Privacy notice

Who is responsible

The controller of the personal data described here is:

ZILIO Marzena Rewers, sole trader registered in the Polish business register (CEIDG)
ul. Gliwicka 35, 42-600 Tarnowskie Góry, Poland
E-mail: contact@zilio.pl
NIP 6451705993 (EU VAT PL6451705993)

Write to that e-mail address about anything in this notice. We have not appointed a data protection officer.

No cookies, no analytics, no tracking

This site sets no cookies and uses no analytics, advertising or other third-party scripts. The checklist and the result checker run entirely in your browser; what you enter there is not sent to us.

ZIP codes (Check my ZIP and the lab finder)

When you enter a ZIP code on Check my ZIP or in the finder’s “Near ZIP” field, the lookup and the distance calculation happen in your browser. Your browser downloads a small data file named after the first three digits of the ZIP (for example /data/geo/zip/056.json), plus the lab list and the lab map points (and, on Check my ZIP, one file for your state), all from this site. Our server therefore sees, like any file request, which three-digit file was loaded, but not the full ZIP. We do not store the ZIP and nothing is sent to anyone else. Check my ZIP writes the ZIP into the part of the page address after the # sign (for example /check/#zip=05602) so you can bookmark or share the result; browsers do not send that part to the server, so the ZIP stays in your browser. Older links of the form /check/?zip=05602 still work, but if you open such a link the full address, including the ZIP, reaches our server and its log like any page address.

Hosting

The site is served by Cloudflare, Inc. (United States), which hosts it for us as a processor under its data processing addendum. Like any web host, Cloudflare processes technical data for each request, such as your IP address, the page requested, the time and your browser’s user agent, to deliver pages and protect the site from attacks. Cloudflare may process this data outside the European Economic Area under the safeguards the law requires (the EU-U.S. Data Privacy Framework and standard contractual clauses). We keep no server logs of our own. The legal basis is our legitimate interest in running a secure website (GDPR Article 6(1)(f)).

Contact form and e-mail

If you write to us, we receive your name, email address, the topic, your message and the address of the page you wrote from, by email, so that we can reply. Giving these details is voluntary, but without an email address we cannot answer. The legal basis is our legitimate interest in answering enquiries and handling corrections (GDPR Article 6(1)(f)). The form passes your message to us through Cloudflare’s email service, and it is stored in our mailbox hosted by cyber_Folks S.A. in Poland. We keep messages only as long as needed to deal with them and any follow-up, and at most 3 years. We do not sell your data or use it for marketing. To limit abuse, the form limits how many messages one connection can send per minute; Cloudflare counts them under a keyed one-way hash of your IP address, not the address itself, and the count expires after a minute (a security measure, Article 6(1)(f)).

Labs and companies listed on this site

The directory republishes information that US state agencies, federal programs and water utilities publish for the public: business names, business addresses, business phone numbers, websites, certifications and the contaminants covered, certificate numbers and expiry dates, “accepts homeowner samples” marks, the utilities whose approved-tester lists include a company, and the date of each list. We do not publish the names of individual testers or staff, and since 7 November 2026 we do not publish labs or companies whose trade name contains a person’s full name, such as “Jane Doe Plumbing” (public facilities named in honour of a person are listed). Where a listed business is nevertheless a sole trader, this information may be personal data, and the following applies:

• Source: official state laboratory certification lists, federal accreditation lists and water utilities’ published approved-tester lists, all publicly accessible. Every page names and links its source list and shows its version and the date we fetched it.
• Purpose: a free public directory that helps homeowners find certified labs and approved testers, plus our data studies; compiled lab data (labs only) may be sent on request to journalists and researchers we choose. We may later offer paid, clearly labelled extra listings.
• Legal basis: our legitimate interest and the public’s interest in finding certified services (GDPR Article 6(1)(f)).
• Recipients: anyone who visits the site, search engines, journalists and researchers we send compiled lab data to on request, and our hosting provider (processor).
• Retention: while the business appears on a current source list, and up to 12 months after it drops off, unless removed earlier on request.
• No automated decisions are made about anyone.

Your rights

Under the GDPR you can ask for access to your data, its correction or deletion, restriction of processing and, where it applies, data portability. Write to contact@zilio.pl; we answer within one month.

You can also complain to a data protection authority: in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, kancelaria@uodo.gov.pl, uodo.gov.pl; if you live in another EU country, also the authority there.

Changes

If we add anything that changes this notice, such as analytics or affiliate links, we will update this page first.