Privacy Policy

1. Who we are

The Filling Lab Ltd (“we”, “us”, “our”) is the data controller for personal data processed in connection with this website and our manufacturing enquiries. Our registered address is Unit 1A, Mikar Business Park, Bolton, BL3 6RE.

Contact: Nizam@thefillinglab.co.uk or Mike@thefillinglab.co.uk. For general questions about this policy, please email us with “Privacy” in the subject line.

2. What this policy covers

This policy applies to information we obtain when you visit our website, use our Request for Quote (RFQ) form, email us, or otherwise contact us about contract manufacturing, trials or production. It does not govern processing carried out solely by third-party sites we link to (for example, carriers or regulators); their own policies apply when you leave our site.

For cookies and optional site analytics (Google Analytics 4), see our separate Cookies and analytics page.

3. Data we may collect

Depending on how you interact with us, we may process:

• Identity and contact details - For example name, job title, company name, email address, telephone number and postal address you provide in an RFQ, email or other message.
• Enquiry and project information - Details you choose to share about your product, volumes, timelines, formulations, packaging, compliance context and similar (including free-text fields in the RFQ).
• Technical and usage data - Basic server and security information generated when you use the site (for example IP address, browser type, date/time of requests, and diagnostic logs needed to operate and protect the service). If we introduce new systems that process personal data in a materially different way, we will update this page when or before they go live.

4. How we use your data and lawful bases

We use personal data only where we have a valid lawful basis under UK data protection law. Typical purposes include:

• Responding to enquiries and RFQs - To assess fit, prepare quotes, arrange trials or production, and correspond with you. This is usually necessary for our legitimate interests in operating a B2B manufacturing business and, where you become a customer, for performing a contract with you or taking steps at your request before a contract.
• Running and securing the website - For example hosting, diagnostics, abuse prevention and maintaining integrity of our systems (legitimate interests; where strictly necessary, legal obligation).
• Record-keeping and quality - Including Batch Traceability, complaints handling and defending legal claims where applicable (legitimate interests, legal obligation or contract as relevant).

We do not sell your personal data. We do not use automated decision-making that produces legal or similarly significant effects solely by automated means in relation to RFQs submitted through this site.

5. Retention

We keep personal data only for as long as needed for the purposes above, including statutory, regulatory or contractual retention periods. RFQ and production records may be held longer where required for traceability, product safety or legal claims. When data is no longer required, we delete or anonymise it in line with our internal retention practices.

6. Sharing and processors

We may share personal data with trusted service providers who process it on our instructions (for example IT hosting, email delivery, or professional advisers), and only to the extent needed for their service. We require such processors to respect confidentiality and appropriate security measures. We may also disclose information where we are required to by law or to protect our rights, users or the public.

7. International transfers

Our operations are UK-centred. If we ever transfer personal data outside the United Kingdom, we will ensure a valid transfer mechanism applies (for example the UK extension to the EU International Data Transfer Agreement, UK adequacy regulations, or standard contractual clauses approved for use in the UK), and we will document that approach in an updated version of this policy where relevant.

8. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration or disclosure. No method of transmission over the internet is completely secure; you should also take care when submitting sensitive information.

9. Your rights

Under UK data protection law you may have the right to:

• Request access to the personal data we hold about you;
• Ask us to correct inaccurate data or complete incomplete data;
• Request erasure, restriction of processing, or object to processing in certain circumstances;
• Request portability of data you provided where processing is based on consent or contract and carried out by automated means;
• Withdraw consent where processing is based on consent (without affecting the lawfulness of processing before withdrawal);
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) - See ico.org.uk.

To exercise any of these rights, contact us using the email address above. We may need to verify your identity before responding.

10. Children

Our website and services are directed at businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

11. Links

This site may contain links to other websites. We are not responsible for their privacy practices; please read their policies before submitting personal data.

12. Disclaimer

This page is provided for transparency and to support good-faith B2B relationships. It is not legal advice. You should have your own advisers review how our practices fit your products, markets and regulatory obligations.