Privacy Policy

1. Scope & Regulatory Framework

Aventris handles personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth) in respect of commercial electronic messages, and applicable telecommunications and consumer-protection laws. This policy applies to all website visitors, account holders, customers, and recipients of our electronic communications.

By accessing the Site, providing personal information, accepting cookies where prompted, or subscribing to our communications, you acknowledge the practices described in this policy. Where consent is required by law — including for direct marketing and for non-essential cookies — we rely on consent obtained through the relevant mechanism and not on this policy alone.

2. Information We Collect

We collect information necessary to operate an online research-materials and analytical supply platform, to maintain security and compliance, and to conduct lawful marketing and advertising. This includes:

• Account information: name, email address, and login credentials (stored in encrypted form).
• Order information: billing name, billing address, order references, and payment confirmations.
• Compliance records: research-use consent confirmations, timestamps, and IP addresses logged at checkout for regulatory purposes.
• Technical data: IP address, device and browser type, operating system, and basic interaction logs.
• Online identifiers & advertising data: cookie identifiers, pixel and tag data, device and advertising identifiers, session identifiers, referral URLs, and click identifiers (such as the Google Click Identifier, "GCLID") associated with advertising campaigns.
• Marketing & engagement data: subscription and consent status, communication preferences, and engagement metrics relating to our emails and advertising (for example, message opens, link clicks, and conversion events).
• Inferred & derived data: audience segments, interests, and behavioural signals generated from your interaction with the Site and our communications, used to build and refine advertising audiences.
• Hashed identifiers: irreversibly hashed forms of certain contact details (such as a hashed email address) used to match audiences across advertising platforms without disclosing the underlying details in plain text.
• Communications: messages or emails sent to our support channels.

Aventris does not collect health data, medical information, biometric data, or other sensitive (special category) personal information, and does not knowingly collect information from individuals under 18.

3. How We Use Information

Personal information is used for legitimate operational, security, compliance, and marketing purposes, including to:

• create and administer customer accounts;
• process, verify, and fulfil research-supply orders;
• provide transactional communications and order updates;
• maintain compliance records as required by our operating standards and applicable regulation;
• maintain platform security, integrity, and fraud prevention;
• meet accounting, taxation, and regulatory obligations;
• conduct online advertising, including search, display, shopping, and remarketing campaigns, and measure their performance and conversions;
• build, refine, and target advertising audiences, including through profiling and the matching of hashed identifiers on third-party advertising platforms;
• personalise and optimise marketing and advertising shown to you or to comparable audiences; and
• conduct direct marketing by email and other electronic channels where permitted by law.

Aventris does not sell personal information for monetary consideration. We do, however, share and process certain data with advertising, analytics, and marketing providers as described in Sections 6, 7, and 10 in order to deliver and optimise our campaigns. Where we rely on profiling for advertising, that profiling is used to determine the relevance and placement of marketing and does not produce legal or similarly significant effects concerning you.

4. Payments & Financial Data

Payments are processed securely through Stripe, a PCI-DSS compliant payment processor. Aventris does not store, process, or have access to full card numbers or sensitive payment credentials. We receive only payment confirmation and transaction reference details required to reconcile orders.

Stripe operates under its own privacy policy and security obligations, independently of Aventris.

5. Cookies, Tracking & Advertising Technologies

Aventris uses cookies, pixels, tags, software development kits, local storage, and similar technologies (together, "tracking technologies") for several purposes. We group these as follows:

• Strictly necessary: required for core functionality such as account authentication and shopping-cart persistence. These cannot be disabled through our consent controls.
• Analytics & performance: used to understand traffic, measure site and campaign performance, and improve the platform.
• Advertising & targeting: used to deliver, measure, and optimise advertising, to enable remarketing, and to build and match advertising audiences across third-party platforms.

Strictly necessary technologies operate on the basis of legitimate operation of the Site. Analytics and advertising technologies are deployed on the basis of consent where consent is required, obtained through our cookie or consent banner, and may otherwise operate where permitted by law. You can manage non-essential tracking technologies at any time through the consent controls on the Site and through your browser and device settings, and through the platform-level opt-outs described in Section 6. Disabling certain technologies may affect Site functionality and the relevance of advertising you receive.

6. Advertising, Analytics & Profiling

To operate and optimise our marketing, Aventris uses third-party advertising and analytics platforms, including Google products and services. Depending on your interactions and consent settings, these may include:

• Google Ads — search, display, shopping, and video advertising, conversion tracking, and enhanced conversions;
• Remarketing & audience targeting — showing advertising to you, and to comparable ("similar") audiences, based on prior interaction with the Site and our communications;
• Customer Match — matching of irreversibly hashed contact identifiers to identify and reach corresponding or comparable audiences on Google platforms;
• Google Analytics — including advertising and audience features where enabled, to measure traffic, behaviour, and conversions; and
• Google Merchant Center — to list and present products in shopping and related advertising surfaces.

