Legal
Privacy Policy
Last updated: June 2026
1. Who we are
XeitoLabs is a consultancy registered in England and Wales. We operate the website https://xeitolabs.com. For the purposes of UK GDPR, XeitoLabs is the data controller.
Contact: contact@xeitolabs.com
2. What data we collect
We collect personal data when you submit our application or contact form, including:
- Your name
- Email address
- Phone number (optional)
- Business name and details
- Your message or enquiry
We do not use cookies beyond essential functionality. We do not use advertising trackers.
3. How we use your data
- To respond to your enquiry — lawful basis: legitimate interest / contract performance.
- To assess your application for the Client Flow Audit — lawful basis: legitimate interest.
- To send service-related communications — lawful basis: legitimate interest. You may opt out at any time.
- To comply with legal obligations — lawful basis: legal obligation.
4. How long we keep your data
We retain contact and application data for up to 3 years from your last interaction with us, unless you ask us to delete it sooner.
5. Who we share your data with
We do not sell your data. We may share it with trusted service providers (e.g. hosting, email) who process it on our behalf under data processing agreements. We will disclose data if required by law.
6. Your rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
To exercise any of these rights, email us at contact@xeitolabs.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.
8. Changes to this policy
We may update this policy from time to time. The latest version will always be available at this URL.