Privacy Policy

Culmina LLC, 501 Silverside Road, Wilmington, DE 19809, United States is the data controller for this store. Privacy questions reach us at legal@alptide.de.

Account data — email, name, password (stored only as a hash). Needed to operate your account and attach orders to it. Legal basis: performance of a contract.

Order data — products, quantities, delivery address, order history, and payment references. We never see or store full card numbers; payment details are handled by the payment provider. Legal basis: performance of a contract, and legal obligations (accounting, tax).

Compliance affirmations — your age and researcher-status declarations, recorded with a timestamp. Legal basis: legitimate interest in selling research compounds responsibly, and legal obligation where applicable.

Referral attribution — if you arrive through a partner link and consent to marketing storage, a cookie records the partner code for 90 days so the partner is credited. Legal basis: consent, which you can decline or withdraw without losing any functionality.

Technical logs — server logs (IP address, request path, time) kept for security and abuse prevention. Legal basis: legitimate interest. Logs rotate automatically.

Necessary: session sign-in, cart, cookie-consent record, and the age-verification flag. These make the store work; no consent banner can turn them off.

Marketing: one cookie, the partner-referral code above, written only after you choose “Accept all”. Declining writes nothing and changes nothing about how the store works. There are no analytics or advertising trackers on this site.

On infrastructure we operate ourselves, hosted with a privacy-focused provider in Iceland and Finland, with encrypted backups. Access is restricted to personnel who operate the store.

Couriers receive the delivery details needed to deliver. The payment provider receives what payment processing requires. Our email platform (AminoEngine) receives the email address and contents of each order, and the consent of anyone who ticks an “offers by email” box; it sends offers only to people who ticked one. Our hosting provider (Iceland) and the relay that delivers our order emails (Iceland) process data on our instructions. We do not sell personal data, full stop.

Orders are fulfilled from warehouses in Switzerland, Austria, and Germany; hosting is in Iceland and Finland (EEA-adequate jurisdictions). The company operating the store is incorporated in the United States; our suppliers receive product orders, not personal data.

Account data: for the life of the account. Order and invoice data: as long as tax and accounting law requires (up to ten years). Referral cookie: 90 days. Consent record: 12 months, then re-asked. Logs: rotated on a short cycle.

Access, correction, deletion, restriction, portability, and objection — plus withdrawal of any consent at any time, and the right to complain to the data-protection authority of your country of residence. Write to legal@alptide.de and we respond within one month. Deletion requests are honoured except where law requires retention (e.g. invoices).

TLS everywhere, passwords stored as hashes, the database isolated from the public internet on a private network, encrypted nightly backups with an off-site copy, key-only server access, and monitoring. No system is perfectly secure; if a breach affects your data we will notify you and the authority as the law requires.

We update this policy when the platform’s data handling changes. The review date at the top is the record; material changes are announced on the site.