1. Who we are
Various Labs Ltd is a company registered in England and Wales, company number 17487005. Our registered office is 112 Trent Gardens, London N14 4QN.
We decide how the information in this notice is used, which makes us the “controller” under UK data protection law.
For anything about your personal information, email Zaki Qadus, our director, at zaki@variouslabs.co.uk. We haven’t appointed a Data Protection Officer because the law doesn’t require one for a business like ours. Zaki handles every privacy request himself.
When we build software for a client and handle information about that client’s own customers or staff, we do it on the client’s instructions. In that case the client is responsible for that information, and their privacy notice applies, not this one.
2. If you book a consultation or email us
What we collect. Through the form on our Book a consultation page: your name, your company, your email address, your phone number if you give it, and what you tell us you need. With each request we also record the time it was sent, your browser type, the page you came from, and whether you reached us by scanning one of our QR codes. If you email us directly, we get your email address and whatever you write.
To stop the form being abused, our server counts requests from each IP address for up to 24 hours. That count is held in the server’s memory only and is never saved.
Why we use it. To reply, arrange and hold the consultation, and, if you then want to work with us, to prepare a quote and a contract.
You don’t have to give us these details, but without your name and an email address we can’t reply to you. Your phone number is optional.
Our lawful basis. Our legitimate interest in answering an enquiry you chose to send us (UK GDPR Article 6(1)(f)). Where you are asking for a service for yourself, it is also a step you have asked us to take before entering a contract (Article 6(1)(b)).
How long we keep it. Two years from our last contact with you. If you become a client, we keep our records of the work, the contract and the invoices for six years after the work ends, because tax law and the time limits for legal claims require it.
Who handles it for us.
- Vercel runs this website and the form.
- Resend delivers each form submission to our inbox. Resend is based in the United States.
- Google provides our business email (Google Workspace), where your request and our replies are kept.
3. If we contacted you about our services
We sometimes email people at UK companies to offer one of our services. If you received an email from us, this section explains where your details came from and what we hold.
Who we contact. Directors and other senior people (founders, owners, operations or finance leads) at UK limited companies, LLPs and PLCs, at a business email address. We don’t email sole traders or partnerships without their consent, and we never use personal email addresses such as Gmail or Outlook accounts.
Where your details came from. Your company’s own website, and the public register at Companies House, which lists company directors. We don’t buy lists, use data brokers or take details from social networks. We use Exa, a web search service, to find public news and pages on company websites.
What we hold.
- Your name and role.
- The business email address we wrote to, and the web page where it was published.
- Your company’s name, company number and website.
- The public page or news item that led us to get in touch, with its link.
- The emails we sent you, and any reply you send on that email thread. We save up to the first 1,000 characters of each reply.
- The dates of each email and the stage we’re at (for example: sent, replied, not interested).
Why we use it. To offer you one service that seems relevant to your company, and to keep track of the conversation if you reply.
Our lawful basis. Our legitimate interest in offering our services to businesses (Article 6(1)(f)). We have written down how we balance that interest against your rights, and we will send you a copy if you ask. We send at most two emails: a first message and, if you don’t reply, one follow-up. A person reads and approves every email before it is sent.
Your right to object. You can tell us to stop at any time, for free, and we will. Reply to any of our emails with STOP, or email zaki@variouslabs.co.uk. This right was also set out at the end of the first email we sent you. When you object, we stop contacting you straight away and add your email address (or your company’s email domain, if you ask) to our do-not-contact list.
How long we keep it. If you never reply, we stop contacting you and archive your details 90 days after we added them to our list. If you reply, we keep the emails between us so we know where things stand. If you tell us to stop, your email address goes on our do-not-contact list so you never hear from us again. You can ask us to delete everything else at any time.
If you become a client, section 2 applies.
Who handles it for us.
- Google (Google Workspace) sends our emails and receives your replies.
- Neon stores the records in a database in London for our internal dashboard.
- Vercel runs that dashboard, which only we can sign in to.
4. If you visit this website
This website doesn’t use cookies, analytics or advertising trackers. Like any website, our hosting provider (Vercel) receives your IP address and browser details when it serves a page, and keeps short-lived logs for security.
If you join our community on WhatsApp or register for an event on Luma, those services handle your details under their own privacy notices.
5. Information sent outside the UK
Some of the companies above are based in, or process data in, the United States. Where that happens, we rely on the UK-US data bridge for providers certified under it, or on the contract clauses approved by the UK government (the International Data Transfer Agreement or the UK Addendum). Email us if you want details.
6. We don’t sell your information
We don’t sell personal information, and we don’t share it with anyone for their own marketing. We may disclose it if the law requires us to, for example to a court or the police.
7. Automated decisions
A computer program helps us find companies and prepare draft emails. A person reviews and approves every email, and nothing we do with your information has a legal or similarly significant effect on you.
8. Your rights
You have the right to:
- get a copy of the personal information we hold about you;
- have it corrected if it’s wrong or incomplete;
- have it deleted;
- ask us to limit how we use it;
- object to how we use it, including the absolute right to stop us contacting you about our services;
- receive information you gave us in a format you can take elsewhere, where the law allows.
To use any of these, email zaki@variouslabs.co.uk. We reply within one month. If your request is complicated or you send several, we may take up to two more months, and we’ll tell you within the first month if so. If we need more information to find your records or confirm who you are, the time limit starts when we receive it.
9. How to complain to us
If you’re unhappy with how we have handled your personal information, please tell us so we can put it right. Email zaki@variouslabs.co.uk with “Privacy complaint” in the subject line, or write to Various Labs Ltd, 112 Trent Gardens, London N14 4QN. Tell us what happened and anything that helps us find your records.
We will acknowledge your complaint within 30 days of receiving it, look into it, keep you updated while we do, and tell you the outcome without undue delay.
You also have the right to complain to the UK regulator, the Information Commission (still known as the ICO): ico.org.uk/make-a-complaint, 0303 123 1113, or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. The ICO will usually ask whether you’ve raised it with us first.
10. Changes to this notice
If we change how we use personal information, we’ll update this page and the date at the top. If a change affects people we are in touch with, we’ll tell them before it takes effect.