Privacy Policy

Last Updated: January 04, 2026

Welcome to Neb.co (“the Site”), operated by New England Biologics (“New England Biologics,” “we,” “us,” or “our”), is committed to protecting the privacy of our website visitors and customers. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information when you visit our Site, purchase research-only peptide products, or engage with our services. By accessing or using the Site, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site. This Privacy Policy complies with applicable privacy laws, including but not limited to the Law on Personal Data Protection of the Republic of Georgia, the General Data Protection Regulation (GDPR) where applicable for EU residents, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), the Virginia Consumer Data Protection Act (VCDPA), and other state, federal, and international regulations where applicable.

  1. Information We Collect

We collect the following categories of personal information, as defined by applicable privacy laws, when you interact with our Site:

Personal Identifiers: Name, email address, phone number, billing address, shipping address, and account username (if you create an account). Financial Information: Payment details (e.g., credit card numbers or other payment method information) processed through our secure payment gateway. Commercial Information: Purchase history, products viewed, and details of transactions. Internet or Network Activity: IP address, browser type, device information, pages visited, time spent on the Site, and referring URLs (e.g., through cookies or analytics tools). Geolocation Data: General location based on IP address or provided shipping/billing address (we do not collect precise geolocation data). Professional or Employment-Related Information: If you contact us for research or business purposes, we may collect your job title, institution, or professional contact details.

We do not knowingly collect personal information from children under 18 years of age. If you believe we have collected such information, please contact us immediately at [email protected].

  1. How We Collect Information

We collect personal information in the following ways:

Directly from You: When you submit information through contact forms, account registration, or checkout processes. Automatically: Through cookies, web beacons, and analytics tools (e.g., Google Analytics) that track your interactions with the Site. For more details, see our Cookie Policy [link to Cookie Policy, if applicable]. From Third Parties: From payment processors, shipping carriers, or analytics providers, as necessary to fulfill your orders or improve our services.

  1. How We Use Your Information

We use your personal information for the following purposes:

To Provide Services: Process orders, deliver products, and provide customer support. To Improve the Site: Analyze user behavior to enhance website functionality and user experience. To Communicate: Send order confirmations, respond to inquiries, and, with your consent, provide promotional materials or updates about our products. To Comply with Legal Obligations: Ensure compliance with applicable laws, including tax reporting, fraud prevention, and regulatory requirements. To Protect Our Interests: Prevent fraudulent activities, enforce our Terms and Conditions, and protect the security of the Site.

We will not use your personal information for purposes other than those disclosed unless required by law or with your explicit consent.

  1. How We Share Your Information

We may share your personal information with:

Service Providers: Third-party vendors who assist with payment processing (e.g., Stripe, PayPal), shipping (e.g., USPS, FedEx), or analytics (e.g., Google Analytics). These providers are contractually obligated to protect your data and use it only for the services they provide to us. Legal Authorities: When required by law, such as in response to a subpoena, court order, or regulatory investigation. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, with notice to you as required by law.

We do not sell your personal information to third parties for marketing purposes. Under the CCPA/CPRA, “selling” personal information includes sharing it for monetary or other valuable consideration. We do not engage in such practices.

  1. Your Rights Under Applicable Privacy Laws

Depending on your jurisdiction (e.g., Republic of Georgia, EU, or U.S. state of residence), you may have the following rights regarding your personal information:

Right to Know: Request details about the categories of personal information we collect, the purposes for collection, and the third parties with whom we share it. Right to Access: Request a copy of the personal information we hold about you. Right to Delete: Request the deletion of your personal information, subject to certain exceptions (e.g., legal obligations to retain data). Right to Opt-Out of Sale: Request to opt-out of the sale of your personal information (not applicable, as we do not sell personal information). Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights, such as by denying services or charging different prices. Right to Correct: Request correction of inaccurate personal information. Right to Limit Use of Sensitive Personal Information: Restrict the use of sensitive personal information (e.g., financial data) to what is necessary for providing services. Right to Withdraw Consent: For processing based on consent, withdraw consent at any time. Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format.

To exercise these rights, please contact us at [email protected] or submit a request through our Site. We will verify your identity before processing your request, which may require providing additional information (e.g., email or account details). We will respond within the timeframes required by law (e.g., 45 days under CCPA/CPRA, 1 month under GDPR or Georgian law, with possible extensions).

  1. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, or resolve disputes. For example:

Order information is retained for 7 years to comply with tax and regulatory requirements. Account information is retained until you request deletion or your account becomes inactive for 2 years. Analytics data is anonymized and retained indefinitely for statistical purposes.

When personal information is no longer needed, we securely delete or anonymize it.

  1. Data Security

We use industry-standard security measures, including SSL encryption, to protect your personal information during transmission and storage. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

  1. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze Site usage, and deliver targeted content. You can manage your cookie preferences through your browser.

  1. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these sites. We encourage you to review the privacy policies of any third-party sites you visit.

  1. International Data Transfers

New England Biologics is operated under the jurisdiction of the Republic of Georgia, and your personal information may be processed or stored outside your country of residence. We ensure that any international data transfers comply with applicable privacy laws, including the use of appropriate safeguards (e.g., standard contractual clauses under GDPR or equivalent measures under Georgian law) where required.

  1. Children’s Privacy

Our Site is not intended for anyone under 18 years of age. If we learn that we have collected such information, we will promptly delete it. Please contact us at [email protected] if you believe we have inadvertently collected information on anyone under 18 years of age.

  1. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on the Site with a revised “Last Updated” date or, if required by law, through direct communication (e.g., email). Your continued use of the Site after such changes constitutes acceptance of the updated policy.

  1. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

New England Biologics Email: [email protected] For legal or privacy-related complaints, contact our legal team at [email protected]. We will investigate and respond promptly in accordance with applicable laws.

  1. Additional Information for California Residents

Under the CCPA/CPRA, California residents have specific rights, as outlined in Section 5. Additionally:

Categories of Personal Information Collected: See Section 1 for details. Categories of Third Parties: We share personal information with service providers (e.g., payment processors, shipping carriers, analytics providers) but do not sell it. Do Not Track Signals: We do not currently respond to “Do Not Track” signals, as there is no universal standard for such signals. Shine the Light Law: Under California’s Shine the Light law, you may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information for such purposes.

  1. Additional Information for Other U.S. State Residents

Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws may have similar rights to those under the CCPA/CPRA, including the right to access, delete, or correct personal information. Please contact us to exercise these rights, and we will comply with the specific requirements of your state’s laws.

  1. Additional Information for EU and Georgian Residents

Under the GDPR and the Law on Personal Data Protection of the Republic of Georgia, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection to processing. We process data based on legitimate interests, contract performance, consent, or legal obligations. For complaints, EU residents may contact their local data protection authority; Georgian residents may contact the Personal Data Protection Service of Georgia.

  1. Governing Law

This Privacy Policy is governed by the laws of the Republic of Georgia, without regard to conflict of law principles. Any disputes arising from this Privacy Policy shall be resolved exclusively in the courts located in Tbilisi, Republic of Georgia. You agree to submit to the personal jurisdiction of these courts.