Privacy Policy

Last updated: 17 September 2026

This policy explains what personal data we collect when you visit medicalstudylab.com or buy our digital products, why we use it and what rights you have, including under applicable US state privacy laws and, for customers in the UK or EU, the UK GDPR and EU GDPR.

1. Who we are

QUILLSTONE DIGITAL LLC (trading as Med Study Lab), 1057 NW 136th Ave, Miami, FL 33182, United States, is the controller of your personal data. Contact: info@medicalstudylab.com.

2. Data we collect

• Order data: name, email address, country and purchase details.
• Payment data: handled directly by Stripe. We never see or store your full card number.
• Browsing data: pages visited, device, approximate location from your IP address and how you interact with the site, collected with cookies and similar technologies.
• Messages: anything you send us by email.

3. How we use it and our legal basis

• To deliver your purchase and provide support (performance of a contract).
• To process payments and refunds and prevent fraud (contract and legitimate interests).
• To meet tax and accounting obligations (legal obligation).
• To measure and improve our website and advertising (consent, where required).
• To send you emails about our products, which you can unsubscribe from at any time (legitimate interests or consent).

4. Who we share it with

We don't sell your data. We only share it with service providers that help us run the business:

• Stripe — payment processing.
• Our checkout provider — order processing and delivery.
• Meta (Facebook/Instagram) — measuring our advertising through the Meta Pixel.
• Microsoft Clarity — anonymous website usage analytics.
• Vercel — website hosting.

Some of these providers are in the United States. For customers outside the US, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or the EU-US Data Privacy Framework and its UK Extension.

5. How long we keep it

Order data is kept for as long as tax and accounting rules require. Browsing and marketing data is kept only as long as needed for those purposes or until you withdraw consent.

6. Security

The site uses encrypted connections (HTTPS). Payments are handled by Stripe, which is PCI DSS certified. Access to personal data is limited to the people and providers who need it to provide the service.

7. Your rights

You can ask to access, correct, delete or port your data, object to processing, or withdraw consent at any time by emailing info@medicalstudylab.com. If you are in the UK or EU, you can also complain to your local data protection authority.

8. Children

If you are under 18, please buy with the involvement of a parent or guardian. We don't knowingly collect data from children without that involvement.

9. Changes

We may update this policy. The date at the top shows the latest version.