Privacy Policy
We are committed to protecting your privacy and personal data. This policy explains how we collect, use, and safeguard your information.
Last updated: 12 December 2025
1. Introduction
The Octopus Labs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website.
This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you consent to the data practices described in this policy.
2. Information We Collect
We may collect and process the following types of personal data:
- Contact Information: Name, email address, phone number, postal address
- Business Information: Company name, job title, business requirements
- Technical Data: IP address, browser type, device information, website usage data
- Communication Data: Correspondence with us, feedback, and survey responses
- Payment Information: Billing details (processed securely through payment providers)
- Project Data: Information related to your projects and service requirements
3. How We Use Your Information
We use your personal data for the following purposes:
- To provide and deliver our services
- To communicate with you about your projects and inquiries
- To process payments and manage accounts
- To send you service-related updates and information
- To improve our services and website functionality
- To comply with legal obligations
- To protect our rights and prevent fraud
- For marketing purposes (with your consent where required)
We process your data based on legitimate interests, contractual necessity, legal obligations, or your consent, as appropriate under UK GDPR.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL encryption for data transmission
- Secure servers and databases
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Secure payment processing through PCI DSS compliant providers
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party companies that help us operate our business (hosting, payment processing, analytics)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you have given explicit consent for sharing
We do not sell your personal data to third parties. All third-party service providers are required to maintain appropriate security measures and use data only for specified purposes.
6. Your Rights Under UK GDPR
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal requirements)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Rights Related to Automated Decision-Making: Not to be subject to automated decision-making
- Right to Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us using the details provided at the end of this policy.
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to:
- Remember your preferences and settings
- Analyze website traffic and usage patterns
- Improve website functionality and user experience
- Provide personalized content and advertisements
You can control cookies through your browser settings. However, disabling cookies may affect website functionality. For more information, please see our Cookie Policy.
8. Data Retention
We retain your personal data only for as long as necessary to:
- Fulfill the purposes for which it was collected
- Comply with legal, accounting, or reporting requirements
- Resolve disputes and enforce agreements
When data is no longer needed, we will securely delete or anonymize it in accordance with our data retention policy and legal requirements.
9. International Data Transfers
Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
- Adequacy decisions where applicable
- Other appropriate safeguards as required by UK GDPR
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting the updated policy on our website
- Sending an email notification (for material changes)
- Updating the "Last updated" date at the top of this policy
We encourage you to review this policy periodically to stay informed about how we protect your data.
12. Contact Information and Complaints
If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us:
The Octopus Labs
Email: privacy@theoctopuslabs.com
Phone: 8 800 700-93-29
Address: [Your Business Address]
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Questions About Privacy?
If you have any questions about this Privacy Policy or our data practices, please contact us.