Data Protection & Cookie Policy

Short summary, what you need to know

We collect minimal personal data to operate the site (contact forms, anonymous analytics, optional newsletter signup). We use cookies to remember preferences and measure site use. You control non-essential cookies via our consent tool and you have rights to access, correct, delete, and export your data. Read the sections below for full detail.

What personal data we collect

We collect only what we need. Examples:

• Contact form submissions: name, email, message, optional attachments (label photos). Used to reply and investigate corrections.
• Account / subscription data: email and newsletter preferences (when you sign up).
• User-submitted reports: product names, batch codes, photos; personal identifiers are removed unless you consent to publication.
• Technical logs: anonymized IP, browser and device details, timestamps for security and analytics.
• Cookies & local storage: identifiers used for session, preferences, and optional analytics consent states.

We do not collect payment or billing data because we do not sell products.

Cookies & tracking, types and purposes

Cookies are small files stored on your device. We use the categories below. Non-essential cookies are only set after you give explicit consent.

You can manage cookie preferences via the cookie banner (appears on first visit). Essential cookies cannot be turned off without degrading site function.

Consent & revocation

When you first visit we show a consent banner giving choices: Accept all, Reject non-essential, or Manage settings. You may change your choices at any time via the "Cookie settings" link in the site footer. Consent is recorded and stored (only to remember your choice).

Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA), we rely on the following legal bases for processing:

• Consent: for non-essential cookies and optional analytics or marketing communications.
• Contractual / performance: to the extent needed to respond to your requests or provide a service you requested (e.g., reproducibility pack delivery).
• Legitimate interests: for security, fraud detection, research integrity, and site operation, balanced against your privacy rights.

We document legitimate interest assessments and retain them internally to ensure proportionality.

California Consumer Privacy Act (CCPA), consumer rights

If you are a California resident, you have additional rights under the CCPA, including the right to:

• Request disclosure of categories of personal information collected and the purposes.
• Request deletion of personal information (subject to exceptions).
• Opt-out of sale of personal information (we do not sell personal data).
• Non-discrimination for exercising CCPA rights.

To exercise these rights please use the contact methods in the Contact & Data Requests section below.

How we use your data

Primary uses:

• Responding to contact form messages and corrections.
• Operating and securing the website (technical logs, anti-abuse).
• Improving content through anonymized analytics.
• Delivering newsletters if you sign up (with consent).

We never sell personal data to third parties. We share data with processors only as needed for the purpose described below and under contract.

Third-party processors & data sharing

We use trusted third-party processors (e.g., hosting, analytics, email provider). Each processor is contractually required to implement appropriate security measures and to process data only on our instructions.

Where processors transfer data internationally, we rely on adequacy decisions, standard contractual clauses, or equivalent safeguards.

Retention of personal data

We retain personal data only as long as needed for the purpose collected and to meet legal obligations:

• Contact form submissions: retained for up to 3 years unless a deletion request is made earlier.
• Newsletter subscriptions: until you unsubscribe or request deletion.
• Server logs and analytics: anonymised logs retained for up to 24 months for analytics; security logs for up to 12 months.
• Product safety reports: retained as long as necessary for investigation and regulatory reporting; personal identifiers are removed from public summaries.

Security measures

We protect personal data using industry-standard measures: HTTPS, access controls, encryption for backups, and regular security patching. Access to personal data is limited to staff with a need to know, and third-party processors are contractually bound to protect the data.

No system is perfectly secure. If we detect a data breach we will assess risk and notify affected individuals and supervisory authorities in accordance with applicable law.

Children

Our service is not intended for children under the age required by applicable child-data protection laws. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, contact us and we will delete it as required by law.

Your privacy rights, how to exercise them

Depending on where you live, you may have rights such as:

• Access: request a copy of personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request deletion (subject to legal exceptions).
• Portability: receive your data in a commonly used format.
• Restriction & objection: ask us to limit or stop certain processing.

Contact & Data Requests

To exercise any rights, please contact our Privacy Team:

If you are dissatisfied with our response, you may lodge a complaint with a competent supervisory authority (if in the EU) or with the California Attorney General (if in California) as applicable.

Policy changes and how we'll notify you

We update this policy when practices change. Significant changes will be posted on this page with an updated "Last reviewed" date and a brief summary of material changes. Where required by law, we will obtain fresh consent for new processing activities.

Legal note

This policy explains our practices but does not constitute legal advice. If you need legal advice about privacy law, please consult a qualified lawyer.