How we handle your information

Who we are

RW AI Labs Ltd, trading as RW AI Labs, registered in England and Wales, company number 17474493, registered office Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds IP28 7DE. We are the data controller for the information described here. The way to reach us about anything on this page is the contact form, which comes straight to both directors.

What we collect and why

• Contact form: your name, email, business name if given, what you're asking about and your message. We use it to reply to you. Lawful basis: our legitimate interest in responding to enquiries, and taking steps at your request before a contract.
• Client portal: your name, email, the business you belong to, project updates, comments, files you upload and change requests. We use it to deliver the work you've engaged us for. Lawful basis: performance of a contract.
• Technical: our hosting provider records standard server logs (IP address, browser, pages requested) to run and secure the site. We do not run advertising or tracking cookies.
• Page counts: we use Vercel Web Analytics to see which pages get read. It sets no cookies and builds no profile of you: it records the page, the site you arrived from, your country, and your browser and device type. Nothing identifies you, and nothing follows you to other websites — which is why this site has no cookie banner to click through. Lawful basis: our legitimate interest in knowing which pages are useful.

Where it's kept

The website and portal are hosted on Vercel. Portal data and contact submissions are stored in Supabase in a UK or EU region. Notification emails are sent through Resend. Each of these processes data on our instructions under their own data-processing terms.

How long

Contact enquiries: 12 months after our last exchange, unless you become a client. Client portal data: for the duration of the engagement and 12 months after, unless you ask us to remove it sooner or we're required to keep it longer for accounting.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Ask through the contact form and we'll respond within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the date at the top changes with it.