Privacy Policy

Effective Date: 2026-07-01 Last Updated: 2026-07-01

Bio SB, Inc. ("Bio SB," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit www.biosb.com (the "Site"), create an account, place an order, request a quote, subscribe to our communications, or otherwise interact with us.

Bio SB develops and manufactures in-vitro diagnostic (IVD) reagents, antibodies, detection systems, and staining instrumentation for clinical and research laboratories. Our customers are primarily laboratories, hospitals, universities, pathology practices, and authorized distributors. The personal information we handle is therefore mostly business contact information about the professionals who work at those organizations.

Our principal place of business is:

Bio SB, Inc. 5385 Hollister Avenue, Building 8, #108 Santa Barbara, CA 93111, U.S.A.

 

---

 

1. An Important Note About Patient Information

Bio SB does not collect, receive, or process patient health information through this Site.

We sell laboratory reagents and instruments to institutions. We do not perform diagnostic testing, we do not receive patient specimens through the Site, and we do not request or want patient-identifiable information from you.

Please do not submit patient names, medical record numbers, specimen identifiers, or any other patient-identifiable information through our contact forms, account portal, or customer service channels. If you need to report a product complaint or an adverse event, contact us at technical@bisb.com and provide only the information necessary — we will tell you what we need.

Bio SB is not a HIPAA covered entity with respect to this Site. In limited circumstances — for example, when our field service personnel perform on-site instrument servicing inside a customer's laboratory — we may enter into a Business Associate Agreement with that customer. Any information handled under such an agreement is governed by that agreement, not by this Policy.

 

---

 

2. Information We Collect

2.1 Information you provide to us

2.2 Information collected automatically

When you use the Site, we and our service providers automatically collect:

• Device and network information — IP address, browser type and version, operating system, device identifiers, language settings

• Usage information — pages viewed, products and catalog pages visited, referring URL, search terms entered on the Site, dates and times of access, clickstream data

• Approximate location — derived from IP address, at the city or region level. We do not collect precise GPS geolocation.

• Cookie and similar identifiers — see Section 5.

2.3 Information from other sources

• Authorized distributors and sales partners in our distributor network, who may share contact details for customers in their territories

• Trade shows, conferences, and industry events where you provide a business card or badge scan

• Publicly available professional sources, such as institutional directories and published research affiliations

• Payment and fraud-prevention providers, who may return verification or risk signals about a transaction

2.4 Sensitive personal information

We do not intentionally collect sensitive personal information as defined under California law — such as government identification numbers, precise geolocation, racial or ethnic origin, health information, or biometric data — through the Site, and we do not use any such information to infer characteristics about you.

 

---

 

3. How We Use Personal Information

We use personal information for the following purposes:

To operate our business with you

• Create and administer your Site account

• Process, fulfill, ship, and invoice orders; handle returns and RMAs

• Prepare and deliver quotations and pricing

• Provide technical support, protocol assistance, and instrument service

• Route inquiries to the correct authorized distributor for your territory

To meet regulatory and quality obligations — this is important in our industry

• Maintain complaint files and investigate product complaints

• Evaluate and, where required, report adverse events to the U.S. Food and Drug Administration and to competent authorities in other jurisdictions

• Support product traceability, lot tracking, field corrective actions, and recalls

• Maintain quality-system and distribution records required under 21 CFR Part 820, 21 CFR Part 803, IVDR and comparable non-U.S. regulations

Because these obligations are imposed by law, we may need to retain and use certain information even after you ask us to delete it. See Section 9.

To communicate with you

• Respond to inquiries and service requests

• Send order confirmations, shipping notices, invoices, and other transactional messages

• Send technical bulletins, product notices, and safety or field-action communications

• Send newsletters, catalogs, and event invitations where you have subscribed or where permitted by law (you can opt out at any time)

To improve and secure our Site

• Analyze usage to improve navigation, catalog structure, and content

• Detect, investigate, and prevent fraud, abuse, and security incidents

• Debug and maintain the Site

To comply with law and protect our rights

• Comply with tax, customs, export control, accounting, and other legal obligations

• Establish, exercise, or defend legal claims

• Enforce our terms and policies

 

---

 

4. How We Disclose Personal Information

We disclose personal information to the following categories of recipients:

• Service providers and processors acting on our behalf under contract, including:

• Shopify Inc., which hosts our e-commerce storefront and processes orders

• Payment processors, which handle card authorization and settlement

• Shipping and logistics carriers, to deliver your order and handle customs

• Email, CRM, and marketing platforms, to send communications you have requested

• Analytics providers, to understand Site usage

• IT, hosting, and security vendors

• Authorized distributors in your territory, where your inquiry or order is fulfilled through our distribution network

• Advertising and analytics partners — including Meta Platforms, Inc. and Google LLC — which receive identifiers, device and browser information, and information about your activity on the Site through tracking technologies we have deployed. This is described in Section 4.1 and Section 5.

