1. Scope of This Privacy Policy

This Privacy Policy applies to all individuals who interact with our services, including website visitors, users, customers, vendors, partners, and any other person whose personal information we process in connection with our business operations. It governs the collection, use, storage, disclosure, and protection of personal information obtained through our websites, mobile applications, online platforms, communication channels, and any related services we provide.

This Policy applies to all personal information processed by us, whether collected directly from individuals, automatically through our digital platforms, or received from third parties acting on our behalf. It also applies to all forms of data processing, including electronic records, paper-based records, and any other medium in which personal information is maintained.

This Policy does not apply to information that is non-personal, anonymized, aggregated, or information processed by third parties that are governed by their own privacy practices. Additionally, any links, services, or platforms provided by external parties are subject to their respective policies, and we are not responsible for how those parties handle your information.

2. Information We Collect

2.1 Personal Data

We may collect personal information necessary to provide our services and relationship with clients. This may include names, company details, designations, email addresses, phone numbers, mailing addresses, payment and billing information, and identity verification details when required for compliance or internal validation.

2.2 Sample & Project Information

To perform analytical testing and project execution, we may collect and process sample identifiers and descriptions, product composition or formulation details, batch numbers, dates of manufacture and other traceability or project-specific information necessary to conduct testing, ensure accuracy, maintain records, and uphold quality standards.

2.3 Technical & Website Usage Data

When you access our website, we may automatically collect technical information such as browser type and version, device details, IP address, cookies and usage data, sections visited, and the duration of time spent on different pages. This information helps us improve website performance and user experience.

2.4 Sensitive or Confidential Information

Certain samples, formulations, or project-related details may be proprietary or commercially sensitive. All such information is handled with the highest level of confidentiality and subject to strict internal protocols, access controls, and confidentiality obligations.

3. How We Use Your Information

We process personal, sample-related and technical data strictly for legitimate and clearly defined purposes, including:

• To provide analytical testing and reporting services
• Verifying clients' identities and keeping service records
• To provide CoA (certificate of analysis) or regulatory documentation
• For billing, invoicing, and financial transactions
• For sample traceability and compliance documentation
• To communicate changes, technical notices, or regulatory information
• For internal auditing, quality assurance, and accreditation purposes

All personal data is limited to what is necessary for the fulfillment of these purposes.

4. Legal Basis of the Processing

Depending on applicable requirements, we process data on one or more of the following grounds:

• Performance of the contract or provision of requested services
• Compliance with legal or regulatory obligations (e.g., accreditation, sample traceability)
• Legitimate business interests, including security, quality assurance and operational efficiency
• Consent provided by the data subject, where applicable and required

5. How We Share Information

We do not sell personal information. Information may be shared only on a need-to-know basis with:

• Accrediting bodies - as needed for audits (such as ISO/IEC 17025/NABL audits)
• Regulatory authorities when disclosure is mandatory under applicable requirements
• Subcontracted laboratories but only with the client's approval and under appropriate confidentiality agreements
• Payment processors or financial institutions for purposes of billing
• Verified IT service providers who support our systems and bound by data protection obligations

All sharing is conducted with safeguards to ensure confidentiality and protection of information.

6. Data Security

We implement strong administrative, technical, and physical security measures to protect all information processed by us. These include secure Laboratory Information Management Systems (LIMS), encrypted digital storage, access-controlled testing areas, confidentiality agreements with employees and contractors, and periodic security audits.

While no system can guarantee absolute security, we continually enhance our practices to maintain a high standard of protection.

7. Data Retention

We retain personal and sample-related data for no longer than necessary to:

• Fulfill contractual and service-related obligations
• Meet regulatory, accreditation, and traceability requirements
• Resolve disputes, support audits, or enforce agreements

After the applicable retention period, data is securely deleted, anonymized, or disposed of following approved internal procedures.

8. Your Rights

Depending on applicable local data-protection rules, you may have rights including:

• Requesting access to your personal information
• Seeking correction or updates to your data
• Restricting the processing of certain categories of information
• Requesting data portability where technically feasible
• Withdrawing consent without affecting prior processing
• Objecting to specific types of processing within lawful limits

We will address all legitimate requests in a fair and timely manner.

9. Cookies and Tracking Technologies

Our website may use cookies or similar technologies to enhance user experience, analyze website performance, and support functionality. You may modify your browser settings to control or block cookies; however, some site features may not operate optimally without them.

10. Confidentiality of Client Data & Test Results

We maintain strict confidentiality regarding client information, including identity, sample composition, test results, analytical methods, and project specifications.

Test results and reports are shared only with authorized client representatives or as required under applicable legal obligations.

11. International Data Transfers

If data must be transferred outside your jurisdiction, we ensure appropriate safeguards are in place, including standard contractual protections, approved transfer mechanisms, and secure encrypted channels with restricted access.

12. Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in our practices or operational requirements. Any updates will be published with a revised "Last Updated" date. Continued use of our services indicates acceptance of the updated terms.