Privacy Policy.

Quantum Biologics, Inc. ("QB Merch," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, when we share it, and the choices you have about it. It applies to the qbmerch.com website and any purchases made through it.

1. Information we collect

Information you provide

• Order details — name, shipping and billing address, email address, phone number, and the items you buy.
• Account details — if you create an account: email, password (stored as a salted hash), saved addresses, and order history.
• Payment details — full card numbers are collected and stored by Stripe, not by us. We receive only a tokenized reference, the last four digits, and the card brand for receipts and fraud review.
• Support messages — the contents of any email, contact-form submission, or other message you send us.

Information collected automatically

• Device and usage data — IP address, browser type, referring URL, device type, pages viewed, and timestamps.
• Cookies and similar technologies — used for cart persistence, session management, analytics, and fraud prevention.

2. How we use your information

• To process, ship, and support your orders.
• To prevent fraud, abuse, and chargebacks — including running orders through Stripe Radar and our own fraud-review checks.
• To send transactional email: order confirmations, shipping updates, delivery notices, and return updates.
• To send marketing email — only if you have opted in. You can opt out from the footer of any marketing email, or by contacting us.
• To improve the Site: analyze usage patterns, diagnose bugs, and develop new features.
• To comply with our legal obligations and to enforce our Terms of Service.

3. How we share your information

We do not sell your personal information. We share it only with the following categories of recipients, and only as needed:

• Payment processor — Stripe, Inc. processes payments and fraud review. See Stripe's privacy policy at stripe.com/privacy.
• Shipping and fulfillment partner — receives your name, shipping address, and order contents to fulfill and deliver your order.
• Email service provider — sends transactional and (if opted in) marketing email on our behalf.
• Analytics provider — aggregated, de-identified data to help us understand how the Site is used.
• Legal, safety, and compliance — to comply with subpoenas, court orders, or similar legal processes, or to protect our rights and the rights of others.
• Business transfers — if we are merged, acquired, or sold, customer data may be part of the transferred assets, subject to this Privacy Policy.

4. Cookies

We use first-party cookies and local storage to keep you logged in, remember your cart, and measure Site performance. Some cookies are strictly necessary; others support analytics. You can disable non-essential cookies in your browser settings, though parts of the Site may stop working if you do.

5. Data retention

We retain order records for at least seven years to meet tax and accounting obligations. Marketing contact data is retained until you unsubscribe. Support conversations are retained for three years for quality and reference. You can request earlier deletion — see "Your rights" below.

6. Security

We use industry-standard safeguards to protect your information: HTTPS across the Site, encrypted-at-rest databases, hashed passwords, access controls, and regular review of our vendors. No system is perfectly secure; in the event of a breach affecting you, we will notify you as required by applicable law.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. California residents have specific rights under the CCPA/CPRA, including the right to know and the right to delete. EU and UK residents have rights under the GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email support@qbmerch.com. We will verify your identity before acting on the request and respond within the time frame required by applicable law.

8. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International transfers

We are based in the United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S. By using the Site you consent to this transfer.

10. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be announced on this page for at least 30 days before taking effect.

11. Contact

For privacy questions or requests, email support@qbmerch.com with the subject line "Privacy Request." You can also reach us via the contact page.