Privacy Policy
Last updated: April 15, 2026
Policy Version and Change Notification
We may update this policy from time to time. Material changes will be communicated by updating the Last Updated date at the top of this page. We recommend reviewing this policy periodically.
What Personal Data We Collect
We may collect and process the following personal data:
- Full name
- Email address
- Phone number (optional)
- Project details and descriptions
- Uploaded files (e.g. images, drawings, PDFs)
- Technical data (e.g. IP address, browser type)
How We Collect Data
We collect personal data when you:
- Submit a contact form on the website
- Send an email directly
- Communicate via phone or in person
Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries | Legitimate interest |
| Communicating about potential projects | Pre-contractual steps |
| Providing services | Contract |
| Maintaining business records (e.g. invoices) | Legal obligation |
| Ensuring website security and operation | Legitimate interest |
File Uploads
If you upload files through the contact form:
- Files are temporarily stored on the website server and transmitted via email
- Files are automatically deleted from the server shortly after submission
- You are advised not to upload sensitive personal data (e.g. ID documents, financial data)
- Uploaded files are treated as confidential project-related information
Data Retention
Uploaded files are transmitted to us by email and are then subject to our email correspondence retention policy (up to 6 years for active clients, 24 months for enquiries that do not proceed).
Data Sharing
We may share personal data with:
- Website hosting provider (for website operation and storage)
- Email service providers, including Gmail and hosting-based email services associated with conceptalab.com. For Google services, data is transferred to the US under Standard Contractual Clauses as part of Google’s Data Processing Amendment, available at business.safety.google/gdpr.
- IT or technical service providers where necessary
We do not sell or rent your personal data.
International Data Transfers
Some personal data may be transferred outside the European Economic Area (EEA), for example when using email services such as Gmail.
Where such transfers occur, appropriate safeguards are applied, including Standard Contractual Clauses approved by the European Commission.
Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Secure website hosting
- HTTPS encryption
- Restricted access to data
Cookies
This website uses only necessary cookies required for its proper operation, security, and the saving of user consent preferences.
We do not currently use analytics, advertising, or tracking cookies.
The use of necessary cookies is based on our legitimate interest in ensuring the proper functioning, security, and usability of the website.
For more details, please see our Cookie Policy.
Your Rights
Under the General Data Protection Regulation, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
To exercise your rights, contact: projects@conceptalab.com
We will respond to all data rights requests within one calendar month. If we require an extension, we will inform you within one month of receiving your request.
Complaints
You have the right to lodge a complaint with the Data Protection Commission if you believe your data is being processed unlawfully.
Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28. www.dataprotection.ie
Contact
Data controller: Ruslan Cherkeziia, trading as ConceptaLab.
Registred with Revenue Ireland as a sole trader.
Location: Dublin, Ireland.
Contact for all data queries: projects@conceptalab.com
https://conceptalab.com
Automated Decision-making statement
Automated decision-making: We do not use automated decision-making or profiling in connection with your personal data.