Through these services, Aventris and its providers may collect online identifiers and behavioural data, generate audience segments, and use profiling to determine the relevance and placement of advertising. Where a provider acts as an independent controller of data it collects, that provider's own privacy terms apply in addition to this policy. Google's handling of data is governed by Google's privacy policy and its terms describing how Google uses data from sites and apps that use its services.

Your advertising choices

You can limit or opt out of personalised advertising and profiling through, among others:

• your Google account ad and activity settings;
• the consent and cookie controls on the Site;
• your browser and device privacy settings, including "do not track" and cookie controls; and
• industry opt-out tools for interest-based advertising.

7. Direct Marketing & Email Communications

Aventris conducts direct marketing — including newsletters, product updates, and promotional offers — by email and other electronic channels, using one or more third-party email marketing and communications platforms. To deliver these communications, relevant personal information (such as your name, email address, subscription status, and engagement metrics) is shared with and processed by these providers on our behalf.

We send commercial electronic messages in accordance with the Spam Act 2003 (Cth). This means we send such messages only where we have your consent (express or, where applicable, consent that may reasonably be inferred from an existing relationship), we clearly identify Aventris as the sender, and we include a functional unsubscribe facility in every commercial message. You may withdraw consent and unsubscribe at any time using the unsubscribe link in any message or by contacting us; we will action unsubscribe requests within the period required by law.

Our email communications may contain tracking technologies (such as pixels and tagged links) that allow us and our providers to measure delivery, opens, clicks, and resulting conversions, and to refine future communications and advertising audiences. Transactional and service messages relating to your account, orders, security, or legal obligations are not marketing and may be sent regardless of your marketing preferences.

8. Data Retention

• Order and financial records are retained for 5–7 years as required by law.
• Compliance consent records are retained for the duration required by applicable regulatory obligations.
• Marketing consent and unsubscribe records are retained for as long as necessary to evidence compliance with the Spam Act 2003 (Cth) and the Australian Privacy Principles.
• Advertising, analytics, and engagement data are retained for limited periods consistent with the retention settings of the relevant platforms and our measurement needs.
• User accounts may be deleted upon verified request, subject to legal retention obligations.
• Security and access logs are retained for limited periods for audit and protection purposes.

9. Data Security

Aventris implements reasonable technical and organisational safeguards to protect personal information against loss, misuse, unauthorised access, or disclosure. Where personal information is processed by third-party providers, we take reasonable steps to ensure those providers maintain appropriate security and confidentiality obligations.

In the event of a data security incident, Aventris will comply with applicable notification obligations under Australian law, including the Notifiable Data Breaches scheme where it applies.

10. Disclosure to Third Parties

Information may be disclosed only where strictly necessary or as described in this policy, including to:

• Stripe — for payment processing and fraud prevention;
• Australia Post and courier partners — for order fulfilment and delivery;
• Google — for advertising, analytics, audience matching, and product listing as described in Section 6;
• Third-party email marketing and communications providers — for direct marketing as described in Section 7;
• Professional advisers, auditors, or regulators — where legally required; and
• IT and security service providers — for infrastructure protection.

We do not otherwise disclose or share personal information, and we do not sell personal information for monetary consideration. Disclosures to advertising, analytics, and marketing providers are limited to what is necessary to deliver and optimise the relevant service.

11. International Data Transfers

Some of our providers — including Google, our email marketing and communications providers, and certain infrastructure and backup services — store or process personal information on servers located outside Australia, including in the United States and other jurisdictions.

Where we disclose personal information to overseas recipients, we take reasonable steps in the circumstances to ensure protections consistent with the Australian Privacy Principles, including APP 8 governing cross-border disclosure. By providing your information, subscribing to our communications, or consenting to advertising and analytics technologies, you acknowledge that your information may be disclosed to and stored by recipients located outside Australia, and that the handling of that information will also be subject to the laws and the privacy practices of those jurisdictions and recipients.

12. Your Rights & Choices

Subject to applicable law, you may request or exercise:

• access to personal information held about you;
• correction of inaccurate or outdated information;
• deletion of personal data where legally permissible;
• restriction of certain processing activities;
• withdrawal of consent to non-essential cookies and tracking technologies at any time;
• opt-out from direct marketing at any time, including via the unsubscribe link in any message; and
• opt-out from personalised advertising and profiling through the platform and browser controls described in Section 6.

Requests may require identity verification to protect account security. If you are not satisfied with how we handle a privacy matter, you may lodge a complaint with us using the contact details below, and you may also contact the Office of the Australian Information Commissioner (OAIC).

13. Policy Updates

This Privacy Policy may be updated from time to time to reflect operational, legal, or regulatory changes, including changes to our advertising, analytics, and marketing practices. The current version will always be available on this page with the updated revision date. Material changes affecting how we use your information for advertising or marketing will be communicated where required by law.

14. Contact

For privacy-related enquiries, contact:

• Email: [email protected]
• Website: aventrislabs.com
• Business Entity: ELEVEN VECTOR PTY LTD
• ABN: 76 693 725 450