Privacy policy

Who is the controller

Orchestrate Technologies Ltd, trading as Batchlabel, registered in England and Wales, company number 16522544, registered office 167-169 Great Portland Street, London W1W 5PF, is the data controller. Contact us at hello@batchlabel.xyz.

What we collect

• Account data: your email address, password hash, business name, and the date you signed up. Lawful basis: performance of our contract with you.
• Product data: the safety data sheets you upload, recipes, pack sizes, batch codes and the labels you generate. Lawful basis: performance of our contract.
• Billing data: your Stripe customer reference, plan, invoices and VAT number if you give one. Card details are handled by Stripe and never reach us. Lawful basis: contract and our legal obligation to keep records.
• Marketing attribution data: the campaign values in the link you arrived on, that is utm_source, utm_medium, utm_campaign, utm_term and utm_content, plus advertising click identifiers gclid, gbraid, wbraid and fbclid, the site that referred you, the first page you landed on, and the time of your first visit. These are stored in your browser and, if you create an account, saved against your account record so we know which advert paid for itself. Lawful basis: our legitimate interest in understanding how our advertising performs, and your consent where cookies or similar technologies are not strictly necessary.
• Analytics and advertising data: how you move through the site, collected through Google Analytics 4 and the Meta Pixel via Google Tag Manager. Lawful basis: your consent. Nothing optional loads until you agree.
• Diagnostic data: when something in the signed-in app fails we record the error name and message, the technical stack and the names of our own components in it, which part of the app reported the fault, the route pattern of the page you were on, a short reference code you can quote to us, whether the message was one the app recognises, a short fingerprint so that repeats of the same fault group together instead of scattering, and the time. The route pattern is the shape of the address, such as /products/:productId. We do not record the address itself or anything in its query string. That report is scrubbed in your browser before it is sent: the free-text parts that could carry a product name, a supplier name or a formulation value are removed or replaced. Where the app recognises the message, the fingerprint is calculated from the scrubbed text we send, so nothing we took out goes into it. Where it does not recognise the message, the message is replaced in full and the fingerprint is calculated from the original instead, because it is then the only thing that tells two unknown faults apart. It is deliberately short, but it is still derived from your text, and short does not mean vague: someone who already holds a short list of likely messages can tell from the fingerprint which message on that list it was. It reduces what we can see. It does not make the report anonymous. Lawful basis: our legitimate interest in finding and fixing faults.
• Support data: the emails you send us and our replies. Lawful basis: legitimate interest in helping you.

Consent and tags

Analytics and marketing tags are held in a default denied state using Google Consent Mode v2 until you choose. You can change your mind at any time using cookie settings. Rejecting optional cookies does not reduce your access to the product.

Who processes data for us

• Supabase, for authentication and the database.
• Stripe, for payments, tax and invoices.
• Sentry, for the diagnostic error reports described above, so we can find and fix faults in the app.
• Google, for Google Tag Manager, Google Analytics 4 and Google Ads measurement, where you have consented.
• Meta, for advertising measurement, where you have consented.
• Our email provider, for account and support email.

Some of these providers are outside the UK. Where data leaves the UK or EEA we rely on the UK International Data Transfer Addendum or the European Commission standard contractual clauses. If you want to see the safeguards we rely on for a particular provider, email hello@batchlabel.xyz and we will send you a copy of the clauses, with commercial terms removed.

Sentry is set to its European region, so the error reports are held in Frankfurt, and the UK treats the EEA as adequate. The company behind Sentry, Functional Software, Inc., is American, and says its staff and suppliers may work with the data from the United States. For that it is certified under the UK Extension to the EU-US Data Privacy Framework, which anyone can check on the public Data Privacy Framework list at dataprivacyframework.gov, with the clauses above as the fallback.

How long we keep things

• Account and product data: while your account is open, then 30 days after you delete it, unless you ask us to remove it sooner.
• Billing records: six years, because tax law requires it.
• Attribution data: 24 months from first visit.
• Analytics data: 14 months in Google Analytics 4.
• Diagnostic data: 30 days, which is the period Sentry applies to the plan we are on. If we move to a larger plan that becomes 90 days for new reports, and reports already collected keep the period they were collected under. We keep no copy of our own.
• Support email: three years.

Your rights

Under the UK GDPR you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop certain processing, object to processing based on legitimate interests, and withdraw consent for analytics and marketing at any time. Email hello@batchlabel.xyz and we will reply within one month. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit and at rest. Access to production data is limited to the people who need it. We do not sell personal data, and we do not share your uploaded safety data sheets with anyone outside the providers listed above.

Children

Batchlabel is for businesses and is not intended for anyone under 16.