Legal

Privacy Policy

This policy is written for UK data protection requirements (UK GDPR and the Data Protection Act 2018).

This privacy policy explains how Go Labs collect, use, and protect your personal data when you visit this website.

What data we collect

When you use this website, we may collect the following types of personal data:

  • Information you provide directly — for example through contact forms or enquiries: your name, email address, and any other details you choose to share. We use this to respond to your enquiries and provide the services you request.
  • Technical data collected automatically — including your IP address, browser type and version, device type, operating system, and the pages you request. We process this to deliver and secure the website.

How we use your data

Responding to your enquiries

We use what you send through the contact form to reply to you. The form sends it to us by email; the website does not keep a copy.

Data we process
  • The details you enter in the contact form, such as your name, email address and message
  • The address of the page you sent the form from
Lawful basis
Contract

Checking the form is not spam

Before your message is sent, Cloudflare Turnstile checks that it comes from a person rather than an automated program. It does not read what you enter in the form.

Data we process
  • Your IP address
  • Information about your browser and device, gathered by the security check
Lawful basis
Legitimate interests
Processors
Cloudflare

Lawful basis for processing

Under UK GDPR we must have a lawful basis for processing your personal data. The bases we rely on are:

  • Contract — where processing is necessary to provide the website and the services you request, such as responding to your enquiries.
  • Legitimate interests — where we process technical data to operate, secure, and improve the site. You have the right to object to processing based on legitimate interests (see your rights below).

Where we use cookies or third-party embedded content that is not essential, we rely on your consent, which you give through the cookie preference centre and can withdraw at any time.

Third-party processors

This site may use third-party embedded content (such as video players, maps, and CDN services) that process personal data on our behalf. When you interact with these embeds, the third-party service may collect:

  • IP address and approximate location
  • Device type, browser, and operating system
  • Pages visited and interactions with embedded content
  • Cookies and similar tracking technologies set by the third party

Embedded content that needs your consent, such as a video player or a map, does not load until you have given that consent through the cookie preference centre.

Services needed to run the site, such as hosting it or delivering a message you send us, do not depend on your cookie consent.

Some of these processors are based outside the UK. Where personal data is transferred internationally, we rely on the safeguards shown below — such as an adequacy decision or standard contractual clauses — to keep your data protected. The processors we use, their location, and the transfer basis relied upon are:

Cloudflare

Cloudflare provides network infrastructure, content delivery, and security services. Cookies set by Cloudflare are strictly necessary for the site to function securely — they support bot protection, challenge verification, and network integrity. They do not track visitors across sites or serve advertising.

Lawful basis
Legitimate interests
Processor location
United States
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

YouTube

YouTube is a video hosting and sharing platform operated by Google. Standard YouTube embeds may set cookies to track video engagement, measure audience reach, and serve personalised advertising.

Lawful basis
Consent
Processor location
United States
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

Amazon SES

Amazon Simple Email Service, from Amazon Web Services, delivers the messages sent through our contact form to our inbox. It sets no cookies.

Lawful basis
Contract
Processor location
United Kingdom
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

For the full list of cookies each processor sets, see our cookie policy.

How long we keep your data

  • Responding to your enquiries
    Kept for:
    Up to 2 years after your enquiry is resolved, or longer if it leads to work with us, as part of that work's records
  • Checking the form is not spam
    Kept for:
    Not kept by this website after the check

We keep any other personal data only for as long as we need it for the purposes described in this policy, including to meet any legal, accounting or reporting requirements. How long that is depends on the kind of data and why we hold it.

How long each cookie lasts is listed in our cookie policy.

Cookies

This website uses cookies — small text files stored on your device — to support core functionality and, where you have consented, to enable third-party embedded content.

For full details of the cookies we use, the third-party services that set them, and how to manage your preferences, please see our cookie policy.

Your rights under UK GDPR

Under UK data protection law you have the following rights. To exercise any of these rights, please contact us at info@go-labs.co.uk or via our contact page.

Right of access
You may request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing
You may ask us to restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy.
Right to data portability
Where processing is based on consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
Right to object
You may object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.
Rights related to automated decision-making
You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce legal or similarly significant effects on you.
Right to withdraw consent
Where we rely on consent as the lawful basis, you may withdraw it at any time without affecting the lawfulness of prior processing. You can withdraw cookie consent via the cookie preference centre.

Right to complain to the ICO

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint/.

Contact details

For data protection and privacy enquiries, please contact us using the details below.

Organisation: Go Labs

Data controller: Go Labs (Scotland) Ltd

Email: info@go-labs.co.uk

Contact page: Our contact page

Address: T23 iC3, Liverpool Science Park, Mount Pleasant, Liverpool L3 5TF (registered office: 4-5 Summit House, Mitchell Street, Edinburgh EH6 7BD)

Phone: 07732 057 812

Last updated: 2026-10-19