Support Labs Websites Free mock-up

Privacy notice

This notice covers website enquiries, our forms and the businesses we contact. Each app has its own privacy policy: see all privacy policies.

Who we are

Support Labs is run by a sole trader based in the UK. We decide how your information is used, so under UK data protection law we are the "controller". For anything in this notice, email support@supportlabs.co.uk.

What we collect

  • From the contact form: what you need, whether you have a website (and its address), your type of business, what to fix first, your email address, anything you write under "Anything else?", and your basket and any style you picked.
  • From emails you send us, including a basket sent from the Pricing page: your email address and what you write.
  • From the Simple Stats waitlist form: see "Simple Stats waitlist" below.
  • If you become a client: your name, your business details and what we need to build and run your site and automations. Card details go to Stripe, not to us.
  • When you visit this website or send the form, our web host and our form service see your IP address (see below).

We don't use cookies, analytics or tracking on this website, and we don't store anything in your browser. If you type supportlabs.co.uk without “www”, our domain provider Squarespace sends you on to this website and sets one small technical cookie (“crumb”) while it does. We don't use it.

Why we use it

We use it to answer your enquiry and, if you ask, to give you a price and a plan. Our lawful basis is taking steps you ask for before a contract, and our legitimate interest in replying to people who contact us and running our inbox well. For clients, it is to carry out our contract with you, and to keep the tax and accounting records the law requires.

You don't have to give us anything, but we can't reply without an email address.

Businesses we contact

If you run a limited company or LLP, we may email the business address published on your own website to offer our services. We hold your business name, company number, that email address, your website address and short notes about your business, taken from your website and Companies House. We also research limited companies that could buy from our clients, and share the same kind of business details (never personal email addresses) with that client. Our lawful basis is legitimate interests. We keep these details for 12 months after our last contact, or less if you ask. Reply “no thanks” or email sales@supportlabs.co.uk and we will stop at once, keeping only what we need to make sure we don't contact you again.

Simple Stats waitlist

Simple Stats is an iPhone app we are planning. If you join its waitlist, this is how we handle your details.

  • What we keep: your email address, your answers on the form, a short tag that shows where you found the page (for example "help-page"), and which email boxes you ticked.
  • Why: to email you when the app launches (and about our other apps, only if you ticked that box), and to judge from all the answers together whether enough people want the app.
  • Lawful basis: your consent. You can take it back at any time by clicking unsubscribe in any of our emails, or by emailing support@supportlabs.co.uk.
  • Who handles it: Web3Forms receives the form and delivers it to our Google email inbox. Both are described under "Who else handles it" below.
  • How long: we delete your details 6 months after the app launches, or sooner if you unsubscribe or ask us to at support@supportlabs.co.uk. Web3Forms' own copy is kept as set out below.
  • We never sell your details.

CopySpotter check

CopySpotter is a Support Labs tool we are building. If you ask for a free CopySpotter check, this is how we handle your details.

  • What we keep: your shop web address, brand name and email address, your answers on the form, a short tag that shows where you found the page (for example "reddit"), and which email boxes you ticked.
  • Why: to run the check, which looks at public listings, websites and trade mark records, and to email you the results. We use your details for nothing else, except emailing you when CopySpotter launches if you ticked that box. We also judge from all the answers together whether enough shops want the tool.
  • Lawful basis: your consent. You can take it back at any time by emailing support@supportlabs.co.uk, or by clicking unsubscribe in any of our emails.
  • Who handles it: Web3Forms receives the form and delivers it to our Google email inbox. Both are described under "Who else handles it" below.
  • How long: if you don't sign up to CopySpotter, we delete your details 6 months after we send your results, or sooner if you ask us to at support@supportlabs.co.uk. Web3Forms' own copy is kept as set out below.
  • We never sell your details.

Who else handles it

  • Web3Forms, run by Web3Creative, which operates from India, receives what you type in the contact form and emails it to us. It works for us under a data processing agreement. It keeps its own copy of each form message for up to 3 years, then deletes it.
  • Google (Google Workspace and Gmail) holds our email inbox, so it holds the emails you send us and the form messages. It works for us under a data processing agreement.
  • Cloudflare hosts this website and sees your IP address when you visit. It works for us under a data processing agreement.
  • Stripe takes payments from clients. It works for us when it takes a payment, and also uses payment information for its own purposes, such as preventing fraud and meeting the law, under its own privacy policy.
  • Anthropic makes the AI tools (Claude) that help us sort incoming emails and draft replies. We use Anthropic's standard Claude plan, so Anthropic handles this under its own privacy policy (anthropic.com/legal/privacy), not a data processing agreement with us. The owner reads and approves every reply before it is sent. No decision about you is made by AI alone.

Information sent outside the UK

  • Web3Forms is based in India. The UK has not made an adequacy decision for India, so we rely on the standard contractual clauses with the UK Addendum, which are part of Web3Forms' data processing agreement.
  • Google, Cloudflare and Stripe may handle information in the US. For this they rely on the UK-US "data bridge" or on standard contractual clauses with the UK Addendum.
  • For our use of Claude, Anthropic's responsible company is Anthropic Ireland, in Ireland. The UK treats Ireland as giving adequate protection. Anthropic's own transfers onwards are covered by its privacy policy.

How long we keep it

  • Enquiries that don't become a project: we delete them 6 months after our last contact with you. Web3Forms' own copy is kept as set out above.
  • Client records: for as long as you're a client, then 6 years for tax and accounting.
  • Simple Stats waitlist: 6 months after the app launches, or sooner if you unsubscribe or ask us to delete it.

Your rights

You can ask us for a copy of your information, ask us to correct it or delete it, object to how we use it, ask us to limit how we use it, or ask for a copy in a form you can reuse. Email support@supportlabs.co.uk. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your information, please email us first at support@supportlabs.co.uk. We'll reply within 1 working day, look into it, and tell you the outcome. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

We'll update this notice if anything changes. Last updated: 30 October 2026.

Photo credits

Photos on the example sites are from Unsplash and Pexels. With thanks to:

Show all 130 credits

Questions: support@supportlabs.co.uk · 07725 521854