Privacy Policy

Last Updated: August 30, 2026

This Privacy Policy explains how Cora Science collects, uses, shares, and protects information submitted through corascience.com and related website forms.

Information We Collect

We collect information you choose to submit through the website, including contact requests, quote requests, Research Digest signups, COA authenticity review requests, job applications, links, and related messages. The job and COA review forms accept fields and links only.

For job applications, this may include your name, email address, phone number, location, work authorization and sponsorship responses, experience information, links, cover letter, and role-specific responses.

For COA review requests, this may include your contact information, source details, message, and website link when provided.

Hosting, security, analytics, and anti-abuse tools may also process technical information such as request metadata, country, browser, device type, operating system, pages visited, referring website, navigation type, and page-performance measurements.

How We Use Information

We use submitted information to respond to inquiries, prepare quotes, provide laboratory services, evaluate COA authenticity requests, review employment applications, send requested research updates, operate the website, protect the site from abuse, maintain records, and improve our services.

We use aggregate analytics to understand traffic sources, page usage, and site performance.

Research Digest

If you join the Cora Research Digest, we use your email address to manage your subscription and send periodic research, laboratory, testing, and clearly dated regulatory updates. Our email delivery provider processes your address and maintains subscription and suppression records. While an enrollment request is being completed or reconciled, the website may retain an encrypted recovery record for up to seven days.

You may unsubscribe using the link in any Digest message. Submitting the signup form does not automatically remove a previous unsubscribe or suppression. If you previously unsubscribed and want to rejoin, use an available email preferences option or contact us for assistance. If you ask us to delete your Digest contact after opting out, we may retain the minimum email-suppression record needed to continue honoring that choice.

Sharing and Service Providers

We share information with service providers that help us operate the website and business, including hosting providers, email delivery providers, analytics providers, payment processors, security and anti-abuse vendors, and software providers used for business operations.

We do not sell personal information submitted through the website.

Cookies, Analytics, and Anti-Abuse Tools

The website uses Cloudflare Web Analytics to measure aggregate visits, page views, referring website hosts, country, device and browser categories, navigation type, and page performance. Cloudflare Web Analytics does not use analytics cookies, and Cloudflare states that it does not collect or use visitors’ personal data. It does not receive form contents, contact details, other submitted values, query strings, or custom form-success events. Browser settings and blockers may limit this measurement.

We also use Google Analytics in a limited regional configuration. For visitors identified by Cloudflare as being in the United States, Google Analytics may load automatically unless the browser sends a Global Privacy Control signal or the visitor has declined analytics. For visitors identified as being in the European Economic Area, United Kingdom, or Switzerland, Google Analytics does not load unless you select the “Allow analytics” button. For visitors in other or unknown locations, Google Analytics remains off. A separate Cloudflare service sends the browser only a coarse regional mode for this decision; the website application does not receive the visitor’s country, and the country is not exposed in page markup.

When enabled, Google Analytics receives the public page path without query strings or fragments, the referring website origin, technical browser and device information, and a pseudonymous browser identifier in first-party analytics cookies. It does not receive form contents, contact details, other submitted values, query strings, or custom form-success events. Advertising storage, ad personalization, and Google Signals are disabled. Its first-party analytics cookies have a fixed expiration of up to 60 days without renewal. A strictly necessary first-party choice cookie remembers an allow or decline selection for up to 180 days. Use the “Analytics choices” control in the page footer to change the selection. Declining disables future Google Analytics requests and removes accessible Google Analytics cookies. Google describes its Analytics data practices in its data safeguards documentation.

The website is also proxied through Cloudflare for network security and performance. Cloudflare bot protection and Turnstile may process request and verification data and may set strictly necessary security cookies, such as __cf_bm, to protect the site from malicious or automated traffic. These security functions are separate from Web Analytics.

Retention

We keep information for as long as reasonably needed for the purpose it was collected, including responding to requests, providing services, recruiting, legal compliance, dispute resolution, business records, and security monitoring.

Your Choices

You may ask us to update, correct, or delete personal information you submitted, subject to legal, security, operational, and recordkeeping requirements. You may unsubscribe from optional email updates by using the unsubscribe instructions in those messages or by contacting us.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information submitted through the website. No internet transmission or storage system can be guaranteed to be completely secure.

Contact

Questions or requests about this policy can be sent to [email protected] or to Cora Science, Austin, Texas. We will acknowledge privacy and Digest subscription requests within 1–3 business days.