Privacy Policy

1. Who We Are

Earhart Labs, trading as Earhart Group Ltd (“we”, “us”, “our”), is a company registered in the United Kingdom.

We provide web development and digital product services to clients worldwide. We are the data controller for personal data collected through this website (the “Site”). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. Where we process personal data of individuals in the European Economic Area (EEA), the EU GDPR may also apply, and we apply equivalent standards of protection to all visitors regardless of location.

Contact for data protection matters: [hello@earhartlabs.com].

2. Personal Data We Collect

Information you provide to us

When you contact us through the Site (via contact form, email, or phone), we may collect:

• your name;
• your phone number (if provided);
• your company or organisation name and country (if provided);
• the content of your message, including any details about your project or enquiry.

Information collected automatically

When you visit the Site, we may automatically collect limited technical data, including:

• IP address;
• browser type and version;
• device type and operating system;
• pages visited, time spent, and referral source.

This is collected via cookies and similar technologies — see our [Cookie Policy] for details.

We do not knowingly collect personal data from children under 16, and the Site is not directed at children.

3. How We Use Your Personal Data and Our Legal Bases

We do not use your personal data for automated decision-making or profiling.

We will not send you marketing communications unless you have asked us to or otherwise consented, and you can opt out at any time.

4. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• Service providers who support the operation of the Site and our business, such as website hosting providers, email providers, and analytics providers, acting under our instructions and subject to appropriate contractual safeguards;
• Professional advisers (e.g. accountants, legal advisers, insurers) where necessary;
• Authorities or tors where we are legally required to do so.

5. International Transfers

We work with clients worldwide, and some of our service providers may process data outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• transfers to countries covered by UK adequacy regulations (including the EEA);
• the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission’s Standard Contractual Clauses; or
• other safeguards permitted under the UK GDPR.

If you contact us from outside the UK, your personal data will be transferred to and processed in the UK, which the European Commission has recognised as providing an adequate level of data protection.

6. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes described above:

• Enquiries that do not lead to an engagement: typically retained for up to [12/24] months from our last contact, then deleted;
• Enquiries a services engagement: retained for the duration of the engagement and thereafter as required for legal, accounting, and tax purposes (generally up to 6/7 years);
• Technical and analytics data: retained in line with the periods set out in our [Cookie Policy].

7. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”) in certain circumstances;
• Restrict processing in certain circumstances;
• Object to processing based on legitimate interests, and to direct marketing at any time;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at ang is based on consent, without affecting processing carried out before withdrawal.

If you are located in the EEA or another jurisdiction with its own data protection laws, you may have equivalent rights under those laws, which we will honour.

To exercise any of these rights, contact us at [hello@earhartlabs.com]. We will respond within one month, as required by the UK GDPR. We may need to verify your identity before acting on a request.

9. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority:

Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom www.ico.org.uk

If you are located in the EEA, you may also lodge a complaint with the supervisory authority in your country of residence or place of work.

10. Changes to This Policy

We may update this Privacy Pfrom time to time. The latest version will always be posted on this page with the date of the most recent revision.

11. Contact

Questions about this Privacy Policy or our data practices should be sent to [hello@earhartlabs.com].