• Regulators and notified bodies, including the FDA and non-U.S. competent authorities, in connection with adverse event reporting, inspections, audits, and field actions

• Professional advisors — auditors, attorneys, insurers, and accountants

• Government authorities and law enforcement, where required by law, subpoena, or court order, or to protect rights and safety

• Parties to a corporate transaction, such as a merger, acquisition, financing, or sale of assets, in which case personal information may be transferred as a business asset

4.1 Sale and Sharing of Personal Information

We do not sell your personal information for money. Bio SB has not exchanged personal information for monetary consideration, and does not do so.

We do "share" personal information for cross-context behavioral advertising. California law defines "sharing" to include disclosing personal information to a third party for advertising that is targeted to you based on your activity across different websites — even when no money changes hands. Because we use the Meta Pixel and Google Ads tracking technologies on the Site, this activity qualifies as "sharing" under California law, and may qualify as a "sale" or as "targeted advertising" under the laws of certain other states.

In the preceding 12 months, we shared the following categories of personal information for these purposes:

We do not share the personal information of anyone we know to be under 16.

How to opt out. You have the right to direct us not to share your personal information for cross-context behavioral advertising. See Section 5 for the cookie controls and Section 6 for how to submit a request. You may also opt out through the "Your Privacy Choices" link in our Site footer.

 

---

 

5. Cookies, Tracking, and Your Choices

We use cookies and similar technologies for:

• Strictly necessary functions — session management, shopping cart, login authentication, security. These cannot be disabled.

• Functional purposes — remembering your language, region, and preferences.

• Analytics — understanding how visitors use the Site so we can improve it.

• Advertising — measuring the performance of our campaigns and delivering Bio SB advertising to you on other websites and platforms. We use the Meta Pixel (Meta Platforms, Inc.) and Google Ads conversion and remarketing tags (Google LLC) for this purpose.

Managing your cookie preferences. You can accept or reject non-essential cookies — including all advertising and analytics cookies — through the cookie banner presented on your first visit, and you can change your choice at any time via the "Cookie Preferences" and "Your Privacy Choices" links in our Site footer.

Browser controls. Most browsers also let you block or delete cookies through their settings. Blocking strictly necessary cookies will prevent parts of the Site — including login and checkout — from working.

Opting out directly with our advertising partners. You may also manage advertising preferences at Meta's ad settings and Google's Ads Settings, and through industry opt-out tools operated by the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org).

Do Not Track. Some browsers transmit a "Do Not Track" (DNT) signal. There is no common industry standard for how DNT should be honored. Bio SB does not currently respond to DNT signals.

Global Privacy Control. We recognize the Global Privacy Control (GPC) and similar opt-out preference signals transmitted by your browser or extension as a valid request to opt out of the sharing of personal information for cross-context behavioral advertising. When we detect such a signal, we apply the opt-out to that browser and device. If you have an account with us and are logged in when the signal is received, we will also apply the opt-out to your account.

Third-party tracking across sites. Third parties whose technologies appear on the Site may collect information about your online activities over time and across different websites. We do not control those third parties' practices.

 

---

 

6. Your California Privacy Rights

6.1 Rights under the California Consumer Privacy Act

The California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), grants California residents specific rights. Bio SB extends the following rights to California residents as a matter of policy, regardless of whether we meet the CCPA's applicability thresholds in any given year:

• Right to know — request the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the categories of third parties to whom we disclosed it

• Right to delete — request deletion of personal information we collected from you, subject to exceptions

• Right to correct — request correction of inaccurate personal information

• Right to opt out of sale or sharing — direct us to stop sharing your personal information for cross-context behavioral advertising, as described in Sections 4.1 and 5. We honor opt-out preference signals such as the Global Privacy Control.

• Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes requiring this right

• Right to non-discrimination — we will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised a privacy right

Note on exceptions. We may decline all or part of a deletion request where the information is needed to complete a transaction, provide warranty or service support, detect security incidents, comply with a legal obligation, or — importantly in our industry — maintain complaint, traceability, and adverse-event records required by the FDA or other regulators.

How to submit a request. Email privacy@biosb.com or call +1 (805) 692-2768. Please state the right you wish to exercise.

Verification. To protect your information, we will ask you to verify your identity before acting. For account holders, this generally means confirming access to the email address on the account. For others, we may ask you to confirm details that match our records. We will not create new accounts or collect additional identifying information solely to verify a request.

Authorized agents. You may use an authorized agent. We will require written proof of authorization and may ask you to verify your own identity directly.

Timing. We will confirm receipt within 10 business days and respond within 45 calendar days, extendable by an additional 45 days with notice.

6.2 "Shine the Light" — Cal. Civ. Code § 1798.83

California residents with an established business relationship with Bio SB may request information about personal information we disclosed to third parties for those third parties' own direct marketing purposes during the preceding calendar year.

Bio SB does not disclose personal information to third parties for those third parties' own independent direct marketing purposes. Our advertising partners described in Section 4.1 process information to deliver and measure Bio SB's advertising, not to conduct their own direct marketing to you. If you would like written confirmation, send a request to privacy@biosb.com or to the mailing address above, marked "Shine the Light Request." We will respond within 30 days.

6.3 California Online Privacy Protection Act

This Policy is provided in part to satisfy the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §§ 22575–22579). Registered account holders may review and change the personal information in their account by logging in and visiting account settings, or by contacting us. Changes to this Policy are handled as described in Section 12.

 

---

 

7. Rights of Individuals in the EEA, UK, and Switzerland

Bio SB distributes products in more than 70 countries. If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies.

Legal bases for processing. We process personal information on the basis of:

Your rights. Subject to conditions and exemptions, you have the right to access, rectify, erase, restrict processing of, and port your personal data; to object to processing based on legitimate interests or direct marketing; to withdraw consent; and to lodge a complaint with your national supervisory authority. Contact privacy@biosb.com.

International transfers. Personal data is transferred to and processed in the United States, where our operations are based. The United States has not received an adequacy decision covering all such transfers. We rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) together with supplementary measures. A copy of the relevant safeguards is available on request.

 

---

 

8. Other U.S. State Privacy Rights

Residents of states including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others with comprehensive privacy laws may have rights to access, correct, delete, and port personal data, and to opt out of targeted advertising, sale, and certain profiling. Some states provide a right to appeal a denied request. To exercise any of these rights, contact privacy@biosb.com. If we deny your request, you may appeal by replying to our response with the word "Appeal"; we will respond within 45 days and, if we deny the appeal, provide contact information for your state attorney general.

 

---

 

9. Data Retention

We retain personal information for as long as needed for the purposes described in this Policy, and then for the longer of:

• The period required by applicable law — including quality-system, complaint, distribution, and adverse-event records under 21 CFR Part 820  21 CFR Part 803, 21 CFR 806, IVDR and comparable non-U.S. requirements

• Tax, customs, and accounting record retention periods

• The period necessary to establish, exercise, or defend legal claims

Specifically:

 

---

 

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls, and vendor due diligence. Our e-commerce platform and payment processing are provided by vendors that maintain PCI DSS compliance for cardholder data.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at privacy@biosb.com.

 

---

 

11. Children's Privacy

The Site is intended for laboratory and healthcare professionals and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

 

---

 

12. Changes to This Policy

We may update this Policy from time to time. We will post the revised version here and update the "Last Updated" date. If we make material changes, we will provide additional notice — for example, by email to account holders or a notice on the Site. Your continued use of the Site after the effective date constitutes acceptance of the revised Policy.

 

---

 

13. Third-Party Links

The Site links to third-party sites and platforms, including our Facebook, Instagram, and YouTube pages, and to distributor websites. We are not responsible for the privacy practices of those third parties. Review their policies directly.

 

---

 

14. Contact Us

Questions, requests, or complaints about this Policy or our handling of personal information:

Bio SB, Inc. Attn: Privacy 5385 Hollister Avenue, Building 8, #108 Santa Barbara, CA 93111, U.S.A.

Email: privacy@biosb.com U.S. & Canada: +1 (800) 561-1145 International: +1 (805) 692-2768