Privacy Policy

Effective Date: 9/3/2026

Last Updated: 9/3/2026

1. Introduction

This Privacy Policy explains how Mafi Group, LLC, a NJ limited liability company doing business as Trust US Labs (“Trust US Labs,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit www.trustuslabs.com (the “Site”), create an account, place an order, contact us, or otherwise interact with us.

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site.

This Privacy Policy is incorporated into and forms part of our Terms and Conditions.

Scope. This Policy applies to the Site and to our order, customer-support, and marketing activities. It does not apply to third-party websites, services, or platforms that we do not control, even where we link to them.

2. Notice at Collection

This section is provided as our notice at collection under California law. Additional detail appears in the sections that follow.

Categories of personal information we collect

Identifiers; commercial information; internet or electronic network activity information; geolocation data (approximate, from IP address); professional or employment-related information; inferences drawn from the above. See Section 3.

Purposes of collection

To process and fulfill orders; to operate and secure the Site; to verify eligibility to purchase; to provide customer support; to send marketing communications you have opted into; to measure and improve advertising; to comply with law. See Section 4.

Sensitive personal information

We do not intentionally collect sensitive personal information as defined by applicable state privacy laws, and we do not use or disclose it for purposes of inferring characteristics about you.

Sale or sharing

We do not sell personal information for money. We do use third-party advertising and analytics technologies that may constitute “sharing” for cross-context behavioral advertising under California law and “targeted advertising” under other state laws. See Sections 6 and 9.

Retention

For the periods described in Section 10.

Your choices

See Sections 6, 8, and 9, or use the “Your Privacy Choices” link in the Site footer.

3. Information We Collect

3.1 Information you provide to us

• Account information: name, email address, password, and any professional or institutional affiliation you supply when creating an account.
• Order and transaction information: billing name and address, shipping address, telephone number, email address, order contents, order history, and order notes.
• Payment information: payment card or other payment details are collected and processed directly by our third-party payment processor. We do not store full payment card numbers on our systems. We may receive limited information from the processor, such as the card brand, the last four digits, the expiration date, the billing ZIP code, and the authorization result.
• Eligibility attestations: confirmation that you are at least 21 years of age and that you are acquiring products for laboratory research use only, together with any research-purpose or institutional information you choose to provide.
• Communications: the content of emails, contact-form submissions, support tickets, chargeback or claim correspondence, and any documents, photographs, or lab reports you send us in connection with an order or a quality claim.
• Marketing preferences: your email subscription status and preferences.

3.2 Information collected automatically

When you visit the Site, we and our service providers collect certain information automatically through cookies, pixels, tags, software development kits, and server logs:

• IP address and approximate location derived from it
• Browser type and version, operating system, device type, and device identifiers
• Referring and exit URLs, search terms that led you to the Site
• Pages and products viewed, links clicked, items added to cart, session duration, scroll and click activity
• Date and time stamps of your visit
• Cookie and advertising identifiers

3.3 Information from third parties

• Payment processors and fraud-prevention services: transaction authorization results, risk scores, and fraud signals.
• Shipping carriers: delivery status, address corrections, and delivery exceptions.
• Advertising and analytics platforms: aggregated campaign performance, audience and conversion measurement data.
• Email marketing platform: delivery, open, click, bounce, and unsubscribe events.

3.4 Information we do not want

Please do not send us health information, medical history, information about your own or anyone else’s use of any product, government identification numbers, or other sensitive information. We do not request this information, we have no need for it, and our products are supplied for laboratory research use only and not for human or animal use.

4. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• Order fulfillment: to accept, verify, process, package, ship, and track your orders; to arrange cold-chain packaging and delivery; to issue confirmations, invoices, and shipment notifications.
• Payments: to authorize and process payments, to issue refunds or replacements where applicable, and to respond to chargebacks and payment disputes.
• Eligibility and compliance screening: to confirm the age and eligibility representations required by our Terms and Conditions, and to decline or cancel orders that we believe are inconsistent with those Terms or with applicable law.
• Accounts and customer service: to create and maintain your account, authenticate you, respond to inquiries, and administer quality or damage claims, including reviewing Certificates of Analysis and lot documentation.
• Site operation, security, and fraud prevention: to host and maintain the Site, diagnose technical problems, detect and prevent fraud, abuse, unauthorized access, and violations of our Terms.
• Analytics and improvement: to understand how the Site is used, to measure page and product performance, and to improve our catalog, content, and user experience.
• Marketing and advertising: to send you email marketing where you have opted in; to measure the performance of our advertising; and to deliver and measure interest-based advertising through third-party platforms, subject to your choices under Sections 6 and 9.
• Legal and regulatory: to comply with applicable laws, regulations, subpoenas, court orders, and lawful requests from government or regulatory authorities; to establish, exercise, or defend legal claims; and to enforce our Terms and Conditions.

We do not use automated decision-making technology to make decisions that produce legal or similarly significant effects concerning you.

5. How We Disclose Personal Information

We do not sell personal information for monetary consideration. We disclose personal information in the following ways:

Recipient category

What is disclosed and why

Payment processors

Payment, billing, and order information, to authorize and process transactions and manage disputes and refunds.

Shipping and logistics carriers

Recipient name, address, telephone number, email address, and package details, to deliver orders and manage delivery exceptions.

Hosting, IT, and website platform providers

Site and account data, to host, secure, and operate the Site.

Email marketing and customer-support platforms

Contact and order information, to send transactional and opted-in marketing messages and to handle support requests.

Analytics providers

Site usage and device data, to measure and improve Site performance.

Advertising platforms and networks

Online identifiers, device and usage data, and conversion events, to deliver and measure advertising. This may constitute “sharing” or “targeted advertising” under state law. See Sections 6 and 9.

Manufacturing and testing partners

Order and lot information as needed to investigate a quality claim or trace a batch. We do not disclose your contact details for their marketing purposes.

Professional advisors

Personal information as needed to obtain legal, accounting, insurance, or audit services.

Law enforcement, regulators, and courts

Personal information where we believe in good faith that disclosure is required by law, necessary to comply with legal process, or necessary to protect the rights, property, or safety of TrustUS Labs, our customers, or the public.

Corporate transactions

Personal information may be transferred to a successor or acquirer in connection with a merger, acquisition, financing, reorganization, or sale of assets, or in bankruptcy or a similar proceeding.

Our service providers are permitted to use personal information only to perform services for us, and are required not to retain, use, or disclose it for their own purposes, except where an advertising platform acts as an independent controller under its own terms.

6. Cookies, Analytics, and Advertising Technologies

6.1 What we use

• Strictly necessary cookies enable core functionality such as maintaining your session, keeping items in your cart, logging you into your account, and protecting against fraud. The Site cannot function properly without these.
• Analytics cookies and tags help us understand traffic sources, page performance, and how visitors navigate the Site.
• Advertising and retargeting cookies, pixels, and tags — which may include technologies operated by advertising platforms such as e.g., Meta/Facebook, Google Ads — allow us and those platforms to show you TrustUS Labs advertising on other websites and apps and to measure whether that advertising led to a visit or an order.

You can review and change your cookie settings at any time using the “Cookies Settings” link in the Site footer.

6.2 How this relates to “sale” and “sharing”

We do not exchange your personal information for money. However, when advertising and analytics technologies operated by third parties collect information through the Site for cross-context behavioral advertising, that activity may be considered a “sale” or “sharing” of personal information under the California Consumer Privacy Act, and “targeted advertising” or “profiling” under other state privacy laws. We disclose it as such, and we provide the opt-out mechanisms described in Section 6.3.

6.3 Your opt-out mechanisms

• “Your Privacy Choices” — use the link in the Site footer to opt out of the sale or sharing of your personal information and of targeted advertising.
• Cookie settings — use the “Cookies Settings” link in the Site footer to withdraw or change consent for non-essential cookies.
• Global Privacy Control (GPC) — we treat a GPC opt-out preference signal transmitted by your browser or a browser extension as a valid request to opt out of sale, sharing, and targeted advertising for that browser and device, and we will display confirmation that your opt-out has been registered. Because a GPC signal is tied to the specific browser and device, you will need to enable it on each browser and device you use.
• Platform-level controls — you may also be able to limit interest-based advertising through your device settings or through industry tools such as the Digital Advertising Alliance’s opt-out page (optout.aboutads.info) and the Network Advertising Initiative’s opt-out page (optout.networkadvertising.org).

Opting out of advertising cookies will not stop you from seeing advertising; it limits the use of your information to make that advertising interest-based.

6.4 Do Not Track

Web browsers may transmit “Do Not Track” signals, but there is no consistent industry or legal standard for how those signals should be interpreted. We therefore do not respond to Do Not Track signals. We do honor Global Privacy Control signals as described in Section 6.3.

7. Email Marketing

If you opt in, we will send you email about new products, restocks, promotions, and Site updates. We will also send you transactional email — order confirmations, shipping notifications, and account or claim correspondence — which is not marketing and which you will continue to receive while you have an active order or account.

Every marketing email includes a clear unsubscribe link and our valid physical mailing address. You may unsubscribe at any time by clicking that link or by emailing info@trustuslabs.com with the subject line “Unsubscribe.” We honor unsubscribe requests promptly and in no event more than ten (10) business days after receipt, and our unsubscribe mechanism remains functional for at least thirty (30) days after a message is sent. We do not charge a fee to unsubscribe, and we will not ask you for any information beyond your email address in order to do so.

