Privacy policy.

• Order data: name, email, ship-to address, order contents, payment method type (not crypto wallet addresses beyond what is necessary to verify payment).
• Communication data: any email or message you send to the correspondence desk.
• Site usage: minimal server logs (IP, timestamp, user-agent) retained for 30 days for fraud and abuse prevention.
• Local storage: your basket contents and researcher-gate acknowledgement are stored in your browser’s local storage. These never leave your device.

• We do not run third-party advertising trackers or fingerprinting pixels.
• We do not record, store, or share the contents of emails with third parties.
• We do not on-sell any customer data to any third party, under any circumstance.

We load Google Tag Manager on this Site. Tag Manager is a container that allows us to add or remove measurement tags without redeploying the Site. Loading the container itself sends a standard HTTP request to Google (googletagmanager.com); no personal data is transmitted by that request beyond what your browser includes in any web request. The specific measurement tags currently configured to fire are listed in section 6.

• Fulfil your order. Ship-to address and email are used to dispatch material and provide tracking.
• Payment settlement. Payment records are retained as required by accounting and anti-fraud obligations.
• Fraud prevention. Server logs and order-correlation help us prevent and investigate fraudulent orders.
• Legal compliance. Where we are obliged by law to retain or disclose information, we do so to the minimum extent required.

• Order records: 7 years (accounting-minimum retention).
• Correspondence records: 2 years from last message, then deleted.
• Server logs: 30 days rolling, then rotated and destroyed.

If you are in the European Economic Area, the United Kingdom, or a jurisdiction with a substantially similar regime, you have the right to:

• access the data we hold about you;
• correct inaccurate data;
• request deletion of data we are not obliged to retain;
• object to processing for marketing (we do not market outbound);
• port your data to another provider.

Send a request to the correspondence desk — identity verification may be required.

• Email: our email is processed through a standard mail transport agent for delivery. Contents are not shared with third parties.
• Payments: crypto payments are verified on public blockchain infrastructure; we do not use a centralised custodial processor for crypto.
• Couriers: ship-to details are shared with the chosen courier solely for dispatch purposes.
• Hosting: Hetzner Cloud (Germany / Finland). See Hetzner’s data-protection documentation for their role as processor.
• Tag Manager: Google Tag Manager (Google Ireland Limited). Loads on every page; the currently configured measurement tags are: none active. This list will be updated whenever a tag is added.

Omega Grade does not currently set any tracking cookies. We use the local-storage mechanism described in section 1 (basket and researcher-gate acknowledgement). Google Tag Manager itself does not set cookies, but tags configured to fire through it may do so in future; if and when that changes, this section will be updated and the affected cookies disclosed.

Material updates to this policy will be reflected in the effective date at the top of this page and announced on the Site for at least 30 days before taking effect.

Privacy-related questions should be directed to the correspondence desk — contact.