Privacy Policy

Last updated: 9 October 2026

This policy explains how Sorrico Analytical Laboratories (“SorricoLabs”, “we”) handles personal data when you visit sorricolabs.com, request a quote, send us samples or verify a Certificate of Analysis (CoA).

1. Who is responsible for your data

2. What data we collect

• Quote requests: name or company, email address, the tests you are interested in, compound names, number of samples and any notes you send.
• Orders and correspondence: contact and shipping details, sample IDs, invoices and the emails we exchange with you.
• Payment information: card and crypto payments are processed by the payment provider. We receive confirmation of payment, not your full card details.
• Certificate verification: the report ID you enter or scan. Verification pages show the analytical record for that report, not your personal contact details.
• Technical data: IP address, browser type and request logs kept by our hosting provider for security and performance.

3. Why we use it and on what legal basis

• To answer quote requests and carry out testing you order (performance of a contract or steps before a contract, Art. 6(1)(b) GDPR).
• To issue invoices and keep accounting records (legal obligation, Art. 6(1)(c) GDPR).
• To keep the website secure, prevent abuse and protect the authenticity of our certificates (legitimate interests, Art. 6(1)(f) GDPR).

We do not sell personal data and do not use it for automated decision-making.

4. Cookies

This website does not use advertising or third-party tracking cookies. Technical cookies may be set to keep the site working and secure, for example for page caching or form spam protection.

5. Who we share data with

Only with service providers who help us run the business, such as our web hosting and email provider, payment processors and shipping carriers, and only as far as needed for their service. They process data on our instructions. Some providers may process data outside the EU; in that case we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

• Quote requests that do not lead to an order: up to 2 years.
• Order, invoice and accounting records: for the period required by Czech law.
• Certificate records: for as long as the certificate needs to remain verifiable.
• Server logs: for a short period set by our hosting provider.

7. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. To use these rights, email info@sorricolabs.com. You can also lodge a complaint with the Czech data protection authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

8. Changes

We may update this policy from time to time. The current version is always published on this page with its date.