cookies, data use, data retention, and data sharing

Privacy Policy

Effective Date: March 13, 2026
Last Updated: March 13, 2026

1. Introduction and Scope

Van der Stahl Scientific, Inc. (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy and security of information collected from individuals who visit our website at www.vanderstahl.com (the “Website”), contact us through our inquiry forms, interact with our live chat support, or otherwise engage with our online services. This Privacy Policy has been prepared in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), as well as international privacy regulations including the European Union General Data Protection Regulation (GDPR), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Brazil’s Lei Geral de Protecao de Dados (LGPD), and South Africa’s Protection of Personal Information Act (POPIA).

This Privacy Policy applies to all personal information we collect through our Website and any related digital services. It describes the types of information we collect, how we use and share that information, your rights with respect to your personal information, and how you can contact us with questions or concerns. By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy.

Van der Stahl Scientific, Inc. is a professional scientific equipment and packaging solutions company headquartered in California, United States. We serve clients domestically throughout the United States and internationally, including customers located in the European Union, Canada, and other jurisdictions worldwide. This global reach means that we are subject to a broad range of privacy laws and regulations, all of which we take seriously and strive to comply with in full.

2. Information We Collect

We collect several categories of personal information in the course of operating our Website and providing our services. This section describes each category in detail, including how and why we collect such information.

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you interact with our Website. This includes information submitted through our contact and inquiry forms, such as your name, email address, phone number, company or organization name, job title, and the content of your message or inquiry. We also collect information provided during live chat sessions conducted through Tawk.to, our third-party live chat service provider. Any information you share with us during a chat session, including your name, contact details, and the substance of your inquiry, is collected and stored.

2.2 Information Collected Automatically (Derivative Data)

When you visit our Website, certain information is collected automatically through the use of cookies, web beacons, pixel tags, and similar tracking technologies. This automatically collected information is sometimes referred to as derivative data and includes the following categories:

Log and Usage Data

Our servers automatically record information about your visit to our Website. This log data includes your Internet Protocol (IP) address, browser type and version, operating system, referring and exit pages, date and time of access, pages viewed, time spent on each page, links clicked, and other actions taken on the Website. This information is used to monitor and analyze how our Website is used and to maintain the security and operation of our systems.

Device Data

We collect information about the device you use to access our Website, including the hardware model, device identifiers, operating system and version, browser type and version, screen resolution, language preferences, and mobile network information where applicable. This information helps us optimize the Website experience across different devices and platforms.

Location Data

We collect approximate location data derived from your IP address. This geolocation data allows us to determine your general geographic region, including country, state or province, and city. We use this information to understand where our Website visitors are located, to provide regionally appropriate content, and to comply with jurisdiction-specific legal requirements. We do not collect precise GPS-based location data through our Website.

2.3 Information from Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to help us understand how visitors interact with our Website. Google Analytics collects information such as how often users visit the Website, what pages they visit, what other websites they used prior to coming to our Website, and what actions they take on our Website. Google Analytics collects only the IP address assigned to you on the date you visit our Website, rather than your name or other identifying information. We do not combine the information collected through Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to our Website is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.
You may prevent Google Analytics from recognizing you on return visits to this Website by disabling cookies on your browser. You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

3. How We Use Your Information

Van der Stahl Scientific, Inc. uses the personal information we collect for legitimate business purposes. We process your information only when we have a lawful basis to do so, including where necessary to fulfill a contract, where you have given your consent, where we have a legitimate business interest, or where we are required to do so by law. The specific purposes for which we use your information include the following:
To respond to your inquiries, questions, and requests submitted through our contact forms
or live chat, and to provide you with information about our products and services.

To communicate with you about your business relationship with us, including sending quotes, invoices, product updates, and service-related communications.
To analyze and monitor Website traffic, usage patterns, and visitor behavior using Google Analytics, in order to improve the functionality, content, and user experience of our Website.
To maintain the security and integrity of our Website, detect and prevent fraudulent activity, unauthorized access, and other potentially harmful conduct.
To comply with applicable legal obligations, including responding to lawful requests from regulatory authorities and law enforcement agencies.
To enforce our Terms of Use and other agreements, and to protect the rights, property, and safety of Van der Stahl Scientific, Inc., our clients, and others.
To improve and develop our products, services, and Website based on how users interact with our digital platforms.
To send promotional and marketing communications where you have opted in to receive such communications or where we otherwise have a legitimate interest in doing so, consistent with applicable law.

We will not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy without first providing you with appropriate notice and, where required, obtaining your consent.

