Last updated: February 2026
Provider: Harmonize Trade ABN 82 982 480 271 trading as PFAS Packaging Check (“we”, “us”, “our”)
This Privacy Policy describes how PFAS Packaging Check collects, uses, and shares information when you use our website and services (the “Service”). By using the Service, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information you provide
- Account information: Email address and business name when you create an account.
- Business details: Business type, operating states, and packaging selections you enter when using the compliance checker.
- Compliance check results: The results generated from your compliance checks, including jurisdiction-specific regulatory status information.
- Uploaded documents: Certificates, compliance documents, and other files you upload to the document storage feature.
- Payment information: Billing details processed through Stripe. We do not store your full credit card number on our servers.
- Communications: Messages you send to us through the contact form or support email.
Information collected automatically
- Usage analytics: Page views, feature usage, and general interaction patterns collected through Vercel Analytics.
- Device and browser information: Browser type, operating system, and screen resolution for service improvement purposes.
- Log data: IP address, access times, and referring URLs recorded in server logs.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service, including generating compliance check results and regulatory alerts.
- Send you regulatory change alerts for states and jurisdictions you have selected.
- Process payments and manage your subscription through Stripe.
- Respond to your inquiries and provide customer support.
- Analyse usage patterns to improve the Service and develop new features.
- Comply with legal obligations and enforce our Terms of Service.
3. Third-Party Services
We use the following third-party services to operate the Service. Each service processes data in accordance with their own privacy policies:
- Supabase — Database hosting, authentication, and file storage. Your account data, compliance results, and uploaded documents are stored on Supabase infrastructure.
- Stripe — Payment processing. Stripe handles your payment card details and billing. See Stripe's Privacy Policy.
- Resend — Transactional email delivery. Used to send account-related emails, regulatory alerts, and communications.
- Vercel — Website hosting and analytics. Vercel Analytics collects anonymous usage data to help us understand how the Service is used.
- Upstash — Rate limiting. Used to protect the Service from abuse. Processes IP address data for rate limiting purposes.
- Affiliate partners — Our supplier directory includes links to third-party packaging suppliers. Some of these are affiliate links, meaning we may earn a commission if you make a purchase. Affiliate relationships are disclosed on each supplier listing. Clicking an affiliate link may allow the partner to collect browsing data under their own privacy policy.
We do not sell your personal information to third parties. We share data with the services listed above only as necessary to operate the Service.
4. Data Retention
- Compliance check results are retained for as long as your account is active.
- Uploaded documents are retained until you delete them or request account deletion.
- Account data is retained until you request deletion. Upon receiving a deletion request, we will delete your personal data within 30 days, except where retention is required by law.
- Payment records may be retained as required for tax, legal, or accounting purposes, even after account deletion.
- Analytics data is collected in aggregate and does not contain personally identifiable information.
5. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Delete your personal data and account.
- Export your data in a portable format.
- Withdraw consent for optional data processing at any time.
To exercise any of these rights, contact us at support@pfaspackagingcheck.com. We will respond to your request within 30 days.
6. Cookies
We use the following cookies:
- Supabase authentication cookies (functional) — Required for user authentication and session management. These are essential cookies necessary for the Service to function.
- Vercel Analytics (analytics) — Collects anonymous usage data including page views and web vitals. No personally identifiable information is collected.
We do not use third-party advertising cookies. We do not use cookies for tracking across other websites.
7. Children
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at support@pfaspackagingcheck.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at the address associated with your account and update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
9. Security
We implement reasonable technical and organisational measures to protect your personal information. All data is encrypted in transit using TLS and at rest. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Contact
If you have questions or concerns about this Privacy Policy or our data practices, contact us at: