Laboratories
Data Privacy and Security
Privacy Policy

Your Privacy is Our Priority

This privacy policy explains how AILaboratories collects, uses, and protects your personal information in compliance with GDPR, CCPA, and UK Data Protection Act.

GDPR Compliant
Data Protected
Transparent
Last updated: September 30, 2025 • Effective date: September 30, 2025
Data Protection

Data Protection

How we protect your personal information with industry-leading security

AES-256 encryption
GDPR compliance
Regular security audits
Secure data centers
Your Privacy Rights

Your Privacy Rights

Complete control over your personal data and privacy preferences

Access your data anytime
Request data deletion
Opt-out options
Export your information
Data Collection

Data Collection

Transparent information about what data we collect and why

Minimal data collection
Clear purpose statements
No selling to third parties
Anonymized analytics
Transparency

Transparency

Open communication about how we use and share your information

Clear privacy notices
Regular policy updates
User notifications
Audit trail access

1. Information We Collect

1.1 Information You Provide

  • Contact Information: Name, email address, phone number when you contact us
  • Business Information: Company name, job title, industry when requesting consultations
  • Communication Content: Messages, feedback, and support requests
  • Account Information: If you create an account for our solutions

1.2 Information Automatically Collected

  • Technical Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent, navigation patterns (only with consent)
  • Device Information: Device type, screen resolution, language preferences
  • Cookies and Tracking: As described in our Cookie Policy (subject to your preferences)

2. How We Use Your Information

Legal Bases for Processing (GDPR Article 6)

  • Consent: Marketing communications, analytics, non-essential cookies
  • Contract: Providing requested solutions and consultations
  • Legitimate Interest: Website security, fraud prevention, business operations
  • Legal Obligation: Compliance with applicable laws and regulations

2.1 Solution Provision

  • Respond to your inquiries and provide customer support
  • Deliver consultancy solutions and AI solutions
  • Process and fulfill solution requests
  • Communicate about our solutions and updates

2.2 Website Improvement

  • Analyze website usage to improve user experience (with consent)
  • Optimize website performance and functionality
  • Ensure website security and prevent fraud

3. Your Privacy Rights

GDPR Rights (EU/UK)
Right to Access
Right to Rectification
Right to Erasure
Right to Data Portability
Right to Object
CCPA Rights (California)
Right to Know
Right to Delete
Right to Opt-Out of Sale
Right to Non-Discrimination

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or use the Privacy Settings in our website footer. We will respond within 30 days (GDPR) or 45 days (CCPA).

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: Data in transit and at rest using industry-standard encryption
  • Access Controls: Role-based access with multi-factor authentication
  • Regular Audits: Security assessments and vulnerability testing
  • Staff Training: Regular privacy and security training for all employees
  • Incident Response: Procedures for detecting and responding to data breaches

5. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

  • Contact Inquiries: 3 years from last contact
  • Customer Data: Duration of business relationship plus 7 years for legal requirements
  • Marketing Data: Until consent is withdrawn or 3 years of inactivity
  • Technical Logs: 12 months for security purposes

6. International Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. When we transfer personal data outside the EU/UK/EEA, we ensure adequate protection through:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules where applicable
  • Your explicit consent for specific transfers

7. Third-Party Solutions

We may use trusted third-party solutions that have access to personal information:

  • Analytics Providers: Google Analytics (with IP anonymization, when consented)
  • Communication Tools: Email solution providers for customer communications
  • Hosting Solutions: Secure cloud hosting providers
  • Security Solutions: Cybersecurity and monitoring tools

All third-party processors are contractually bound to protect your data and use it only for specified purposes.

8. Children's Privacy

Our solutions are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notification to registered users
  • Displaying a prominent notice on our website

Continued use of our solutions after changes become effective constitutes acceptance of the updated policy.

10. Contact Information

Data Controller

Company: AILaboratories Ltd

Address: Media Factory 3rd floor, Propeller Hub, Hot Desk, Kirkham St Preston, PR1 2XY, United Kingdom

Email: [email protected]

Phone: +44 1772 439214

DPO Email: [email protected]

Supervisory Authorities

UK: Information Commissioner's Office (ICO)

Website: ico.org.uk

EU: Your local Data Protection Authority

Find yours: edpb.europa.eu