What we collect,
and why.

Elite Biotech (ABN 97 359 429 938) supplies laboratory reference materials for research use only, from Boorloo / Perth, Australia.

This policy covers everything you do on this website — browsing it, holding an account, and placing an order. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Only what the job actually requires. Specifically:

• When you create an account

  Your name, email address and a password. Your mobile number. What you intend to use the materials for. Optionally a business name and ABN, and a default shipping address. We also record the moment you accepted our research-use and 18+ terms.

• When you place an order

  Delivery name, street address, suburb, state, postcode and phone number. A separate billing address if it differs. Your email address. What you ordered, what you paid, and any discount code you used.

• When you verify your account

  We send one-time codes to your email and to WhatsApp. We store only a hashed form of each code, along with when it was sent and used. The codes themselves cannot be read back out of our database.

• When you browse

  Pages and products viewed, cart activity, and checkout starts, recorded against an anonymous analytics identifier. We do not build a browsing profile against your name.

Your password is never stored in a readable form. What we hold is a bcrypt hash, which cannot be reversed back into your password.

Orders are paid by bank deposit. There is no card form anywhere on this site and no payment processor behind it.

No card number, expiry, CVV or banking login ever reaches us, because there is nothing here to type them into. What we see is the deposit your bank shows and the order it matches.

A short list of service providers, each given only what it needs to do its job:

• Australia Post

  Your delivery address — to quote postage, ship your parcel and provide tracking.

• SendGrid

  Your email address — to send order invoices, receipts and verification codes.

• WhatsApp

  Your mobile number — to send order confirmations and verification codes.

• Cloudflare

  Serves and protects the site, and forwards analytics events from its network rather than loading trackers into your browser.

• Google Analytics

  Anonymous traffic and sales measurement. No name, email or address is sent to it.

• Vercel and Neon

  Host the website and its database.

We do not sell your personal information, and we do not hand it to anyone else for their own marketing.

Three things get stored on your device, and they do different jobs:

• Signing in

  A cookie that keeps you signed in between pages. Without it the site cannot recognise you, so this one is not optional.

• Your cart

  Not a cookie. What you add to your cart is kept in your own browser and is not sent to us at all until you place the order. Clearing your browser data empties it, and we never see what was in there.

• Measurement

  A cookie set by Cloudflare on our own domain, holding an anonymous identifier so that repeat visits are not counted as new people.

Blocking the measurement cookie costs you nothing — the site works exactly the same. Blocking the sign-in cookie means you will not be able to stay signed in.

Order records and invoices are kept for as long as Australian tax and business record-keeping law requires, which is longer than most people expect and is not something we can shorten on request.

Account details are kept while your account is open. Verification codes expire within minutes and are cleared once used. Analytics data follows the retention period set in Google Analytics.

Passwords are hashed, never stored readable. Sessions are signed tokens rather than anything you could edit by hand. The admin area sits behind separate authentication and is excluded from search engines. Traffic to and from the site is encrypted.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

• A copy

  Ask what personal information we hold about you, and we will tell you.

• A correction

  Most of it you can fix yourself in your account. For anything else, write to us.

• Deletion

  Ask us to close and delete your account. Order records that tax law requires us to retain will stay, and we will tell you exactly what those are.

• No more marketing

  Withdraw marketing consent whenever you like. It does not affect order emails, which are part of the purchase rather than promotion.

• A complaint

  Write to us first — we would rather fix it. If you are not satisfied with how we handle it, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

When this policy changes in substance, the date at the top changes with it. We will not quietly rewrite it and leave the date sitting where it was.

Questions, requests and complaints all go to the same place: [email protected]. The conditions we sell under are set out separately in our Terms of Sale.

Elite Biotech · ABN 97 359 429 938 · Last updated 30 August 2026