Privacy Policy

1. Who we are

QooperLabs ("we", "us", "our") is a digital agency building websites, products, and business systems. Our registered address is [ADD REGISTERED ADDRESS]. Contact:hi@qooperlabs.com

2. Data we collect

We collect data you give us directly when you:

• Fill out a contact or quote form (name, email, company, project details)
• Email us directly
• Subscribe to our newsletter (email only)

We also collect technical data automatically when you visit our website:

• IP address, browser type, operating system
• Pages visited, referral source, time spent
• Analytics events (via PostHog, self-hosted, no third-party cookies)

3. How we use your data

• To respond to your enquiry and prepare a proposal
• To deliver our services (project management, communication, delivery)
• To send occasional updates if you've subscribed (unsubscribe anytime)
• To improve our website and services (analytics, aggregated only)
• To comply with legal obligations

4. Legal basis (UK GDPR / EU GDPR)

• Contract performance (delivering services you've requested)
• Legitimate interest (improving our site, security, analytics)
• Consent (newsletter subscriptions, optional marketing)
• Legal obligation (accounting, tax records)

5. Data sharing

We do not sell your data. We may share it with:

• Sub-processors who help deliver our services (hosting, email, analytics) — all under DPAs
• Legal authorities if required by law
• Potential acquirers in a business transfer (you'll be notified)

6. International transfers

Our primary infrastructure is in the UK/EU (Vercel, AWS London, Supabase EU). Some subprocessors (e.g., GitHub, Sentry) may process data in the US under Standard Contractual Clauses or the UK/US Data Bridge.

7. Retention

• Enquiry/quote data: 12 months after last contact (unless a project starts)
• Project data: Duration of contract + 6 years (legal/accounting)
• Newsletter emails: Until you unsubscribe
• Analytics data: 26 months (PostHog default)

8. Your rights

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise these rights, email hi@qooperlabs.com. We'll respond within 30 days.

9. Security

HTTPS everywhere, CSP headers, encrypted databases, secrets in vaults, dependency scanning, access controls, and regular security reviews. No system is 100% secure, but we take it seriously.

10. Cookies & tracking

We use no third-party advertising cookies. We use essential cookies for our quote form security and first-party analytics (PostHog, self-hosted). You can block all non-essential cookies via your browser.

11. Changes to this policy

We'll update this page and the "Last updated" date. Material changes will be emailed to active clients.

12. Contact

Data Protection Officer: [ADD DPO NAME/CONTACT]
Email: hi@qooperlabs.com
[ADD REGISTERED ADDRESS]