1. Who We Are
Arkonos Labs ("we", "our", "us") is the trading name of Kieran Jones, a sole trader based in Billinghay, Lincolnshire, providing web design and development services in the UK. Kieran Jones is the data controller for the personal data described in this policy.
Postal address: 14 Carr Gate, Billinghay, Lincoln, LN4 4HD.
Email: [email protected]
This policy explains how we collect, use, and protect personal data, both when you contact us through this website and when we contact businesses directly as part of our own outreach.
2. Data We Collect
We collect personal data in three ways:
When you submit our consultation or Site Health Check form, we collect the name, company name, email address, project scope/budget range, and message you provide.
When we identify your business as a prospective client (business outreach), we collect and hold a small record consisting of: your business name, business website address, a business contact email address, and the results of a website performance and technical check we run against your public site. We use it to decide whether to contact you and to write a relevant introduction. The check uses Google's PageSpeed Insights service on your public website. This data comes from publicly available business listings, web searches, and your own public website. It is not purchased from third-party data brokers.
When you visit this website, our first-party analytics record the page viewed, the site you came from, the type of device (mobile, tablet, or desktop), and any campaign tag in the link you followed. These records contain no name, IP address, or visitor identifier, and no cookies are used for them. If you arrive from a link in one of our introduction emails, that link carries a tag identifying which business's email it was, so we can see whether an introduction was seen. See our Cookie Policy for details of the small amount of browser storage the site uses.
3. How We Use Your Data, and Our Legal Basis
We use the information described above to:
- Respond to your enquiry or Site Health Check request, and take steps at your request before any agreement (our basis: steps prior to a contract, and our legitimate interest in answering enquiries)
- Assess project feasibility and provide a consultation (same basis)
- Send a one-time, relevant introduction email about our services to the business contact address we hold (our basis: legitimate interests, namely telling businesses about services that may be relevant to them; you can object at any time, see Section 7)
- Understand how people use this website (our basis: legitimate interests, using records that identify no individual)
We will never sell your data to third parties.
4. Emails We Send
Our introduction emails identify us, give our postal address, and tell you how to stop further emails. The HTML version of an email may contain a link back to this website and may record whether the email was opened. We use this only to see whether an introduction was seen.
If you tell us you do not want to hear from us, we keep your email address on an internal do-not-contact list so that we do not email you again. That address is the only thing we keep.
5. Who Handles Your Data
We use a small number of service providers who process data on our behalf: Supabase (database and backend functions), Vercel (website hosting), Resend (sending email), Zoho (our email mailbox), and Google (PageSpeed Insights, for website checks). Some of these providers process data outside the UK. Where they do, we rely on the safeguards they offer under UK data protection law, such as the UK addendum to the standard contractual clauses or an adequacy decision. Business outreach records are held on access-controlled internal systems, and we use reasonable technical and organisational measures to protect personal information from unauthorised access, alteration, or loss.
6. Data Retention
We retain consultation and Site Health Check enquiry data for up to 24 months from the date of submission, after which it is deleted unless we have entered into a business relationship with you. Business outreach records are retained only for as long as reasonably needed to make and follow up on an introduction, and are deleted on request at any time (see Section 7), apart from the email address held on our do-not-contact list as described in Section 4.
7. Your Rights, and Opting Out
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict the processing of your data, including objecting to our use of your details for outreach
- Data portability
If you've received an outreach email from us and would rather not hear from us again, simply reply and say so. We will remove your business's record, add your address to our do-not-contact list, and won't contact you again. To exercise any other right above, contact us at [email protected] or write to us at the postal address in Section 1.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first, so please contact us if you have a concern.
8. Cookies
This website does not set advertising or tracking cookies. The small amount of browser storage it does use, and our cookie-free analytics, are described in our Cookie Policy. If this changes in the future, we will update our policies and implement appropriate consent mechanisms.
9. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.