Privacy policy
Last updated: 4 November 2026
Who we are
BatchAssay (batchassay.com) is an independent directory of batch-verified supplement lab reports. The operator of BatchAssay is the data controller for the personal data described here. Contact: hello@batchassay.com.
What we collect and why
- Emails you send us (submissions, questions): your message and contact details, used only to reply and to process your submission. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR).
- Request-a-test votes: the product you vote for and your email address, used to prioritise testing and to email you about that product's results — nothing else. Lawful basis: consent (Art. 6(1)(a)). Unsubscribe or ask for deletion any time via hello@batchassay.com.
- Server logs: our hosting provider keeps short-lived technical logs (IP address, browser, pages requested) to run and secure the site. Lawful basis: legitimate interests.
That is all. We run no advertising or analytics cookies and no tracking. If we add a newsletter or analytics later, this policy will be updated first and consent asked where the law requires it.
Lab reports and brand data
The lab reports we verify are public business documents published by brands; they contain no consumer personal data. Brand contact details from submissions are used only to process the submission.
Who processes your data
- Vercel (website hosting and server logs; may process data in the USA).
- Supabase (database for the directory and request-a-test votes, hosted in the EU).
Where a provider processes data outside the UK or EU, transfers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or the UK–US Data Bridge, as applicable.
How long we keep data
- Request-a-test votes: until the product's result is published and you have been notified, or until you ask us to delete your vote.
- Correspondence: up to 2 years, so we can follow up on submissions.
- Server logs: per our hosting provider's short retention period.
Your rights
Under the UK and EU GDPR you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. Email hello@batchassay.com and we reply within one month. You can also complain to your local EU data protection authority, or to the UK Information Commissioner's Office (ico.org.uk).
We don't sell personal data. Our lab-report checks are automated, but we make no automated decisions about people.
Information only, not medical advice.