates and vulnerability management
However,
no method of transmission or storage is 100% secure.
9. YOUR RIGHTS
Depending
on your jurisdiction, you may have the right to:
- Access your personal data
- Request corrections to inaccurate data
- Request deletion or restriction of processing
- Withdraw consent (if processing is based on consent)
- Request a copy of your data in a portable format (GDPR)
- Opt-out of marketing communications
- File a complaint with a data protection authority
10. CHILDREN’S PRIVACY
Our
Services are intended for business users and not for individuals under 18.
We
do not knowingly collect personal information from children.
11. CHANGES TO THIS PRIVACY POLICY
We
may update this Privacy Policy from time to time. Material updates will be
posted on the website with a new “Last Updated” date.
Continued
use of the Services constitutes acceptance of the revised policy.