Privacy Policy

1. Who is responsible for your data

Absolution Labs Ltd ("we", "us", "our") is the data controller for the personal data we collect through this website and our services. If you have questions about how we handle your data, email us at rob@absolutionlabs.com.

2. What data we collect

We collect personal data in a few ways. When you fill in a form on our website, we collect your name, email address, and any other details you provide. When you engage us as a client, we may also collect your business name, job title, phone number, and billing details.

We also collect technical data automatically when you visit our website, including your IP address, browser type, pages visited, and time spent on the site. This is collected through cookies and similar technologies.

3. How we use your data

We use your personal data to respond to enquiries, deliver our services, send you information you have requested, and improve our website. Where you have given us consent to do so, we may also send you marketing emails about our services. You can withdraw this consent at any time by clicking the unsubscribe link in any email or by emailing us directly.

We use Klaviyo to manage our email communications. When you submit your details through one of our forms, your data is processed by Klaviyo in accordance with their privacy policy.

4. AI processing of your data

As an AI consultancy, we want to be transparent about how artificial intelligence interacts with your data. When you engage our services, business data you share with us may be processed by AI systems to generate insights, reports, and recommendations.

We take the following approach to AI and your data. We do not use your personal data to train AI models. We do not share identifiable business data with other clients. Where we use third-party AI providers, we select services with data processing agreements that prevent them from using your inputs for model training. Any AI-generated outputs are reviewed before delivery.

We may derive anonymised, aggregated data from client engagements to identify industry trends, improve our services, train our own models, and develop new tools. "Anonymised" means we remove all names, brand identifiers, and any combination of data points that could reasonably be used to identify you or your business. In a specialist industry we take particular care to ensure that even unlabelled data is not identifying by inference. See our Terms of Service for further detail on how we handle anonymised data.

Personal data collected through our website forms (name, email) is not processed by AI systems. It is used solely for communication and service delivery.

5. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following grounds. Where you have submitted an enquiry or engaged our services, we process your data as necessary for the performance of a contract or to take steps at your request before entering a contract. Where you have opted in to marketing, we process your data based on your consent. We may also process data where we have a legitimate interest in doing so, such as improving our website or protecting against fraud, provided this does not override your rights.

6. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us deliver our services, including Klaviyo (email marketing), our hosting provider (Netlify), and any AI service providers used in delivering your engagement. All third parties are required to handle your data in accordance with applicable data protection law.

Some of these providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

7. How long we keep your data

We keep your personal data only for as long as we need it. Enquiry data is retained for up to 24 months. Client data is retained for the duration of the engagement plus 6 years to meet accounting and legal obligations. Marketing data is retained until you unsubscribe or withdraw consent. You can ask us to delete your data at any time by emailing rob@absolutionlabs.com.

On termination of an engagement, we will delete all identifiable client data within 30 days of a written request. This includes your name, contact details, business data, and any working documents that could identify you. We may retain data required by law for accounting or regulatory purposes. Anonymised, aggregated data that can no longer identify you or your business is retained as proprietary information and is not subject to deletion requests.

8. Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict our processing of your data, request a copy of your data in a portable format, and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at rob@absolutionlabs.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses essential cookies to ensure it functions correctly and analytics cookies to help us understand how visitors use the site. We do not use advertising or tracking cookies. You can control cookie settings through your browser preferences.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date at the bottom of this page. We encourage you to review this page periodically.

11. Contact

If you have questions about this privacy policy or how we handle your data, email us at rob@absolutionlabs.com.