Who we are

Our website address is: https://shop.meridianvalleylab.com. This website is operated by Meridian Valley Lab, located at 6839 Fort Dent Way, Ste 206, Tukwila, WA 98188, CLIA: 50D0630590. Our main website address is: https://meridianvalleylab.com.

What personal data we collect and why we collect it

Store & Checkout Data

We collect information about you during the checkout process on our store. While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed.
• Location, IP address and browser type: we’ll use this for purposes like estimating shipping within the United States.
• Shipping address: we’ll ask you to enter this so we can estimate shipping before you place an order, and send you your lab test kits!

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

When you submit a message through our contact forms (powered by Ninja Forms), we capture the personal data requested in the form, such as your name, email address, and your message. We keep contact form submissions for 1 year for customer service purposes. We do not use the information submitted through these general contact forms for marketing purposes unless you explicitly check a box consenting to join our newsletter.

Cookies

We use cookies to keep track of cart contents while you’re browsing our site. If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Google Fonts

This website utilizes Google Fonts to display text uniformly. When your browser loads these fonts, your IP address and browser user agent are sent to Google’s servers. This is required for the technical delivery of the font files. You can find more information regarding Google’s data handling in the Google Privacy Policy.

Analytics

We use Google Analytics to measure site traffic and evaluate how users interact with our store so we can improve your shopping experience. Google Analytics collects technical data, including your IP address, browser type, operating system, and your browsing behavior on our site (such as pages visited and time spent on the site).

This data is collected in an aggregated and anonymized format. Google Analytics sets cookies on your browser to identify you as a unique user the next time you visit, but the cookie cannot be used by anyone but Google.

For more information on how Google collects and processes your data, please review Google’s Privacy Policy and their guide on How Google uses information from sites or apps that use our services.

How to opt-out: You can opt-out of Google Analytics tracking by using our website’s cookie consent banner to decline non-essential cookies. Alternatively, you can prevent your data from being used by Google Analytics globally by installing the Google Analytics Opt-out Browser Add-on.

Targeted Advertising (Google Ads & Facebook Ads) We use third-party advertising services, including Google Ads and Facebook Ads, to deliver relevant advertising to you on other websites. These platforms use cookies and tracking pixels on our site to collect data about your activities (such as the pages you visit and the products you view or purchase).

• Facebook (Meta): The Facebook Pixel allows us to measure the effectiveness of our ads and serve targeted ads to you on Facebook and Instagram.
• Google Ads: We use Google Ads for conversion tracking and remarketing, which allows Google to show our ads to you across the internet based on your past visits to our site.

You can opt-out of targeted advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page. You can also manage your Facebook ad preferences in your Facebook account settings, and your Google ad preferences via the Google Ad Settings.

We use Google Tag Manager to deploy our tracking scripts efficiently, and Google Search Console to monitor our overall website health, neither of which independently collect or store personal user data.

Who we share your data with

We do not sell your personal data to any third parties. We only share information with third parties who help us process our orders, securely run our store services, and analyze our site traffic so we can improve your experience. For example

• Payments: We accept payments securely through eBizCharge. When processing payments, some of your data will be passed to eBizCharge, including information required to process or support the payment, such as the purchase total and billing information. eBizCharge acts as a secure intermediary, utilizing advanced tokenization to ensure your sensitive credit card data is safely processed. Please see the eBizCharge Privacy Policy for more details.
• Shipment Tracking: We utilize a shipment tracking extension to provide you with real-time delivery updates. To facilitate this, your shipping details (such as your US delivery address and tracking number) may be shared with our designated shipping carriers and external tracking service providers. We use a variation of UPS, USPS, and FedEx to fulfill orders.
• Google for WooCommerce: Certain store and interaction data is synced with Google to support our e-commerce operations, analytics, and advertising.
• Account Management: If you request a password reset, your IP address will be included in the reset email.
• Email Marketing: If you opt-in to receive our newsletter or marketing emails, we share your name and email address with our email service provider, AWeber. AWeber securely stores this data and allows us to manage our email campaigns. You can unsubscribe from these communications at any time by clicking the “unsubscribe” link at the bottom of any email we send. Please review the AWeber Privacy Policy for more details on how they handle your data.

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access order information (like what was purchased, when it was purchased and where it should be sent) and customer information (like your name, email address, and billing and shipping information) to help fulfill orders, process refunds and support you.

How long we retain your data

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for general accounting and legal record-keeping purposes. This includes your name, email address and billing and shipping addresses. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Our operations and physical product shipping are currently focused within the United States. Order and shipping data is transmitted to our payment processors (eBizCharge) and our external shipment tracking providers/carriers. IP addresses may be routed through Google’s servers for the loading of Google Fonts and WooCommerce services.

Contact information

For privacy-specific concerns, or to request an export or deletion of your data, please contact us at:

• Email: info@meridianvalleylab.com
• Phone: +1 855.405.8378

Additional information

How we protect your data

We prioritize the security of your personal data and maintain comprehensive operational and technical safeguards to protect it. Our security measures include:

• Data Encryption: All data transferred between your browser and our website is encrypted using industry-standard SSL/HTTPS technology, ensuring your checkout and personal information remains private.
• Secure Payment Processing: We do not store your full credit card details. All sensitive financial data is tokenized, encrypted, and processed securely through our payment gateway, eBizCharge, which maintains strict PCI-DSS Level 1 compliance.
• Strict Access Controls: Access to customer data is restricted strictly to authorized team members (such as Administrators and Shop Managers) who require it to fulfill orders or provide customer support.
• System Monitoring: We employ active security monitoring, routine malware scanning, and regular software updates to our core platform and plugins to prevent unauthorized access, data loss, or system vulnerabilities.
• Password Security: User account passwords are computationally hashed; we do not store or have access to your actual password in plain text.

What data breach procedures we have in place

While we implement highly secure IT and operational standards to protect your information, no system is entirely immune to risk. In the unlikely event of a data breach, we have a strict incident response protocol in place:

• Containment and Assessment: Upon discovering a potential breach, our technical team will immediately work to secure the network, close the vulnerability, and assess the scope of the compromised data.
• Customer Notification: If we determine that your personal data has been compromised in a way that poses a high risk to your rights and freedoms, we will notify you via the email address associated with your account within 72 hours of confirming the breach.
• Transparency: Our notification will outline what data was affected, the steps we are taking to mitigate the damage, and what actions you can take to protect yourself (such as updating passwords).
• Regulatory Reporting: We will report the breach to the relevant data protection authorities as required by state and federal data privacy laws.

Industry regulatory disclosure requirements

As a direct-to-consumer provider of lab test kits, we may be subject to additional state or federal privacy regulations regarding health-adjacent consumer data. We handle all consumer transaction and interaction data with the strict confidentiality required by standard industry practices.