Privacy Policy

Noreo Labs Inc. is responsible for personal information under its control.

• Organization: Noreo Labs Inc.
• Province: Ontario, Canada
• Privacy contact: contact@noreo.ca
• WhatsApp · Contact page

A registered business address will be published on the Site or provided in writing once confirmed.

Noreo Labs will designate an individual responsible for privacy compliance and privacy-related inquiries. Questions, concerns, access requests, correction requests and privacy complaints may be directed to the privacy contact above.

"Personal information" generally means information about an identifiable individual.

Depending on how you interact with Noreo Labs, this may include:

• first and last name;
• institution or laboratory name;
• role or procurement contact title;
• billing address;
• shipping address;
• email address;
• telephone number;
• account credentials;
• order history;
• products purchased;
• transaction information;
• payment-related information;
• IP address;
• browser type;
• device information;
• operating system;
• approximate location derived from IP address;
• website activity;
• referral information;
• marketing preferences;
• communications with Noreo Labs;
• support records;
• reviews and submitted content;
• fraud-prevention information;
• age, eligibility and institutional-verification confirmations;
• information associated with product orders;
• information you provide when requesting a return or refund; and
• information reasonably necessary to administer our business.

We do not intentionally request medical histories or health information merely to complete an ordinary purchase.

You should not voluntarily provide Noreo Labs with medical information, diagnoses, medication information or other sensitive health information unless it is specifically necessary for a lawful interaction with us.

We may collect information when you:

Complete institutional verification or create an account. This may include name, institutional email, password, telephone number, institution name, billing information, shipping information and account preferences.

Place an order. We may collect name, billing address, shipping address, email, phone number, products purchased, order amount, transaction information, shipping information, order notes and applicable tax information.

Contact support. We may collect information contained in your communications with us, including emails, WhatsApp messages, photographs, documents and order information.

Subscribe to notices. We may collect email address, marketing preferences, consent status, date and time of consent, source of consent and unsubscribe status.

Submit reviews or other content. We may collect information you voluntarily submit, including name or display name, review, photograph, video, rating, comments and other submitted content.

When you use our Site, certain information may be collected automatically. This may include:

• IP address;
• browser type;
• device type;
• operating system;
• screen resolution;
• language;
• approximate geographic location;
• referring website;
• pages viewed;
• time spent on pages;
• clicks;
• navigation patterns;
• products viewed;
• products added to cart;
• checkout activity;
• purchase activity;
• interactions with advertisements;
• technical errors; and
• session information.

We may use cookies, pixels, tags, SDKs, log files and similar technologies to collect this information.

Noreo Labs may use cookies and similar technologies for:

• essential website functionality;
• institutional verification and session cookies;
• maintaining shopping carts;
• maintaining account sessions;
• remembering preferences;
• authentication;
• fraud prevention;
• website performance;
• analytics;
• advertising;
• measuring marketing campaigns;
• understanding Site use; and
• improving the Site.

Some cookies are necessary for the Site to function, including the institutional-access cookie used to confirm verification.

Other cookies may be used for analytics or advertising and may be subject to applicable consent requirements. Where required, we will provide appropriate choices regarding non-essential cookies.

Noreo Labs's online store is operated on our own storefront and may use a commerce backend together with hosting and related infrastructure providers.

Those providers may process personal information necessary to provide website hosting, checkout, shopping-cart functionality, customer accounts, payment processing, fraud prevention, order management, analytics and other ecommerce functions.

Information processed through those providers may be stored or processed in Canada, the United States or other jurisdictions where they or their service providers operate.

Noreo Labs does not control the independent privacy practices of those providers. Their practices are governed by their own privacy documentation.

When you make a purchase, payment information may be processed by third-party payment providers.

Depending on the payment method, these providers may include credit-card networks, banks, Interac, PayPal, cryptocurrency payment providers and other payment processors.

Noreo Labs generally does not need to store complete credit-card numbers. Payment processors may collect and process payment information directly in accordance with their own privacy policies.

We may retain transaction-related information such as payment method, transaction identifier, amount, transaction date, payment status, partial payment information and fraud indicators.