4. Legal Bases for Processing (GDPR)

For individuals located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions that require a legal basis for processing personal data, Van der Stahl Scientific, Inc. processes your personal information on the following legal bases as provided under the General Data Protection Regulation (GDPR) and applicable national implementing legislation:

Contractual Necessity: We process your personal information when it is necessary to enter into or perform a contract with you. For example, when you request a quote or place an order for our products, we process your contact and business information to fulfill that request.

Legitimate Interests: We process certain personal information based on our legitimate business interests, provided that those interests are not overridden by your rights and interests. Our legitimate interests include operating and improving our Website, preventing fraud and maintaining security, and growing our business through marketing activities.

Legal Obligation: We process personal information where necessary to comply with a legal obligation to which we are subject, including applicable laws and regulations in the United States and internationally.

Consent: Where required by law, we will obtain your consent before processing your personal information for specific purposes, such as sending marketing communications or placing non essential cookies on your device. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

5. Sharing and Disclosure of Your Information

Van der Stahl Scientific, Inc. does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal information in the following limited circumstances:

5.1 Service Providers

We share personal information with carefully selected third-party service providers who assist us in operating our Website and delivering our services. These service providers are authorized to use your personal information only as necessary to provide services to us and are bound by contractual obligations to keep your information confidential and secure. Our service providers include:

Google LLC (Google Analytics) — Website analytics and performance monitoring
Tawk.to — Live chat support services
Email and hosting service providers — For Website operations and communications

5.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid legal process, including a subpoena, court order, or government demand. We may also disclose information when we believe, in good faith, that disclosure is necessary to protect the rights, property, or safety of Van der Stahl Scientific, Inc., our clients, employees, or others, or to investigate potential violations of our policies or applicable law.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or other similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website prior to your information being transferred and becoming subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with third parties when you have given us your explicit consent to do so, such as when you authorize us to provide your contact information to a business partner or distributor for the purpose of fulfilling your request.

6. International Data Transfers

Van der Stahl Scientific, Inc. is headquartered in the United States. If you are located outside the United States, including in the European Economic Area, please be aware that your personal information may be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

For transfers of personal data from the European Economic Area to the United States, we rely on appropriate safeguards as required by applicable law. These safeguards may include Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms. By submitting your information through our Website, you acknowledge and agree to the transfer, storage, and processing of your information in the United States.

For residents of Canada, Brazil, and South Africa, we ensure that any transfers of your personal information outside your home jurisdiction are conducted in compliance with PIPEDA, LGPD, and POPIA respectively, including implementing appropriate contractual protections with receiving parties.

7. Data Retention

Van der Stahl Scientific, Inc. retains personal information for as long as necessary to fulfill the purposes for which it was collected, including the purposes outlined in this Privacy Policy, and to comply with applicable legal, regulatory, accounting, and reporting requirements. The specific retention periods we apply are as follows:

Contact form submissions and inquiry data: Retained for a period of three (3) years from the date of last interaction, or longer if required by applicable law or ongoing business relationship.
Live chat records: Retained for a period of two (2) years from the date of the chat session, unless a longer retention period is required for legal, compliance, or business purposes.
Website analytics data (Google Analytics): Retained in accordance with Google’s standard data retention settings, which we have configured to a maximum of twenty-six (26) months.
Marketing and communication preferences: Retained until you withdraw your consent or opt out, plus a reasonable period thereafter to confirm compliance.
Legal and contractual records: Retained for the period required by applicable law, which may be up to seven (7) years or longer in certain circumstances.

When personal information is no longer required for the purposes for which it was collected, or when the applicable retention period has expired, we will securely delete, anonymize, or destroy that information in accordance with our internal data management procedures.

8. Your Privacy Rights

Depending on your location and the applicable laws of your jurisdiction, you may have certain rights with respect to your personal information. Van der Stahl Scientific, Inc. is committed to honoring these rights and providing you with the means to exercise them. The specific rights available to you are described below.

8.1 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for which we use it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions provided by law.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale: We do not sell personal information. However, if this practice were to change, California residents would have the right to opt out.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised your rights.

To exercise your California privacy rights, please contact us using the information provided in Section 12 of this Privacy Policy. We will respond to verifiable consumer requests within forty-five (45) days of receipt.

8.2 Rights Under GDPR (EEA and UK Residents)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR and applicable national data protection laws:

Right of Access: You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of that personal data.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine readable format, and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data based on our legitimate interests, including for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within thirty (30) days. In some cases, we may need to verify your identity before processing your request.

