Effective date: October 25, 2026
This Privacy Policy explains how Bandit Biosystems, Inc. ("Bandit," "we," "us") collects, uses and shares personal information through bandit.bio (the "Site"), and when you contact us, request a quote, place an order or receive support. Our products are sold for research use only to laboratories, companies and institutions, and this Site is intended for those professional users.
Who We Are
Bandit Biosystems, Inc.
Attn: Privacy
2215 Faraday Ave, Suite B
Carlsbad, CA 92008
Email: info@bandit.bio
Phone: 855-792-1225
Information We Collect
Information you give us
- Contact form: your name, email address, organization, phone number (optional), the topic you select and your message.
- Panel designer requests: your name, email address, organization, instrument, sample type, notes, and the panel configuration you build.
- Business dealings: information in emails, quotes, purchase orders, invoices and support requests, such as names, job titles, business addresses, phone numbers, shipping and billing contacts, and order details.
- Events: contact details you share with us at conferences or trade shows.
Information collected automatically
- Technical data: when you visit the Site, our hosting provider, Cloudflare, processes the technical data needed to deliver and protect the Site. This includes your IP address, browser and device type, the pages requested, the referring page, and the date and time of the request.
- Security check: our forms use Cloudflare Turnstile to tell people from automated bots (see "Form Security Check" below).
- Website statistics: we use Cloudflare Web Analytics to see aggregate page views and site performance (see "Cookies and Analytics" below).
- Form metadata: when you submit a form, it also sends the page address and how long the form was open. We use this only to filter spam.
Information from others
- Distributors or business partners may pass us your contact details when you ask them about our products.
How We Use Information
We use personal information to:
- respond to inquiries and prepare quotes;
- process, ship and invoice orders, and provide technical support;
- send product notices, such as lot, shipping, change or discontinuation information;
- send business communications about our products, where permitted (you can opt out at any time);
- operate, secure and improve the Site, and prevent spam and abuse;
- keep business records and comply with legal obligations.
We do not use personal information for automated decisions that have legal or similarly significant effects on you.
How Website Forms Work
When you submit the contact form or a panel designer request, the Site sends its contents to us by email. Quote requests go to orders@bandit.bio, and other messages go to info@bandit.bio. The email is set so that our reply goes to the address you entered. The Site does not store form submissions in a website database and does not send automatic replies. Cloudflare Email Sending delivers these emails and keeps delivery records (such as sender, recipient, subject and delivery status). We keep the messages in our Microsoft 365 business email.
If the form cannot be sent, the page offers to open your own email app with the message filled in. In that case, your email provider sends the message.
Form Security Check
Our forms use Cloudflare Turnstile to protect against spam and automated abuse. Turnstile processes signals such as your IP address, TLS fingerprint and browser User-Agent solely to tell people from bots. It does not read, store or transmit what you type into our forms. Cloudflare processes this data on our behalf, and also as an independent controller to improve Turnstile's bot detection. For details, see Cloudflare's Turnstile Privacy Addendum and Privacy Policy.
Cookies and Analytics
The Site does not use advertising cookies, tracking pixels or social media trackers, and does not set cookies of its own. We use Cloudflare Web Analytics, which does not use cookies or local storage and does not fingerprint visitors. It reports aggregate figures, such as page views and page load performance, rather than tracking individuals. Our fonts are hosted on our own servers, so loading a page does not contact a font service.
Do Not Track and Global Privacy Control
We do not track visitors over time or across other websites, and we do not allow third parties to do so through our Site. Because no such tracking takes place, the Site does not change its behavior when your browser sends a Do Not Track or Global Privacy Control signal. We do not sell personal information or share it for cross-context behavioral advertising.
How We Share Information
We share personal information only as follows:
- Service providers that work for us under contract and only for our purposes: Cloudflare (website hosting, security, analytics and form email delivery); Microsoft (business email and documents); and providers that support our accounting, shipping and customer records.
- Distributors: authorized distributors serving your region, when you ask about buying through them or we refer your inquiry to them.
- Legal and safety: where required by law, legal process or government request, or to protect the rights, safety or property of Bandit, our customers or others.
- Business transfers: in connection with a merger, financing, acquisition, reorganization or sale of assets, subject to standard confidentiality protections.
We do not sell personal information.
International Processing
Bandit is based in the United States, and we process information in the United States. Our service providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for international transfers, such as the contractual protections our service providers offer.
How Long We Keep Information
- Inquiries and form messages: up to 3 years after our last contact, unless they become part of a customer record.
- Customer, order and invoice records: for as long as required for tax, accounting and legal purposes, generally 7 years.
- Cloudflare technical, security and delivery records: for the limited periods set by Cloudflare's own retention practices.
We delete or anonymize information when it is no longer needed.
Security
We use reasonable administrative, technical and physical safeguards, including encrypted (HTTPS) connections to the Site, access-controlled business accounts and a limited set of service providers. No method of transmission or storage is completely secure.
Children
The Site is intended for professional users and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us at info@bandit.bio and we will delete it.
Your Choices and Rights
You may ask us to access, correct or delete the personal information we hold about you, or to stop sending you business communications. Email info@bandit.bio, call 855-792-1225, or write to us at the address above. We may need to confirm your identity before acting on a request.
EEA and UK residents. You also have the right to restrict or object to our processing, to receive your information in a portable format, to withdraw consent where we rely on it, and to lodge a complaint with your local data protection authority. Our legal bases are: performing a contract or taking steps at your request before entering one (quotes, orders, support); our legitimate interests in running and securing our business and the Site, and communicating with business contacts; compliance with legal obligations; and your consent, where we ask for it.
US state residents. Depending on your state, you may have the right to know what personal information we collect and how we use and disclose it; to access, correct or delete it; and to opt out of its sale, targeted advertising or profiling (we do none of these). You may appeal our decision on a request by replying to our response. You may use an authorized agent where the law allows. We will not discriminate against you for exercising these rights.
Links to Other Websites
The Site links to other websites, such as distributors, partners, publications and instrument makers. Their own privacy policies govern those sites, and we are not responsible for their content or practices.
Changes to This Policy
We review this policy when our practices change, and at least once a year. When we update it, we will change the effective date above. If we make a material change, we will post a notice on the Site before it takes effect and, where appropriate, notify customers by email.
Contact Us
Questions or requests: info@bandit.bio, 855-792-1225, or by mail to the address above.