Privacy Policy

Who we are

Find Testing Labs is operated by Batoota Tech AB, org.nr 559035-5649, a Swedish limited company. For any privacy request, email hello@findtestinglabs.com. Batoota Tech AB is the data controller for any personal data processed via this site.

What we collect

We deliberately keep data collection to a minimum. In normal use, the only personal data we see are:

• Your IP address, used only to enforce rate limits on our AI-powered search endpoints. We do not store your IP beyond 24 hours.
• Standard server logs (request path, status code, timestamp), kept for up to 30 days for security and debugging.
• The text of AI queries you submit, forwarded to our sub-processor OpenRouter so an LLM can translate them into search filters. We do not associate these queries with your IP.

AI assistants and our MCP server

AI assistants can query this directory through our tool server at /mcp (see FindTestingLabs for AI assistants). A tool call is an ordinary request to us, and we see the same minimal data as for any other request:

• The IP address the call arrives from, used only to enforce rate limits and not stored beyond 24 hours.
• Standard server logs (request path, status code, timestamp), kept up to 30 days for security and debugging.
• The tool call's arguments — for example a search term, a lab name, or a certificate number — processed to produce the answer. These are not linked to an identity and are not used for profiling.

We receive no account details, conversation content, or chat history from the assistant, and we never request them. Our tools return only directory information about laboratories and their accreditations.

What we don't collect

• Tracking cookies, advertising pixels, or analytics that fingerprint users
• Your name, email address, or any account information from visitors to this site — there are no accounts
• Browsing history across other sites

Sub-processors

We use the following third parties to operate the service:

• Railway (infrastructure hosting, EU region)
• OpenRouter (LLM queries for AI-powered search). Query text is sent; your IP is not forwarded.

If you contact us

When you email us, we keep the email thread for as long as needed to resolve the matter (typically up to 12 months), then delete it.

If you ask us to request a quote from a laboratory, we forward your request and contact details to that laboratory so they can reply to you.

If we contact you

We sometimes message people in quality, regulatory or testing roles to ask how they find and choose accredited labs. If we have reached out to you, here is the whole file: your name, your role, your employer, and the public page we found them on, usually your own company's website or a public regulatory filing. Nothing else. No email address, no phone number, no email-finding tools, nothing from behind a login, nothing private.

It is a work question about your job, so our basis for holding that much is legitimate interest (GDPR Article 6(1)(f)). Nothing is profiled, sold or shared, and we delete it within 12 months of the conversation ending.

You can tell us to stop, and you can tell us to delete what we have. Reply and say so, or email hello@findtestinglabs.com. One email and it is gone the same day, no questions. All we keep is a note not to contact you again.

Future features (waitlist)

We may offer a waitlist sign-up for features such as saving favorite labs or receiving alerts when new labs match a search. If you choose to sign up, we will store your email address and the feature you registered for. You can unsubscribe at any time by emailing us. This policy will be updated before we send any communications.

Your rights

Under GDPR you have the right to access, correct, or delete any personal data we hold about you, and to object to its processing. Since we keep so little, most requests are resolved quickly. Email us to make a request.

If you have concerns about how we handle your data, you're welcome to reach out to us first — and you also have the right to contact the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY) at www.imy.se.

Changes to this policy

If we change this policy materially, we'll update the "last updated" date above.