8.3 Rights Under PIPEDA (Canadian Residents)

If you are located in Canada, you have the right under PIPEDA to access and correct your personal information, to withdraw your consent to our collection and use of your information at any time, and to file a complaint with the Office of the Privacy Commissioner of Canada if you have concerns about how we handle your personal data.

8.4 Rights Under LGPD (Brazilian Residents)

If you are located in Brazil, you have rights under the Lei Geral de Protecao de Dados (LGPD) including the right to confirmation of the existence of processing, access to your data, correction of incomplete or inaccurate data, anonymization or deletion of unnecessary data, data portability, information about third parties with whom we share your data, and the right to revoke your consent.

8.5 Rights Under POPIA (South African Residents)

If you are located in South Africa, the Protection of Personal Information Act (POPIA) grants you rights including the right to access your personal information, to have your information corrected or deleted, to object to the processing of your information, and to lodge a complaint with the Information Regulator of South Africa.

9. Cookies and Tracking Technologies

analyze Website traffic, and understand how visitors interact with our content. For comprehensive information about the specific cookies we use, how they work, and how you can manage your cookie preferences, please refer to our Cookie Policy, which is available on our Website.

In summary, we use the following categories of cookies on our Website:

Strictly Necessary Cookies: These cookies are essential for the Website to function and cannot be switched off in our systems. They are usually only set in response to actions you take such as setting your privacy preferences, logging in, or filling in forms.
Analytics Cookies: We use Google Analytics cookies to collect information about how visitors use our Website. These cookies help us understand visitor numbers, how visitors move around the Website, and which pages are most popular, allowing us to improve the user experience.
Functional Cookies: These cookies enable the Website to provide enhanced functionality and personalization, including live chat services provided by Tawk.to.

You can manage your cookie preferences at any time through your browser settings or through our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our Website.

10. Security of Your Information

Van der Stahl Scientific, Inc. takes the security of your personal information seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include the use of industry-standard encryption technologies for data transmission, access controls and authentication procedures to limit access to personal data, regular review and updating of our security practices and systems, and training of our personnel on data protection and information security.

While we take all reasonable steps to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your data. If you believe that the security of your personal information has been compromised, please contact us immediately using the information provided in Section 12 of this Privacy Policy.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify affected individuals and, where required by law, the relevant supervisory authorities, within the timeframes required by applicable law (including within 72 hours for GDPR reportable breaches).

11. Children's Privacy

Our Website and services are not directed at children under the age of thirteen (13), and we do not knowingly collect personal information from children under that age. If you are under 13 years of age, please do not provide any personal information through our Website. If we become aware that we have collected personal information from a child under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers promptly.

For users located in the European Economic Area, we do not knowingly process the personal data of individuals under the age of 16 without appropriate parental consent in accordance with GDPR Article 8. If you have reason to believe that a child has provided us with personal information, please contact us immediately at info@vanderstahl.com.

12. Contact Information and Data Controller

Van der Stahl Scientific, Inc. is the data controller responsible for your personal information. If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights as described in Section 8, please contact us using the following information:

Company: Van der Stahl Scientific, Inc.
Privacy Contact: Charlie Webb
Email: info@vanderstahl.com
Website: www.vanderstahl.com
Phone:1-800-550-3854
Mailing Address: PO Box 379, Solvang, CA 93464

We will make every effort to respond to all legitimate privacy inquiries and requests within thirty (30) days of receipt. For verifiable consumer requests under the CCPA, we will respond within forty-five (45) days. For GDPR-related requests, we will respond within thirty (30) days, with the possibility of extending this period by a further two (2) months where necessary, in which case we will inform you of the extension and the reasons for it.

13. Changes to This Privacy Policy

Van der Stahl Scientific, Inc. reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this Privacy Policy, we will update the “Last Updated” date at the top of this document and post the revised policy on our Website.

For significant changes that materially affect your privacy rights, we will provide additional notice, such as by sending an email notification to the email address associated with your account or inquiry, or by displaying a prominent notice on our Website, at least thirty (30) days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Website following the posting of changes to this Privacy Policy will constitute your acceptance of those changes.

14. Governing Law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict of law provisions. For users located in the European Economic Area or the United Kingdom, nothing in this section limits any rights you may have under applicable data protection law in your jurisdiction, including the right to lodge a complaint with your local supervisory authority.

15. Acknowledgment

By using the Website at www.vanderstahl.com, you acknowledge that you have read this Privacy Policy, understand its contents, and agree to its terms. If you do not agree with this Privacy Policy, please discontinue your use of our Website. For questions or concerns, please contact us at info@vanderstahl.com.