Privacy policy

Last updated 3 November 2026

Veriflabs (veriflabs.com) provides product authentication for research and laboratory-grade products. When you scan a tag, we confirm whether the product is genuine and, if you ask, give you the product's Certificate of Analysis (COA). This policy explains what we collect, why, and your rights.

Who we are

Veriflabs runs this website and the scanning service. Each product's manufacturer or seller (the "brand") uses Veriflabs to issue its tags. For your scan and contact details, Veriflabs and the brand whose product you scanned each act as controllers of your data. Contact us at privacy@veriflabs.com.

What we collect when you scan a tag

Each scan automatically records:

• the tag code, product and batch scanned, and the date and time;
• your IP address and the approximate location it suggests (country, region, city, rough coordinates);
• your device and browser type, language, time zone and screen size;
• the web address you came from (if any) and the domain the tag link used.

We do not use this data to identify you by name unless you choose to give us your contact details.

What we collect when you request a COA

To release a Certificate of Analysis we ask for your full name, email address, phone number and the product you bought.

Why we use it

• Detecting counterfeits — spotting tags scanned in unusual places or too many times (our legitimate interest and the brand's).
• Providing the service — showing the verification result and releasing the COA you asked for.
• Product safety and support — letting the brand contact you about the product or batch, for example about a recall.
• Usage statistics — giving brands reports on how and where their tags are scanned.

We do not sell your data. We don't send you marketing unless you have separately agreed to it, apart from advertising cookies you allow as described below.

Who we share it with

• The brand whose product you scanned, which can see that product's scans and COA requests.
• Our hosting and database providers, who process data on our behalf under contract.
• Authorities, where the law requires it.

Cookies and advertising

Some brands add advertising tags to their scan pages — the Meta Pixel (Facebook/Instagram) and/or the Google tag. When active, these set cookies and send Meta or Google the page you visited, the product and batch you viewed, your IP address and browser details, and whether you completed the COA form. The brand uses this to show you its adverts on other websites and apps and to measure them. Meta and Google act as independent controllers under their own privacy policies.

• UK, EU/EEA and Switzerland: these tags only load if you click "Accept" on the cookie banner. If you reject or ignore it, nothing is sent.
• Elsewhere: the tags load by default; you can turn them off at any time.
• Changing your mind: use the "Cookie settings" link at the bottom of the scan page. Choosing Reject stops the tags straight away. We keep a record in your browser of your choice, when you made it, and the notice you were shown.

Your name, email and phone from the COA form are never sent to advertising platforms. Product verification works whatever you choose. Brand administrators who sign in get essential cookies to keep them logged in.

How long we keep it

Scan records and COA requests are kept for as long as the brand keeps its batch on Veriflabs, and for no more than 3 years after the batch's expiry date. Then they are deleted or anonymised.

Your rights

Under UK and EU data protection law you can ask to see, correct or delete your data, object to how we use it, or limit it, and ask for a copy to take elsewhere. Email privacy@veriflabs.com. If you're unhappy you can complain to the Information Commissioner's Office (ico.org.uk) or your local regulator.

International transfers

Our providers may process data outside the UK. Where they do, we rely on approved safeguards such as standard contractual clauses.

Changes

We may update this policy. The date at the top shows when it last changed.