Privacy Policy

Andus Labs, Inc. (“Andus Labs,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website (the “Site”) or engage with our services.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you voluntarily provide when you interact with our Site, including:

• Contact Information: Name, email address, and any other information you submit through contact forms, inquiry forms, or resource download forms on our Site. This information is collected and stored in our customer relationship management system for the purpose of responding to your inquiry and following up with you about our services.
• Communications: Any information you include in correspondence with us, including emails and form submissions.

1.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information through cookies and similar technologies:

• Device and Browser Information: IP address, browser type, operating system, device identifiers, and referring URLs.
• Usage Data: Pages visited, time spent on pages, click patterns, and other engagement metrics.
• Location Data: General geographic location inferred from your IP address.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide requested information about our services.
• To store your contact information and follow up with you regarding your inquiry or interest in our services.
• To send you marketing communications (where you have consented or where permitted by law).
• To analyze Site usage and improve our Site and services.
• To maintain the security of our Site and protect against fraud.
• To comply with legal obligations and enforce our rights.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our Site.

3.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Site to function properly.
• Analytics Cookies: Help us understand how visitors interact with our Site (via Google Analytics).

3.2 Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site. For more information about how Google Analytics uses your data:

• Google Analytics: https://policies.google.com/privacy

4. Third-Party Services

We use the following third-party services that may collect or process information about you:

• Google Analytics: For website analytics and performance monitoring.
• HubSpot: To collect and store information you submit through forms on our Site, and to manage follow-up communications with you regarding your inquiries.

These third parties have their own privacy policies governing their use of your information. For more information about HubSpot’s privacy practices, visit: https://legal.hubspot.com/privacy-policy

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With vendors who assist us in operating our Site and providing services (subject to confidentiality obligations).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Protection of Rights: To protect our rights, property, or safety, or that of others.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. When we transfer your information internationally, we implement appropriate safeguards, including standard contractual clauses approved by the European Commission and the UK International Data Transfer Agreement where applicable.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The criteria we use to determine retention periods include the nature of the data, the purposes for processing, and applicable legal requirements. When your information is no longer needed, we securely delete or anonymize it.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights Under GDPR (EEA, UK, and Swiss Residents)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

• Right of Access: Request access to your personal data and obtain a copy.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: Request restriction of processing under certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

9.1 Legal Basis for Processing

We process your personal data based on: (a) your consent; (b) performance of a contract; (c) compliance with legal obligations; and/or (d) our legitimate interests (such as improving our services and communicating with you about our offerings).

9.2 Exercising Your Rights

To exercise these rights, contact us at privacy@anduslabs.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority:

• EU Residents: Your local EU Data Protection Authority
• UK Residents: The Information Commissioner’s Office (ICO) at https://ico.org.uk

9.3 EU and UK Representative

If you are located in the European Economic Area or United Kingdom and believe we are required to appoint a local representative under Article 27 of the GDPR or UK GDPR, please contact us at privacy@anduslabs.com.

10. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

10.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which the information was collected, the purposes for collecting the information, and the third parties with whom we share the information.

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Correct

You have the right to request correction of inaccurate personal information.

10.4 Right to Opt-Out of Sale or Sharing

We do not sell your personal information as defined under the CCPA. We do not share your personal information for cross-context behavioral advertising.

10.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights.

10.6 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information: Identifiers (name, email address, IP address); Internet or other electronic network activity information (browsing history, interaction with our Site); and Geolocation data (general location inferred from IP address).

10.7 Exercising Your California Rights

To exercise your CCPA/CPRA rights, submit a verifiable consumer request by contacting us at privacy@anduslabs.com. We will verify your identity before processing your request.

11. Your Rights Under Other US State Privacy Laws

If you are a resident of Virginia, Colorado, Connecticut, or other states with comprehensive privacy laws, you may have similar rights to those described for California residents, including rights to access, correct, delete, and obtain a portable copy of your personal data. We do not sell personal data or engage in targeted advertising. To exercise these rights, contact us at privacy@anduslabs.com.

12. Children’s Privacy

Our Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. Your continued use of the Site after any changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Andus Labs, Inc.
Email: legal@anduslabs.com
Address: 29 Little West 12th Street
New York, NY 10014

Last Updated: April 27, 2026