1. Who we are
GHS Labels (ghslabels.com) is an independent procurement reference for GHS chemical labels, operated from Riga, Latvia. For data protection purposes, GHS Labels is the data controller responsible for processing personal data collected through this site.
Contact for data protection matters: sergejssevcenko@ghslabels.com.
2. What data we collect
We collect the following categories of personal data:
- Contact data: when you reach out via email or our contact form, we collect your name, email address, company (if provided), and the contents of your message. This is processed via Formspree.
- Email subscription data: if you sign up for our newsletter or download a free resource, we collect your email address and (optionally) name. This is processed via Brevo.
- Analytics data: we use Google Analytics 4 to understand aggregate site usage. This includes anonymised IP addresses, browser type, device type, pages visited, and referral source.
- Cookie data: see Section 6 below.
- Server log data: our hosting provider (Cloudflare) records standard server logs including IP address, request time, and user agent for security and performance purposes.
3. Why we process this data (lawful basis under GDPR)
- Consent (Art. 6(1)(a)): sending marketing emails after you opt in. You can withdraw consent at any time via the unsubscribe link in every email.
- Legitimate interest (Art. 6(1)(f)): aggregate analytics, security logging, and improvement of our content. We have assessed that this does not override your rights and freedoms.
- Legal obligation (Art. 6(1)(c)): retaining business records as required by Latvian law.
4. Third parties and sub-processors
We use the following service providers to process personal data on our behalf. Each operates under appropriate data protection terms.
| Provider | Purpose | Region |
|---|---|---|
| Cloudflare | Hosting, CDN, security | Global (US-headquartered) |
| Formspree | Contact form processing | United States |
| Brevo (formerly Sendinblue) | Email newsletters, marketing automation | European Union (France) |
| Google Analytics 4 | Aggregate site analytics | Global (US-headquartered) |
| Supabase | Substance database, lead storage | European Union (Frankfurt) |
| Affiliate networks (when active) | Tracking referral commissions | Varies by partner |
Cross-border data transfers
5. How long we keep your data
- Contact data: up to 24 months from your last contact, then deleted or anonymised.
- Email subscription data: until you unsubscribe, after which we retain only a suppression record (your email hash) to ensure we do not contact you again.
- Analytics data: 14 months in Google Analytics 4, then automatically deleted.
- Server logs: up to 30 days, then automatically rotated.
6. Cookies
We use a small number of cookies and similar technologies:
- Strictly necessary cookies: set by Cloudflare for security and load balancing. These cannot be disabled.
- Analytics cookies: set by Google Analytics 4 (
_ga,_ga_*) with IP anonymisation enabled. - Affiliate cookies: when you click an affiliate link, our affiliate partners may set cookies on their domain to track referrals. These are governed by the partner's privacy policy, not ours.
You can clear cookies via your browser settings at any time. Disabling analytics cookies will not affect site functionality.
7. Your rights
Under the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and similar laws, you have the following rights regarding your personal data:
- Access a copy of the data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure (the “right to be forgotten”) when processing is no longer necessary.
- Restriction of processing in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Objection to processing based on legitimate interest, including direct marketing.
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you analogous rights to know, delete, and opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, email sergejssevcenko@ghslabels.com. We will respond within 30 days.
8. Right to lodge a complaint
Supervisory authority
9. Children
This site is intended for business and professional users. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have collected such data, please contact us and we will delete it.
10. Updates to this policy
We may update this policy when our services, sub-processors, or applicable laws change. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be highlighted via a notice on the site.
This privacy policy was last updated on 22 May 2026.