Privacy Policy

1. Who we are

Maximus Bio (MaximusBio Ltd) is the controller of the personal information described here. For any question about this policy or your information, write to contact@maximus.bio.

2. What we collect

Only what you choose to send us, plus the minimum needed to keep the forms working:

• If you registered interest through one of the sign-up forms this site had until 29 October 2026 (on the home page, the bar at the foot of the page, the early-access page or a product page): your email address, which form you used (and the product, on a product page), whether you asked about the affiliate programme, and the date and time.
• When you email us or use the contact page (which opens your own email app): your name, email address and whatever your message contains.
• To stop automated abuse of the sign-up form: a one-way hash of your IP address, kept for at most 10 minutes. Your IP address itself is never stored.

Payment and delivery details are never entered on this site. Orders are completed on our secure checkout hosted by Shopify, which processes those details for us (see “Who processes it for us”). Your basket — products, sizes and quantities only — stays in your browser until you continue to that checkout.

3. Why we use it and our lawful basis

• Registering interest: to email you when ordering (or the affiliate programme) opens. Our lawful basis is your consent (UK GDPR Article 6(1)(a)). You can withdraw it at any time — see “Your rights” below.
• Your enquiries: to reply to you. Our lawful basis is our legitimate interest in answering the people who contact us (Article 6(1)(f)).
• Abuse prevention: to keep the sign-up form usable and secure. Our lawful basis is our legitimate interest in protecting the site (Article 6(1)(f)).

We do not sell your information, use it for advertising, or make automated decisions about you. Giving us your email address is optional; without it we simply cannot tell you when ordering opens.

4. Who processes it for us

• Cloudflare, Inc. hosts this website and runs the sign-up form; sign-ups are stored in Cloudflare’s storage service on our behalf. Cloudflare may process data outside the UK, protected by the safeguards in its data processing terms (such as the UK International Data Transfer Addendum).
• Proton AG, our email provider (in Switzerland, which UK law recognises as giving adequate protection), for messages you send to contact@maximus.bio and the emails we send you.
• Shopify, which hosts our secure checkout: when you continue to checkout it receives the products, sizes and quantities in your basket and your two confirmations (18 or over, research use only), and then processes the name, delivery address, contact and payment details you enter there on our behalf. Payment card details are handled by the payment provider and are never seen by us or stored on this site. Shopify may process data outside the UK and EU under its standard data protection safeguards.
• Google Fonts and jsDelivr deliver the site’s fonts and one script file. Like any server, they receive your IP address and browser details when your browser requests those files; we receive nothing from them.

We do not share your information with anyone else unless the law requires us to.

5. How long we keep it

• Sign-ups: until you ask us to remove it or withdraw your consent, and in any case no longer than 12 months after ordering opens.
• Enquiries: for as long as we need to deal with your enquiry, and no longer than 12 months after our last reply.
• The hashed IP address used against abuse: at most 10 minutes.

6. Cookies and storage on your device

This site sets no cookies of its own and uses no analytics, advertising or tracking tools. (Cloudflare may set a strictly necessary security cookie to protect the site from automated attacks.) It keeps a few small notes in your browser’s own storage, which never leave your device:

• Your basket: the product, size and quantity of each item you add, so it is still there when you come back on this device. It holds no prices and nothing about you; prices are always read fresh from the site.
• That this device has entered the early-access code.
• For the current visit only: that the site’s opening animation has already played (so it does not replay on every page).

These notes are strictly necessary for the site and the features you use, so they do not need your consent and there is no cookie banner. You can clear them at any time in your browser settings (clearing the basket simply empties it).

7. Your rights

Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, restrict or object to how it is used, and receive it in a portable format. Where we rely on your consent you can withdraw it at any time; this does not affect anything done before you withdrew it.

To use any of these rights, including to be removed from the sign-up list, write to contact@maximus.bio from the address concerned. We will reply within one month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to put things right first.

8. Changes to this policy

If this policy changes, this page and the date below will be updated. If a change affects how we use information you have already given us, we will tell you by email before it applies.