Privacy notice
How we use your information
Halden Regulatory Ltd ("we") is a company registered in England and Wales. We are the controller of the personal information you give us through this website.
What we collect
When you send an enquiry we collect your name, work email, brand name, website and the details you give us about your products. If you become a client and pay online, Stripe processes your payment and shares your name, email and payment status with us. We never see or store your card details.
Clients send us product documents (formulas, safety reports, label artwork and similar) through a private upload link. These are stored in a private, access-controlled store hosted by Supabase in London, are only opened by us, and are only used for our work as your Responsible Person. Product files are kept for 10 years after a product was last on sale, as UK cosmetics law requires.
If you use our free label check, we collect your email, brand name, the product details, ingredient list and claims you enter, and the report it produces. Any label photos you add are sent to our AI provider to run that one check and are not stored by us. We use this to show you the report, to follow up about it, and to improve the service.
Why we use it
- To reply to your enquiry and send you a quote (our legitimate interest in responding to business enquiries).
- To act as your UK Responsible Person if you become a client (to perform our contract with you).
- To meet our legal duties, including keeping product records for 10 years as UK cosmetics law requires.
Who we share it with
Our service providers only: Supabase (database and document storage, hosted in London), Stripe (payments), Vercel (website hosting), Resend (email notifications), Anthropic (the AI model that runs the free label check) and Cloudflare (Turnstile, which checks that label check requests come from a real person and not a bot). Anthropic processes label check content in the United States under data protection safeguards and does not use it to train its models. Where we act as your Responsible Person we may also share information with UK authorities such as Trading Standards, as the law requires. We do not sell your information.
How long we keep it
Enquiries and label checks that don't lead to work are deleted after 24 months. Client records are kept for as long as the law requires, which for cosmetic product files is 10 years after the product was last on sale.
Your rights
You can ask to see, correct or delete your information, or object to how we use it. To do this, email us at hello@haldenrp.co.uk or use the enquiry form on our homepage. You can also complain to the Information Commissioner's Office at ico.org.uk.
Last updated October 2026.