Last updated: February 2026
Who we are
Western Scientific Services (“we”, “us”, “our”) is an independent environmental testing laboratory based in Ireland. We are the data controller responsible for the personal data described in this policy. If you have any questions about how we handle your data, contact us at philip@westernsci.ie.
What data we collect
When you create an account or place an order, we collect:
- Contact details — your name, email address, phone number and, where relevant, company name.
- Postal address — so we can send you sampling bottles and any physical correspondence.
- Order and sample information — the tests you order, the sample IDs we issue, and the results and reports associated with your samples.
- Account credentials — your password, which is stored in an encrypted (hashed) form that we cannot read.
When you pay online, your card details are entered directly with our payment processor. We never see or store your full card number.
Why we use it, and our legal basis
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:
- To perform our contract with you — creating your account, posting sampling bottles, carrying out the tests you ordered, and issuing your results and reports.
- Our legitimate interests — contacting you about your samples, keeping records of orders, and maintaining the security of our service.
- Legal obligation — retaining certain records (for example, for tax and accounting purposes).
Who we share it with
We do not sell your data. We share it only with the service providers we rely on to run the business, and only as far as needed:
- Our payment processor (Stripe) — to take payment securely. Stripe handles your card details under its own privacy terms.
- Our hosting provider (Render) — which stores the website and its database on our behalf.
- Our email provider — to send and receive correspondence with you.
These providers act on our instructions and are bound to keep your data secure. We may also disclose data where we are legally required to do so.
How long we keep it
We keep your account and sample data for as long as you have an account with us and for a reasonable period afterwards, and we retain records we are legally required to keep (such as records relating to payments) for the periods required by law. When data is no longer needed, we delete it.
Where your data is stored
Your data is stored on servers provided by our hosting and service providers. Where any provider processes data outside the European Economic Area, they do so under safeguards approved under GDPR.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct data that is inaccurate or incomplete.
- Ask us to delete your data, where there is no legal reason for us to keep it.
- Object to, or ask us to restrict, certain processing.
- Request a copy of your data in a portable format.
- Withdraw consent where we relied on it.
To exercise any of these rights, email philip@westernsci.ie. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) if you are unhappy with how we have handled your data.
Cookies
Our website uses only the cookies and local storage necessary to keep you signed in and to remember your preferences. We do not use advertising or third-party tracking cookies.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date above.
This policy is provided as a clear, good-faith summary of how the website handles personal data. It is not legal advice. Before relying on it commercially, Western Scientific Services should have it reviewed against its specific circumstances and confirm its obligations under Irish and EU data-protection law.