We do not rent, sell, or lease our email list.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• Right to know / access — to request the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes of collection, and the categories of third parties to whom we disclosed it.
• Right to delete — to request that we delete personal information we collected from you, subject to legal exceptions such as completing a transaction, complying with a legal obligation, detecting security incidents, or defending legal claims.
• Right to correct — to request correction of inaccurate personal information.
• Right to portability — to receive a copy of your personal information in a portable, and where technically feasible, readily usable format.
• Right to opt out of sale, sharing, targeted advertising, and profiling — as described in Section 6.3.
• Right to limit the use of sensitive personal information — we do not use or disclose sensitive personal information beyond the purposes permitted without a limitation right.
• Right to non-discrimination — we will not discriminate against you for exercising any privacy right. We will not deny you products or services, charge you a different price, impose penalties, or provide a different level or quality of service because you exercised a right.
• Right to appeal — if we decline your request, you may appeal that decision as described below.

8.1 How to exercise your rights

Submit a request by emailing info@trustuslabs.com with the subject line “Privacy Request,” or by writing to us at the address in Section 14. Please tell us which right you wish to exercise and provide enough information for us to locate your records — typically the email address associated with your account or order, and an order number.

Verification. To protect your information, we will take reasonable steps to verify your identity before acting on a request to know, delete, or correct. We may ask you to confirm information already in our records, such as the email address on your account or details of a recent order. We will not use information you provide for verification for any other purpose.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require written proof of the agent’s authority and may require you to verify your own identity directly with us.

Timing. We will confirm receipt of your request within ten (10) business days and respond substantively within forty-five (45) calendar days. If we need more time, we will notify you and may extend our response by an additional forty-five (45) days. There is no charge for a reasonable request; we may decline or charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive, and will explain why.

Appeals. If we deny your request in whole or in part, you may appeal by replying to our response or emailing info@trustuslabs.com with the subject line “Privacy Appeal.” We will respond to an appeal within forty-five (45) days with our decision and a written explanation. If your appeal is denied, you may contact your state attorney general to submit a complaint.

California “Shine the Light.” California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

9. State-Specific Disclosures

Comprehensive consumer privacy laws are in effect in a number of U.S. states, and the rights available to you depend on your state of residence. Our practices are as follows for all visitors, regardless of whether a particular law applies to us:

• We disclose the categories of personal information we collect, use, and disclose (Sections 3, 4, and 5).
• We provide the rights described in Section 8 to residents of any state that grants them, and we honor appeals.
• We treat the use of third-party advertising technologies as sale, sharing, targeted advertising, or profiling, and we provide opt-out mechanisms (Section 6.3).
• We honor Global Privacy Control opt-out preference signals.
• We do not discriminate against anyone for exercising a privacy right.
• We do not knowingly process the personal information of anyone under 18, and we do not sell or share the personal information of any consumer we know to be under 16.

Nevada residents. Nevada law allows residents to opt out of the sale of certain covered information for monetary consideration. We do not engage in such sales, but you may submit a verified opt-out request to info@trustuslabs.com

10. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, and then delete or de-identify it. In practice:

• Order and transaction records — retained for at least seven (7) years, or longer where required, to satisfy tax, accounting, product-traceability, and recordkeeping obligations and to defend against claims.
• Eligibility attestations — retained for the life of the account and for the applicable limitations period thereafter, as evidence of the representations made at the time of purchase.
• Quality and damage claim records, including lot and Certificate of Analysis references — retained for at least seven (7) years to support batch traceability.
• Account information — retained while your account is active, and for a reasonable period after closure to complete transactions and comply with law.
• Marketing contact information — retained until you unsubscribe, after which we retain a minimal suppression record indefinitely so that we can honor your opt-out.
• Site analytics and advertising data — retained according to the retention settings of the relevant platform, typically no more than twenty-six (26) months.
• Customer service correspondence — retained for three (3) years from the last interaction.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of the Site in transit (TLS/SSL), access controls limiting employee access to what is needed for their role, use of a PCI-DSS-compliant payment processor so that full card numbers do not reach our systems, and periodic review of our vendors’ security practices.

No method of transmission over the internet or of electronic storage is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk. Please use a strong, unique password for your account and notify us immediately at info@trustuslabs.com if you believe your account has been compromised.

12. Children’s Privacy

The Site is intended for persons who are at least 21 years of age. We do not direct the Site to children, and we do not knowingly collect personal information from anyone under 18 years of age. If you believe a child under 18 has provided us with personal information, please contact info@trustuslabs.com and we will delete it promptly.

13. Additional Information

Third-party links. The Site may link to third-party websites, including manufacturer, testing-laboratory, or carrier sites. We do not control those sites and are not responsible for their privacy practices. Review their privacy policies before providing information.

Location of processing and international visitors. We operate in the United States and process and store personal information in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction. We do not offer the Site with the intention of subjecting ourselves to the laws of any jurisdiction other than the United States.

Changes to this Policy. We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. If we make material changes, we will provide additional notice, such as a notice on the Site or an email to registered account holders. Your continued use of the Site after an update takes effect constitutes acceptance of the revised Policy.

Accessibility. If you need this Privacy Policy in an alternative accessible format, contact info@trustuslabs.com and we will provide one.