Privacy Policy
Effective March 2026
What We Collect
We collect basic usage data (pages visited, browser type) through standard web analytics. We do not collect personal information unless you voluntarily provide it through our contact form.
Contact Form
When you submit our contact form, we collect and store the following information for up to 90 days:
- Your name, email address, and message content
- Any optional fields you complete (organization, company, publication)
- Your IP address (for spam prevention and security)
- A timestamp of your submission
We use Cloudflare Turnstile to verify that submissions come from real visitors. Turnstile may process your IP address and browser metadata in accordance with Cloudflare's Privacy Policy.
How We Use It
Contact form submissions are used solely to respond to your inquiry and are automatically deleted after 90 days. We do not sell or share personal information with third parties for marketing.
Cookies
This website uses only essential cookies required for basic functionality. We do not use tracking or advertising cookies.
Security
We take reasonable measures to protect information collected through this website.
Data Storage & Hosting
This website is hosted on AWS in Canada (ca-central-1). Contact form submissions are stored in AWS DynamoDB with encryption at rest and are automatically deleted after 90 days via TTL. Infrastructure logs are retained for 90 days.
Your Rights
Canadian residents have rights under PIPEDA regarding personal information, including the right to access, correct, or delete data we hold.
Changes
BAO Laboratory Inc. may update this policy at any time. Changes will be posted on this page.
Privacy inquiries? Contact us.