Noreo Labs may collect, use and disclose personal information for purposes including:

• fulfilling orders - processing purchases, verifying orders, processing payments, shipping products, providing tracking, providing support, processing returns and issuing refunds;
• operating accounts - creating accounts, authenticating users, maintaining account information, providing account functionality and protecting accounts;
• institutional verification - confirming eligibility, retaining attestations and administering catalogue access;
• fraud and security - detecting suspicious transactions, preventing fraud, preventing unauthorized access, investigating payment abuse and protecting purchasers, Noreo and the Site;
• support - answering questions, investigating complaints, resolving order issues, responding to quality concerns and communicating regarding orders;
• website improvement - understanding performance, identifying technical problems, improving navigation and product presentation;
• analytics - understanding how visitors find the Site, which pages are viewed, which products receive interest and how campaigns perform;
• advertising - where legally permitted and subject to applicable consent requirements, measuring advertising, understanding advertising performance, building audiences, displaying relevant advertisements, conducting remarketing and measuring conversions;
• notices - where you have provided the required consent or another lawful basis applies, sending catalogue notices, product announcements, newsletters, educational content and other commercial communications; and
• legal and regulatory purposes - complying with laws, responding to lawful requests, maintaining business records, resolving disputes, enforcing agreements, protecting legal rights and complying with regulatory requirements.

Canadian privacy guidance requires organizations to identify purposes before or at the time of collection and limit collection, use and disclosure to appropriate purposes.

Noreo Labs may collect information necessary to confirm that purchasers satisfy applicable eligibility requirements, including the minimum age requirement and institutional-use requirements stated in our Terms & Conditions.

Before catalogue access or checkout, you may be required to affirm that you are at least 19 years old, you are located in Canada, you are acting for a qualified research institution or laboratory, and the purchase is for a lawful laboratory purpose.

Noreo Labs may retain records of these acknowledgments where reasonably necessary for order administration, fraud prevention, legal compliance or dispute resolution. We do not intend to use age-verification information for unrelated advertising purposes.

We may collect information concerning products viewed, products purchased, order frequency, order value, order history, shipping information, returns, refunds, support interactions and product preferences.

This information allows us to operate the store and improve the institutional purchasing experience.

Noreo Labs may use advertising and analytics technologies provided by companies such as Meta, Google and other advertising or analytics providers.

These technologies may allow us to understand whether users have interacted with our advertisements and may help us display advertisements to individuals who have previously interacted with our Site.

Depending on the technology and applicable law, these providers may receive information such as IP address, device information, browser information, website activity, advertising identifiers, pages viewed and conversion information.

Noreo Labs will implement consent mechanisms where required. We do not sell personal information simply because advertising technologies are used.

Noreo Labs may use analytics tools, which may include Google Analytics or comparable services, to understand Site usage and performance.

Analytics providers may collect information such as IP-derived location, device information, browser information, pages viewed, interactions, traffic sources and session information.

Where applicable, users may be able to control certain analytics technologies through browser settings or available consent mechanisms.

Noreo Labs may use advertising technologies, including Meta Pixel or similar tools, to measure advertising, understand website conversions, create advertising audiences, conduct remarketing and improve advertising relevance.

Depending on applicable settings and law, information may be shared with those providers for these purposes. Users may manage certain advertising preferences through the providers' own tools and settings.

Noreo Labs may use an email provider to send catalogue notices, documentation updates and other communications.

If you provide the required consent, we may send commercial electronic messages including product announcements, educational material, newsletters and fulfilment-window notices.

Marketing emails will include an unsubscribe mechanism where required. You may unsubscribe at any time. Unsubscribing from marketing communications does not necessarily stop transactional communications relating to orders or your account.

Noreo Labs uses WhatsApp as a primary institutional support channel. Where offered, we may also send SMS messages where we have the required consent or another lawful basis.

Messaging may include order support, shipping updates, quality inquiries and, where consented, promotional campaigns. Message frequency and applicable carrier charges may vary.

You may unsubscribe from promotional messages using the mechanism provided. Transactional messages necessary to fulfil an order may continue.

Canadian anti-spam legislation generally restricts commercial electronic messages without consent and requires appropriate compliance mechanisms. WhatsApp is operated by a third party; its independent privacy practices apply to use of that platform.

Where legally permitted and where the necessary consent or other lawful basis exists, we may send reminders regarding products left in an online shopping cart. Purchasers may opt out of marketing communications.

Even if you unsubscribe from marketing, we may continue to send necessary transactional communications, including:

• order confirmations;
• payment receipts;
• shipping confirmations;
• tracking information;
• delivery notices;
• refund notices;
• account-security notices;
• important product notices;
• recall or safety notices; and
• legal notices.

These communications are necessary to administer your relationship with Noreo Labs.

Noreo Labs may disclose personal information to service providers where reasonably necessary to operate the business. These may include:

• ecommerce and hosting providers - website hosting, checkout, order processing and customer accounts;
• payment processors - processing payments, fraud detection and transaction verification;
• shipping providers - delivering orders, tracking shipments and resolving delivery issues, which may include Canada Post and other institutional carriers;
• marketing providers - email, messaging, advertising and campaign measurement;
• analytics providers - website analytics, performance measurement and technical analysis;
• fraud-prevention providers - transaction screening, fraud detection, identity verification and security;
• review platforms - where used;
• professional advisors - lawyers, accountants, insurers, auditors and consultants; and
• government and legal authorities - where disclosure is required by law, court order or regulatory authorities, or is necessary to protect legal rights or investigate suspected fraud or unlawful activity.

