Legal

Privacy Policy

Last updated: 1 June 2025

1. Who we are

BLIMS is a cloud-based Laboratory Information Management System operated by BLIMS Technologies. We provide software services to accredited testing and calibration laboratories worldwide. This policy explains what personal data we collect, how we use it, and your rights under applicable data protection law including the EU General Data Protection Regulation (GDPR).

2. Data we collect

We collect two categories of data:

Account data

When you or your laboratory registers, we collect name, email address, organisation name, and billing details (processed by our payment provider — we never store card numbers).

Laboratory operational data

Data you enter into BLIMS — employee records, sample data, instrument logs, documents, results — belongs to your laboratory. We process it only as your data processor, under your instruction, and do not use it for any other purpose.

3. How we use your data

  • To provide, operate, and maintain the BLIMS platform
  • To send transactional emails (account confirmation, password reset, invoices)
  • To monitor service health and diagnose technical issues
  • To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data isolation and security

Each laboratory workspace is stored in a dedicated database schema, physically isolated from all other tenants. Data is encrypted at rest and in transit using AES-256 and TLS 1.3. Access controls are enforced at every layer of the application stack.

5. Analytics

We use Plausible Analytics for website visitor monitoring. Plausible is a privacy-first, cookie-free analytics tool that does not collect personal data and is fully GDPR compliant. No tracking cookies are set and no data is shared with advertising networks.

6. Data retention

Account data is retained for the duration of your subscription plus 30 days after cancellation (to allow recovery). Laboratory operational data is retained as long as your subscription is active. Upon account deletion we purge all data within 14 days.

7. Your rights (GDPR)

If you are in the EEA or UK you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Object to or restrict processing
  • Data portability
  • Lodge a complaint with your national supervisory authority

To exercise any of these rights, email [email protected].

8. Cookies

The BLIMS application uses only essential session cookies required for authentication. No advertising or analytics cookies are set. The marketing website uses no cookies at all.

9. Contact

For privacy questions, contact our Data Protection team at [email protected].