Privacy Policy

Effective September 7, 2026. This Privacy Policy explains how Wednesday Research LLC (“Wednesday”, “we”, “us”) collects, uses, shares and protects personal information when you visit wednesdaylabs.co (the “Site”), create an account, place an order, join the Wednesday Circle, or apply to or participate in our Partner Program. It also describes the choices and rights you have. By using the Site you agree to this Policy. If you do not agree, please do not use the Site.

1. Who we are and how to reach us

Wednesday Research LLC is the controller of the personal information described in this Policy. Questions, requests and complaints can be sent to support@wednesdaylabs.co with “Privacy” in the subject line.

2. Information we collect

Information you give us. When you create an account, place an order, contact us, join the Wednesday Circle, or apply to the Partner Program we collect what you provide, which may include your name, email address, phone number, billing and shipping addresses, organization or institution, research-use and age certifications, order details, messages you send us, and, for Partner applicants, your role, website or social profile URL, audience size and channels, and payout details you later supply. We do not ask for, and you should not send us, health information, medical history, medications, symptoms, diagnoses, insurance details, or any information about the use of products in or on any person or animal.

Payment information. Payments are processed by third-party payment processors. When you pay by card or another online method, your payment details are entered directly with the processor and we receive only a confirmation, the payment method type and, where applicable, the last four digits. When we offer manual payment (for example bank transfer), we receive the information the payment network provides to identify your payment. Never send full card or bank account numbers through our contact forms or email.

Information collected automatically. When you use the Site we and our service providers automatically record technical data such as your IP address, approximate location derived from it, browser and device type, operating system, referring URL, pages viewed, time spent, and the links you click, using server logs, cookies and similar technologies (see Section 5). If you arrive through a Partner’s referral link or use a Partner’s code, we record that attribution.

Information from third parties. If you sign in with Google, Google sends us your name, email address and profile picture as permitted by your Google settings; we do not receive your Google password. We may receive delivery status from shipping carriers, fraud signals from payment and fraud-prevention providers, and engagement data (opens, clicks) from our email service provider.

3. How we use information

We use personal information to: process and fulfil orders, arrange shipping and provide order updates; create and manage your account, including one-time sign-in links; provide customer support; operate loyalty points, coupons, referral and Partner Program features, including calculating and paying commissions; verify eligibility, detect and prevent fraud, abuse and unlawful purchases, and enforce our Terms of Service and Partner Code of Conduct; send transactional messages; send marketing emails or texts to people who have opted in; maintain compliance and business records, including records that research-use certifications were made; analyse and improve the Site and our products; and comply with legal obligations and respond to lawful requests.

Legal bases (EEA/UK visitors). Where those laws apply, we process data to perform our contract with you (orders, accounts, Partner Program), to comply with legal obligations (record-keeping, tax), with your consent (marketing, non-essential cookies) and for our legitimate interests (site security, fraud prevention, analytics, defending legal claims) balanced against your rights.

4. How we share information

We do not sell personal information, and we do not share it with third parties for their own marketing. We share it only:

• With service providers that act on our instructions: web hosting and content delivery (Hostinger), the WordPress and WooCommerce platform, payment processors and fraud-prevention services, shipping carriers and fulfilment partners, email and SMS delivery and marketing-automation providers, analytics providers, customer-support tooling, and Google (for sign-in only, if you choose it).
• With Partners, only aggregate performance data about orders attributed to them (counts and commission amounts). We do not give Partners customer names, contact details or order contents.
• For legal reasons: to comply with a law, regulation, subpoena or court order; to respond to lawful requests from public authorities; to enforce our terms; to protect the rights, property or safety of Wednesday, our customers or others; and to investigate fraud or unlawful use of our products.
• In a business transfer: in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
• With your direction or consent.

5. Cookies and similar technologies

We use: strictly necessary cookies and local storage for the cart, checkout, sign-in sessions, security, the 21+ research-access gate and page caching; functional cookies that remember your preferences and Partner referral attribution (for up to 30 days); and analytics cookies that help us understand how the Site is used. We do not use third-party advertising or cross-site tracking cookies. Most browsers let you refuse or delete cookies; if you block strictly necessary cookies parts of the Site, including checkout, will not work. We honor the Global Privacy Control signal where required by law; we do not otherwise respond to “Do Not Track” signals, for which no common standard exists.

6. Marketing communications

We send marketing emails and, where you have given separate consent, text messages only to people who opt in (for example by joining the Wednesday Circle). You can withdraw consent at any time by clicking the unsubscribe link in any email, replying STOP to any text, or emailing support@wednesdaylabs.co. We will continue to send transactional messages about your orders and account. Message and data rates may apply to texts; message frequency varies.

7. Data retention

We keep personal information for as long as needed for the purposes above. Order, payment, shipping and research-use-certification records are retained for at least seven years to meet tax, accounting, product-traceability and legal-defense requirements. Account data is kept while your account is active and for a reasonable period afterwards. Partner application data is kept for 12 months if declined, and for the duration of participation plus seven years if approved. Marketing data is kept until you unsubscribe plus a suppression record so we do not contact you again. Server logs are generally kept for up to 12 months. We may keep anonymised or aggregated data indefinitely.

8. Security

We use administrative, technical and physical safeguards appropriate to the sensitivity of the data, including TLS encryption in transit, access controls, a web application firewall, rate limiting, hashed one-time sign-in tokens, and reliance on PCI-DSS-compliant payment processors so that we never store full card numbers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information we will notify you and any regulator as required by law.

9. Your rights and choices

Depending on where you live you may have the right to: access the personal information we hold about you and receive a copy; correct inaccurate information; delete your information; restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time (without affecting prior processing); opt out of the sale or sharing of personal information (we do none) and of targeted advertising (we do none); and not be discriminated against for exercising your rights. California residents have these rights under the CCPA/CPRA; we do not “sell” or “share” personal information as those terms are defined there, and we do not use or disclose sensitive personal information for purposes that would trigger a right to limit. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other U.S. states with comprehensive privacy laws, and residents of the EEA, UK and Switzerland, have comparable rights.

To exercise a right, email support@wednesdaylabs.co from the address on your account or order, or provide enough information for us to verify your identity. You may use an authorised agent where the law allows; we will ask for proof of authorisation. We will respond within the time required by applicable law (generally 45 days, extendable once). Some information is exempt from deletion, for example records we must keep for tax, fraud-prevention or legal-defense purposes. If you are not satisfied with our response you may complain to your local data-protection authority.

10. International transfers

We are based in the United States and our service providers may process data in the United States and other countries. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country. For transfers from the EEA, UK or Switzerland we rely on standard contractual clauses or another lawful transfer mechanism.

11. Children and age restriction

The Site and our products are intended for adults aged 21 and over engaged in laboratory research. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell to anyone under 21. If you believe a minor has provided us with information, contact us and we will delete it.

12. Third-party sites and services

The Site may link to third-party websites and uses third-party sign-in (Google). Those services have their own privacy policies, which we encourage you to read; we are not responsible for their practices.

13. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with a new effective date and, for material changes, notify account holders by email or a notice on the Site. Your continued use of the Site after the effective date means you accept the updated Policy.

14. Contact

Wednesday Research LLC · support@wednesdaylabs.co