Noreo Labs will not disclose personal information for unrelated purposes simply because it has been collected.

Some third-party service providers may store or process information outside Canada. For example, ecommerce, cloud, payment, advertising, analytics or marketing providers may operate infrastructure in Canada, the United States or other jurisdictions.

When information is transferred outside Canada, it may become subject to the laws of the jurisdiction in which it is processed.

Noreo Labs will take reasonable contractual, organizational and technical measures to protect personal information when using third-party service providers.

By using Noreo Labs's Site, you acknowledge that certain service providers used by Noreo Labs may process information in jurisdictions outside Canada.

The applicable privacy protections may differ from those available under Canadian law. Noreo Labs remains responsible for personal information under its control and will use reasonable measures to select and manage service providers appropriately.

Noreo Labs may operate a public-facing batch or COA verification system.

A verification page may display information such as product name, batch or lot number, testing date, laboratory name, analytical results, COA documentation and product specifications.

Noreo Labs will generally design the verification system so that it does not publicly disclose individual purchaser information. Do not upload personal information to a public verification system unless specifically requested and clearly informed.

If you submit a review, testimonial, photograph or other content, we may use information associated with that submission for publishing the review, displaying it on our Site or through third-party review services, and related legitimate business purposes.

If you submit a review using your name or display name, that information may be publicly visible.

Do not include medical information, health records, private information about another person, payment information, passwords or confidential information in a public review.

Noreo Labs may use an independent review provider. If you choose to participate in a review request, your information may be processed by that provider according to its privacy practices.

Noreo Labs does not control the privacy practices of independent review platforms.

Noreo Labs takes reasonable measures designed to protect personal information against unauthorized access, loss, theft, disclosure, copying, modification, destruction and misuse.

Security measures may include access controls, passwords, authentication, encryption where appropriate, secure hosting, payment-security controls, employee access restrictions, service-provider controls, monitoring, backups, security updates and organizational policies.

No internet transmission or storage system can be guaranteed to be completely secure. PIPEDA requires safeguards appropriate to the sensitivity of personal information.

Access to personal information will be limited to individuals who reasonably require access for legitimate business purposes.

Employees and contractors may be required to maintain confidentiality and follow Noreo Labs's privacy and security procedures.

Noreo Labs retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining business records, accounting, tax obligations, legal requirements, fraud prevention, dispute resolution, quality investigations, regulatory obligations and enforcing agreements.

Different information may have different retention periods. When information is no longer required, we will take reasonable steps to securely delete, destroy or anonymize it.

Information may remain in secure backups for a limited period after deletion from active systems. Backup information may not be immediately accessible for ordinary account-management requests.

Noreo Labs will maintain reasonable backup and deletion practices appropriate to the nature of the information.

Subject to applicable law, you may have rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request information about how your information is used or disclosed;
• withdraw consent where applicable;
• ask questions about our privacy practices; and
• submit a privacy complaint.

PIPEDA's access principle provides individuals with rights to request access to personal information and challenge its accuracy and completeness. Certain requests may be subject to legal exceptions.

To request access to your personal information, contact contact@noreo.ca.

Please include your full name, email address associated with the account, nature of your request, relevant order number if applicable, and details sufficient to identify the information requested.

Noreo Labs may need to verify your identity before providing access. Identity verification is intended to protect individuals from unauthorized disclosure.

If you believe personal information held by Noreo Labs is inaccurate or incomplete, contact us. We will take reasonable steps to investigate and correct information where appropriate.

Noreo Labs may rely on consent for a particular collection, use or disclosure. You may withdraw consent subject to applicable legal or contractual restrictions.

Withdrawal of consent may affect our ability to provide certain services. For example, withdrawing consent for marketing will generally stop promotional communications but will not prevent us from retaining information necessary to process an existing order or comply with law.

You may unsubscribe from promotional email by clicking the unsubscribe mechanism included in our messages, or contact Noreo Labs directly to update marketing preferences.

Opting out of marketing does not necessarily remove you from transactional communications.

Depending on the technologies used on the Site, you may be able to control cookies through browser settings, device settings, cookie-consent tools, advertising settings and analytics controls.

Disabling essential cookies may affect website functionality, including institutional verification and cart sessions.

Noreo Labs's Site and products are intended for individuals who meet the minimum age requirement stated in our Terms & Conditions, acting for qualified research institutions.

