Chemfused Chemfused
Draft notice: This document is a professional placeholder. It has not been reviewed by a solicitor and must not be relied upon as legal advice. Review and approval by qualified legal counsel is required before publication.

Privacy Policy

Effective: July 2025 · Chemfused Ltd

1. Who we are

Chemfused Ltd (company number [Company Number — TBC], [Registered Address — TBC]) is the data controller for personal data collected via Chemfused. We are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Protection contact: [email protected]

2. Data we collect

Buyers (unauthenticated visitors)

  • Usage & analytics data — pages visited, search queries, time on site, device and browser type, approximate location (country/city), referrer URL. Collected via Google Analytics (GA4) only after cookie consent is given.
  • Enquiry data — name, email address, company, message content, and the chemicals or suppliers you are enquiring about. Collected when you submit an enquiry form.

Suppliers (registered accounts)

  • Account data — business name, contact name, email address, telephone number, registered address, VAT or company registration number.
  • Listing data — product names, CAS numbers, descriptions, pricing tiers, country availability, and any documents you upload (e.g. SDS files).
  • Billing data — payment transactions are processed by our third-party payment processor (Stripe). We store only summary billing records; we do not store card numbers.
  • Usage data — enquiries received, listing views, login activity.

3. Legal bases

  • Contract (Article 6(1)(b) UK GDPR) — to provide the services described in our Terms of Service.
  • Legitimate interests (Article 6(1)(f)) — platform security, fraud prevention, analytics (where consent is not required), and direct marketing to existing customers.
  • Consent (Article 6(1)(a)) — Google Analytics cookies and any optional marketing emails. You may withdraw consent at any time.
  • Legal obligation (Article 6(1)(c)) — retaining transaction records for tax and accounting purposes.

4. How we use your data

  • To operate the platform and deliver the services you have requested.
  • To forward buyer enquiries to the relevant suppliers.
  • To send transactional emails (order confirmations, trial reminders, system notifications).
  • To analyse platform usage and improve our services (GA4, aggregate analytics).
  • To comply with legal obligations, including tax, anti-money-laundering, and export-control checks.

5. Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors use Chemfused. GA4 sets cookies on your device and transmits usage data to Google LLC servers in the United States. We have enabled IP anonymisation. GA4 cookies are only placed after you have given consent via our cookie banner. You can withdraw consent at any time by clicking "Cookie settings" in the site footer.

Google's privacy policy: policies.google.com/privacy

6. Sharing your data

We do not sell personal data. We share data with:

  • Suppliers — buyer enquiries are forwarded to the supplier(s) chosen by the buyer.
  • Buyers — suppliers' business contact details are visible on their public profiles.
  • Service providers — cloud hosting (Hetzner/Forge), email delivery (Resend/Mailgun), payment processing (Stripe), and analytics (Google). Each is bound by a data processing agreement.
  • Regulators and law enforcement — where required by law.

Some providers are based outside the UK/EEA. Where transfers occur, we rely on Standard Contractual Clauses or adequacy decisions as the transfer mechanism.

7. Retention

  • Enquiry data — 3 years from submission.
  • Supplier account data — duration of the account plus 7 years for billing records (legal obligation).
  • Analytics data — 14 months (GA4 default retention).
  • Inactive accounts — deleted or anonymised after 2 years of inactivity following written notice.

8. Your rights

Under UK GDPR you have the right to:

  • access a copy of your personal data;
  • rectify inaccurate data;
  • erase your data ("right to be forgotten") where no overriding legal basis applies;
  • restrict or object to processing;
  • data portability (for data processed by automated means on the basis of consent or contract);
  • withdraw consent at any time without affecting prior lawful processing.

To exercise any right, contact [email protected]. We will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

9. Cookies

See our Cookie Policy for a full list of cookies in use.

10. Changes

Material changes will be notified by email or a prominent banner on the site at least 14 days before taking effect.

11. Contact

Privacy enquiries: [email protected]
General: [email protected]