1. Introduction

The Slab Lab ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Data Controller

The data controller for your personal information is THE SLAB LAB LTD, a company registered in England and Wales.

• Company Number: 16940122
• Registered Address: Lytchett House 13 Freeland Park, Wareham Road, Poole, Dorset, United Kingdom, BH16 6FA
• Contact Email: info@theslablab.co.uk

3. Information We Collect

Personal Information

We may collect personal information that you provide to us, including:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Payment information (processed securely through third-party providers)
• Shipping addresses
• Bank account details for withdrawals (UK accounts only)

Usage Information

We automatically collect certain information when you use our services:

• Device information (IP address, browser type, operating system)
• Usage patterns and interactions with our platform
• Cookies and similar tracking technologies

4. How We Use Your Information

We use the collected information for:

• Providing and maintaining our services
• Processing transactions and managing your account
• Communicating with you about your account and our services
• Improving our platform and user experience
• Complying with legal obligations
• Preventing fraud and ensuring security

5. Lawful Basis for Processing

Under UK GDPR, we process your personal data based on the following lawful grounds:

• Contractual Necessity: We process your account data, transaction information, and shipping details to fulfil our contract with you and provide our services.
• Legitimate Interests: We process data for fraud prevention, platform security, and improving our services, where these interests do not override your rights and freedoms.
• Legal Obligation: We process and retain certain data to comply with legal obligations, including tax records and regulatory requirements.
• Consent: Where we send marketing communications, we do so based on your consent, which you can withdraw at any time through your account settings.

6. Data Storage and Security

We implement appropriate technical and organisational measures to protect your personal information:

• Encrypted data storage
• Secure transmission of data (HTTPS)
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party companies that help us operate our platform:
  • Payment Processing: Revolut Business processes payment transactions
  • Shipping: Royal Mail handles physical shipments of slabs
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyse website traffic and usage
• Provide personalised content
• Improve our services

You can control cookies through your browser settings, though this may affect website functionality.

9. Marketing Communications

We may send you marketing communications about our services, promotions, and updates. You can opt out of marketing communications at any time by:

• Updating your preferences in your account settings
• Clicking the unsubscribe link in any marketing email
• Contacting us directly at info@theslablab.co.uk

Please note that even if you opt out of marketing communications, we may still send you important service-related messages about your account or transactions.

10. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to processing of your data

To exercise these rights, please contact us at info@theslablab.co.uk. We will respond to your request within 30 days as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR. You can find more information at ico.org.uk.

11. Automated Decision-Making

We do not use automated decision-making or profiling that significantly affects users without human oversight. All significant decisions regarding your account, including account suspensions, withdrawal approvals, or fraud detection, involve human review and assessment.

12. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When data is no longer needed, we will securely delete or anonymise it.

13. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

15. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically.

17. Terms and Conditions

Your use of The Slab Lab is also governed by our Terms and Conditions. Please review the Terms and Conditions alongside this Privacy Policy to understand the complete terms governing your use of our platform.

18. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under UK GDPR, please contact us at info@theslablab.co.uk. We aim to respond to all enquiries within 30 days as required by UK GDPR.