Garlab
Back to home

Privacy Policy

Last updated: 7 June 2026

Who we are

This website is operated by Garlab Ltd ("Garlab", "we", "us"), a company registered in England & Wales under company number 12345635. We are the data controller responsible for your personal data. You can contact us at any time at [email protected].

What data we collect

We only collect personal data that you choose to give us. Specifically:

  • Contact form: when you use the contact form, we collect the name, email address, and message you submit.
  • Email correspondence: if you email us directly, we receive your email address and whatever you include in your message.

We use Cloudflare Web Analytics, a privacy-focused, cookieless analytics service that measures aggregate site usage without using cookies, tracking you across sites, or collecting personal data. We do not run advertising trackers, collect special category data, build marketing profiles, or buy or sell personal data.

How and why we use it

We use the information you provide solely to respond to your enquiry and, where relevant, to discuss and deliver work you have asked us about. Our lawful bases under the UK GDPR are:

  • Legitimate interests: responding to enquiries and running our consultancy business; and
  • Performance of a contract, or steps prior to a contract: where your message relates to engaging our services.

Who we share it with

We do not sell your data. We share it only with service providers who help us run the website and respond to you:

  • Cloudflare, Inc.: hosts this website, processes the contact form, and provides Cloudflare Web Analytics (a cookieless service that collects aggregate usage data, not personal data). Cloudflare may set strictly necessary cookies for security and to keep the site running (see "Cookies" below).
  • Mailgun (Sinch): delivers contact-form submissions to us by email.

These providers may process data outside the UK. Where they do, that transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual protections.

Cookies

We use no advertising or tracking cookies, and our analytics (Cloudflare Web Analytics) is cookieless, so there is no cookie banner to click through. Our hosting provider, Cloudflare, may set a small number of strictly necessary cookies to protect the site against malicious traffic and to keep it functioning. These are exempt from consent requirements under the Privacy and Electronic Communications Regulations (PECR) because they are essential to providing the service you requested.

How long we keep it

We keep contact-form messages and related correspondence only for as long as needed to deal with your enquiry and for any follow-up, and to meet our legal and accounting obligations. We delete or anonymise data when it is no longer required.

Your rights

Under the UK GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data, or restrict or object to how we use it;
  • request a copy of your data in a portable format.

To exercise any of these rights, email [email protected]. We will respond within one month.

Complaints

If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.