Privacy Policy

1. Who is responsible for your data

Absolution Labs Ltd ("we", "us", "our") is the data controller for the personal data we collect through this website and our services. If you have questions about how we handle your data, email us at rob@absolutionlabs.com.

2. What data we collect

We collect personal data in a few ways. When you fill in a form on our website, we collect your name, email address, and any other details you provide. When you engage us as a client, we may also collect your business name, job title, phone number, and billing details.

We also collect technical data automatically when you visit our website, including your IP address, browser type, pages visited, and time spent on the site. This is collected through cookies and similar technologies.

2a. Resource downloads

When you request one of our free guides, templates, or downloads, we collect your email address so we can deliver the guide and confirm receipt. The lawful basis for this processing is performance of your request under UK GDPR Article 6(1)(b).

At the download form, you can separately choose to receive marketing emails from us (occasional AI tips for SMEs, case studies, and updates about our services). This is optional, the box is not pre-ticked, and your download is not conditional on agreeing. The lawful basis for marketing email is your consent under UK GDPR Article 6(1)(a) and PECR Regulation 22. You can withdraw consent at any time using the unsubscribe link in every email or by emailing us at rob@absolutionlabs.com; withdrawal does not affect processing carried out before withdrawal.

Resource-download data (email, the resource you requested, the date of request, your consent status and timestamp) is stored in Klaviyo (sub-processor; see section 6). Where you have given marketing consent, we retain your data while consent stands or for 24 months after your last engagement with our emails, whichever is sooner. Where you have not given marketing consent, we retain the download record for 24 months for transactional and audit purposes and then delete it.

3. How we use your data

We use your personal data to respond to enquiries, deliver our services, send you information you have requested, and improve our website. Where you have given us consent to do so, we may also send you marketing emails about our services. You can withdraw this consent at any time by clicking the unsubscribe link in any email or by emailing us directly.

We use Klaviyo to manage our email communications. When you submit your details through one of our forms, your data is processed by Klaviyo in accordance with their privacy policy.

4. AI processing of your data

As an AI consultancy, we want to be transparent about how artificial intelligence interacts with your data. When you engage our services, business data you share with us may be processed by AI systems to generate insights, reports, and recommendations.

We take the following approach to AI and your data. We do not use your personal data to train AI models. We do not share identifiable business data with other clients. Where we use third-party AI providers, we select services with data processing agreements that prevent them from using your inputs for model training. Any AI-generated outputs are reviewed before delivery.

We may derive anonymised, aggregated data from client engagements to identify industry trends, improve our services, train our own models, and develop new tools. "Anonymised" means we remove all names, brand identifiers, and any combination of data points that could reasonably be used to identify you or your business. In a specialist industry we take particular care to ensure that even unlabelled data is not identifying by inference. See our Terms of Service for further detail on how we handle anonymised data.

Personal data collected through our website forms (name, email) is not processed by AI systems. It is used solely for communication and service delivery.

5. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following grounds. Where you have submitted an enquiry or engaged our services, we process your data as necessary for the performance of a contract or to take steps at your request before entering a contract. Where you have opted in to marketing, we process your data based on your consent. We may also process data where we have a legitimate interest in doing so, such as improving our website or protecting against fraud, provided this does not override your rights.

6. Who we share your data with

We do not sell your personal data. We share it only with the sub-processors necessary to deliver our services. All third parties are under contractual obligation to protect your data and process it only on our instructions.

All transfers to the United States are protected by Standard Contractual Clauses and/or certification under the UK extension to the EU-US Data Privacy Framework. You can request copies of the relevant safeguard documents by emailing rob@absolutionlabs.com.

7. How long we keep your data

We keep your personal data only for as long as we need it. Enquiry data is retained for up to 24 months. Client data is retained for the duration of the engagement plus 6 years to meet accounting and legal obligations. Marketing data is retained until you unsubscribe or withdraw consent. You can ask us to delete your data at any time by emailing rob@absolutionlabs.com.

On termination of an engagement, we will delete all identifiable client data within 30 days of a written request. This includes your name, contact details, business data, and any working documents that could identify you. We may retain data required by law for accounting or regulatory purposes. Anonymised, aggregated data that can no longer identify you or your business is retained as proprietary information and is not subject to deletion requests.

8. Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict our processing of your data, request a copy of your data in a portable format, and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at rob@absolutionlabs.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses essential cookies to ensure it functions correctly and analytics cookies to help us understand how visitors use the site. We do not use advertising or tracking cookies. You can control cookie settings through your browser preferences.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date at the bottom of this page. We encourage you to review this page periodically.

11. Contact

If you have questions about this privacy policy or how we handle your data, email us at rob@absolutionlabs.com.