Noreo Labs does not knowingly seek to collect personal information from individuals who do not satisfy the applicable age requirement. If you believe that a minor has provided personal information to Noreo Labs, contact us so that we can investigate and take appropriate action.

Noreo Labs may maintain records of communications relating to orders, product quality, shipping, refunds, returns, complaints, regulatory inquiries and support.

These records may be retained as reasonably necessary to administer the relationship, investigate issues and comply with legal obligations.

Noreo Labs may use personal information and transaction information to identify suspicious activity. This may include analyzing IP addresses, device information, order patterns, payment information, shipping information, account activity and transaction history.

Information may be shared with payment processors, fraud-prevention providers or authorities where reasonably necessary.

Noreo Labs may disclose personal information where reasonably necessary to comply with legal obligations, court orders, government requests or law enforcement; investigate fraud; protect purchasers or Noreo Labs; enforce contracts; or defend legal claims.

Where legally permitted, Noreo Labs will limit disclosures to information reasonably necessary for the relevant purpose.

If Noreo Labs undergoes a merger, acquisition, financing, restructuring, sale of assets, sale of the business, or a bankruptcy or insolvency proceeding, personal information may be transferred as part of the transaction where legally permitted.

Any recipient will be expected to handle personal information in accordance with applicable privacy requirements.

The Site may contain links to third-party websites, including laboratory websites, social media, payment providers, shipping providers and scientific resources.

Noreo Labs does not control the privacy practices of third-party websites. You should review the privacy policies of those websites before providing personal information.

Noreo Labs may operate social-media accounts or use social-media integrations. Interactions through those platforms may be subject to the privacy policies of those platforms.

Noreo Labs may receive information that you choose to make available through those platforms.

Noreo Labs does not generally need sensitive medical information to process an ordinary order. Please do not send us:

• medical records;
• prescription information;
• diagnoses;
• laboratory medical results;
• health histories;
• insurance information;
• passwords;
• financial account credentials; or
• government identification numbers

unless specifically requested for a legitimate and lawful purpose.

If you voluntarily provide sensitive information, we may process it only to the extent reasonably necessary to address the communication, comply with law or protect legitimate interests.

Noreo Labs takes reasonable steps to keep personal information accurate and complete for the purposes for which it is used.

Purchasers are encouraged to update names, addresses, email addresses, phone numbers, institution details and account information. You can contact us to request corrections.

Noreo Labs maintains procedures intended to identify, contain, investigate and respond to privacy incidents.

If a privacy breach occurs that triggers notification requirements under applicable law, we will take the steps required by law. Depending on the circumstances, this may include containing the incident, investigating, assessing risk, notifying affected individuals, notifying privacy regulators, documenting the incident and implementing corrective measures.

If you believe Noreo Labs has mishandled your personal information, contact our privacy contact first. We will investigate privacy complaints in a reasonable manner.

Please provide your name, contact information, description of the concern, relevant dates, applicable communications and requested resolution. We may request additional information necessary to investigate.

If you are not satisfied with Noreo Labs's response, you may have the right to bring a complaint to the applicable privacy regulator.

For matters falling under federal jurisdiction, this may include the Office of the Privacy Commissioner of Canada. Certain provinces have their own privacy oversight authorities.

Nothing in this Privacy Policy prevents you from exercising rights available under applicable privacy legislation.

Noreo Labs serves verified institutions throughout Canada, including Quebec.

Where Quebec privacy legislation applies to Noreo Labs's processing of personal information, Noreo Labs will comply with applicable requirements.

Quebec residents may have additional rights regarding access, correction, consent, withdrawal of consent, transparency, automated processing, privacy governance, cross-border transfers, retention and complaints.

Where applicable, Quebec-specific privacy requirements will prevail over this Policy to the extent required by law.

Where applicable, Noreo Labs will comply with provincial private-sector privacy legislation in jurisdictions where such legislation applies to our activities, including Alberta and British Columbia.

Where provincial legislation applies instead of, or alongside, federal privacy legislation, we will apply the requirements applicable to the particular activity and jurisdiction.

Noreo Labs may update this Privacy Policy periodically to reflect changes in law, new technologies, new service providers, changes to the Site, changes to our business or changes to our information practices.

The "Last Updated" date at the top of this Policy will indicate when it was most recently revised.

Noreo Labs will provide additional notice or obtain consent for material changes where required by law.

Noreo Labs Inc.

Privacy contact: contact@noreo.ca · WhatsApp · Contact page

Operating jurisdiction: Ontario, Canada. A registered business address will be published on the Site or provided in writing once confirmed.

Please write "Privacy Request" in the subject line where appropriate.

This Privacy Policy is effective as of August 28, 2026 and was last updated on August 28, 2026.