Support, Privacy & Terms

CHEMPAC Inventory System operates this service and acts as data controller for account and billing data. For encrypted inventory content we act as a processor of data we cannot read.

Account data: email address, optional name and company, authentication timestamps. Billing data: tier, amount, currency, payment status and the payment provider's transaction reference. Card details are handled by the payment provider and never reach us.

Inventory records: stored as ciphertext plus the readable metadata listed above. Operational logs: request routes, status codes and timestamps used to run and secure the service.

To provide the service you asked for (contract), to take payment (contract), to keep the service secure and prevent abuse (legitimate interests), and to meet accounting obligations (legal obligation).

Inventory records are kept until you delete them or close your account. Deleting a record destroys its ciphertext. Billing records are retained for the period required by applicable accounting law. Operational logs are short-lived.

You can request access, rectification, erasure, restriction, portability and objection by writing to privacy@chempac.uk. Because inventory content is encrypted with your key, an access request can only return ciphertext and metadata from our side — the readable copy is produced by you in your browser or by exporting your report.

We use infrastructure providers for hosting, database storage, transactional email and payment processing. They process the data described above under contract; the inventory content they hold is ciphertext.

We set only what the service needs: a session cookie to keep you signed in and a preference cookie remembering your regional edition. No advertising or cross-site tracking cookies are used.

The service formats operator-provided data into a standardised European hazardous substance inventory layout and applies CLP classification and Seveso III Annex I summation logic to that data. It does not submit anything on your behalf.

You are responsible for the accuracy and completeness of the data you enter, for verifying every output against ECHA and your national competent authority, and for filing with the authorities that apply to your site. You must hold the rights to any data you upload.

Outputs are informational and for internal record-keeping. They are not legal, environmental, safety or regulatory advice, and they are not a certification of compliance.

Report tiers are charged per record at the price shown at checkout. Enterprise access is billed annually. Because a generated report is delivered immediately on payment, fees are non-refundable once the report has been generated, except where required by law.

Do not attempt to break the service's security, access other operators' records, resell access without an Enterprise agreement, or use automated access outside the documented API and its rate limits.

The service is provided on an as-available basis. We may perform maintenance and change features. No uptime guarantee applies unless agreed in writing in an Enterprise contract.

To the maximum extent permitted by law, our aggregate liability is limited to the fees you paid for the record or subscription giving rise to the claim. We are not liable for regulatory penalties, business interruption or indirect loss arising from your use of the outputs. Nothing here excludes liability that cannot lawfully be excluded.

You acknowledge the zero-knowledge design described above and accept that a lost vault passphrase makes your stored records permanently unrecoverable, with no liability on our part for that loss.

You may stop using the service and delete your records at any time. We may suspend access for breach of these terms or non-payment.

These terms are governed by the law of the jurisdiction in which the service operator is established. Mandatory consumer protections in your country of residence are unaffected.