Privacy policy

Who we are

This website is run by LAB90 Ltd, company number 15247955. We are the controller of the personal information described in this policy. You can contact us about privacy at [email protected].

What we collect

When you send an enquiry through our contact form, we collect the details you give us: your name, email address, the type of project and your description of what you need, plus your company name and an indicative budget if you choose to provide them.

Like most websites, our servers and our network provider also process technical information such as your IP address, browser type and the pages you request. We use your IP address to limit how often the enquiry form can be submitted, which protects it from abuse.

We do not use analytics, advertising or tracking tools, and we do not buy personal information from third parties.

How we use it

• To read and reply to your enquiry, and to discuss any work that follows from it. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
• To keep the website secure and available. Our lawful basis is our legitimate interest in protecting the site and the people who use it.

We do not use your information for marketing and we never sell it.

Where it is stored and shared

• Our database. Enquiries are stored in the MySQL database that runs this website, on a server we manage.
• Slack. When an enquiry arrives, a copy of its details is posted to a private channel in our Slack workspace through a Slack incoming webhook, so we can respond promptly. Slack processes this information on our behalf and may store it outside the UK under its own safeguards for international transfers.
• Cloudflare. All traffic to this website passes through Cloudflare, which protects the site from attacks and helps it load quickly. Cloudflare processes technical information such as your IP address to provide this service.

We only share personal information with other parties when the law requires it.

Cookies

This website sets a session cookie and a security token cookie. They are strictly necessary: they keep the enquiry form working and protect it against cross-site request forgery. They expire when your session ends or shortly afterwards. Cloudflare may also set strictly necessary cookies to tell people apart from automated traffic. We do not set analytics or advertising cookies, so we do not ask for cookie consent.

How long we keep it

We keep enquiries for as long as we need them to respond and to manage any work that follows, and then delete them. Copies posted to Slack are deleted on the same basis. Technical logs are kept for a short period for security purposes.

Your rights

Under UK data protection law you have the right to ask for a copy of your personal information, to have it corrected or deleted, to object to or restrict how we use it, and to receive it in a portable format. To use any of these rights, email [email protected].

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.