Privacy Policy
We are committed to protecting the privacy and security of your personal data. This policy explains how LevelSixLabs Ltd collects, uses, and safeguards information when you use LevelSixLabs.
Who we are
LevelSixLabs is a product of LevelSixLabs Ltd, a company registered in England and Wales, United Kingdom (company number 17377648). We are the data controller for personal data processed through LevelSixLabs.
LevelSixLabs Ltd is registered with the UK Information Commissioner's Office under registration reference ZC213132.
Contact: privacy@levelsixlabs.com
Data we collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, organisation name | You, at signup |
| Usage data | Pages visited, features used, timestamps | Automatically |
| Chemical inventory | Chemical names, quantities, locations | You, during use |
| Equipment records | Asset names, service dates, fault reports | You, during use |
| Booking records | Bookings, times, associated users | You, during use |
| Visitor log | Visitor name, organisation, purpose (if used) | You, during use |
| Uploaded files | SDS PDFs, service certificates, documents | You, during use |
Legal basis for processing
Under UK GDPR, we process your data on the following legal bases:
- Contract performance — to provide the LevelSixLabs service you have subscribed to.
- Legitimate interests — to improve the service, ensure security, and prevent fraud.
- Consent — for non-essential cookies and analytics (where collected).
- Legal obligation — where we are required to retain data by law.
How we use your data
- Provide and maintain the LevelSixLabs platform
- Authenticate users and enforce access controls
- Send transactional emails (account invites, password reset)
- Process subscription payments via Stripe
- Investigate security incidents and abuse
- Improve product features and user experience
- Comply with legal and regulatory obligations
Data sharing and subprocessors
We do not sell your data. We share data only with trusted subprocessors necessary to operate the service. A full list is available on our Subprocessor List page.
All subprocessors are contractually required to protect your data and process it only on our instructions.
Data retention
We retain personal data for as long as your account is active or as needed to provide services. Specifically:
| Data type | Retention period |
|---|---|
| Account and profile data | For the life of the subscription; deleted or returned within 30 days of a deletion request or of termination |
| Chemical/equipment records | Duration of subscription |
| Audit logs | Kept for the life of the organisation unless you set your own retention period in Settings, which cannot be shorter than 12 months |
| Billing records | 6 years, as UK tax and accounting rules require |
| Uploaded files | Deleted within 30 days of account closure |
Your rights
Under UK GDPR, you have the following rights:
- Access — request a copy of the data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your data, subject to legal retention requirements.
- Restriction — request we limit processing of your data.
- Portability — request your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, submit a request via our Privacy Request form or email privacy@levelsixlabs.com.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, and audit logging.
See our Security Overview for more detail.
AI features
LevelSixLabs includes optional AI-powered label scanning using the Anthropic Claude API. When you use this feature, the image you upload is sent to Anthropic's API for processing. We do not use your data to train AI models.
See our AI Transparency Statement for full details.
Changes to this policy
We may update this policy periodically. Material changes will be communicated by email to the account holder at least 14 days before they take effect. Continued use of LevelSixLabs after that date constitutes acceptance of the revised policy.
LevelSixLabs Ltd
Registered in England and Wales (company number 17377648). Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
For any questions about this document, contact us at privacy@levelsixlabs.com