Privacy Policy

Who we are

Attesta Labs is an independent analytical laboratory. For the purposes of UK data protection law, Attesta Labs is the data controller for the personal information described in this policy. If you have any question about how your data is handled, contact us at lab@attestalabs.com.

Information we collect

We collect only the information we need to operate the laboratory:

• Merchant applications. Company name, contact name, work email, phone number, country, business type and the testing requirements you describe when you apply for an account.
• Enquiries. The name, email address and message content you submit through our contact form.
• Sample and certificate records. Details of the samples submitted under a merchant account and the analytical results issued against them.
• Technical data. Standard server and aggregate analytics data, such as approximate location and pages visited, used to keep the website secure and working.

How we use your information

We use the information above to:

• review merchant account applications and respond to enquiries;
• carry out commissioned analysis and issue certificates of analysis;
• maintain the certificate register so results remain verifiable;
• meet our legal, quality and record-keeping obligations.

Lawful basis

We process personal data where it is necessary to take steps at your request and to perform our services (contract), where we have a legitimate interest in operating and securing the laboratory, and where we are required to retain records to meet a legal obligation.

Sharing your information

We do not sell personal information. We share it only with service providers who help us operate the website and laboratory, and only under terms that require them to protect it. We may disclose information where we are legally required to do so.

Retention

Enquiry data is kept only as long as needed to deal with your request. Merchant account and certificate records are retained for as long as the account is active and for the period required by our quality system and applicable law, so that issued certificates remain verifiable.

Your rights

Subject to legal limits, you may request access to the personal data we hold about you, ask us to correct or delete it, or object to certain processing. To exercise any of these rights, contact us at lab@attestalabs.com. You also have the right to complain to the relevant data protection authority.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised.