What we hold.

What we collect

When a sample is submitted we collect the contact details entered on the submission form, the shipping information required to receive the sample, and the analytical data generated by the run. We also record that the terms were accepted, along with the version accepted and the time of acceptance.

Payment is processed by a third party payment provider. PuriLab Analytical does not receive or store card numbers or wallet credentials.

We do not sell personal information, and we do not share it with third parties except where required to process a payment, ship a sample, or comply with a lawful request, or with service providers that help us operate the business (such as email and customer management tools) under confidentiality obligations. Test results are never shared with those providers.

What is published

Certificates of analysis are published to a public record so that results can be independently verified. Published certificates carry the sample identifier, the analytical results, and the verification code.

Submitter contact details are never published. Where anonymous submission is selected, no name appears on the certificate and the verification code is the only reference to the submission.

How long it is kept

Retention periods run from the date the certificate is issued:

• Certificates and the analytical data behind them: retained indefinitely, so that published results remain verifiable.
• Submitter contact details: retained for two years, then deleted.
• Records of terms acceptance: retained for four years.
• Shipping information: retained for one year.

Your rights

Depending on where you live, you may have the right to request a copy of what we hold about you, to have it corrected, or to have it deleted. California residents may also request that we disclose the categories of personal information collected and the purpose for collecting it. We do not sell personal information, so there is nothing to opt out of on that front.

We will not discriminate against anyone for exercising these rights.

To make a request, write to admin@purilab.org. We respond within forty five days. We may need to confirm you are the person who made the submission before acting on a request.

Requests that would break the verifiability of an already published certificate cannot be honored. A published certificate can be dissociated from your contact details, but the certificate itself remains on the public record.

Security

Access to submission records is limited to lab personnel. If a breach affects personal information we hold, we will notify affected submitters at the address on file, and any authority we are required to notify, without undue delay.

Age

This service is not offered to anyone under eighteen. We do not knowingly collect information from minors, and will delete it on discovery.

Changes to this policy

This policy may be revised. The version in effect at the time a sample is submitted governs that submission.