Privacy Policy

The short version

We collect as little as possible. The only personal data you actively give us is what you type into the contact form. We use Google Analytics to understand how the site is used, but only after you accept it. Nothing analytics-related runs until you do. We don't sell your data, and you can ask us to show you what we hold or delete it at any time.

Who we are

This site is operated by RSE Labs Ltd, a company registered in England and Wales (Company No. 17175071), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. For the personal data described here, RSE Labs Ltd is the data controller.

For any privacy question, or to exercise the rights described below, email hello@rse-labs.com.

What we collect, and why

When you contact us

The contact form asks for your name, email address, an optional company name, and your message. We use these solely to read and reply to your enquiry. The lawful basis is our legitimate interest in responding to people who get in touch about our work, and taking steps at your request before any possible engagement.

Submissions are delivered to our inbox by Resend (our email-sending provider) and land in a Google Workspace mailbox. We don't use what you send for marketing.

When you browse the site

If you accept analytics, we use Google Analytics 4 to understand which pages are visited, where visitors arrive from, and roughly which country or region and device type they use. This helps us improve the site. The lawful basis is your consent, which you give through the cookie banner and can withdraw at any time.

Until you accept, Google Analytics runs in a consent-denied mode: it sets no analytics cookies and sends no data that identifies you. If you decline, it stays off.

Hosting and security

The site is hosted on Vercel. Like any web host, Vercel processes basic technical information needed to serve pages and keep the site secure, for example your IP address and browser user-agent in request logs. The lawful basis is our legitimate interest in operating and protecting the site.

Cookies

We keep cookies to a minimum:

• rse_consent: a first-party cookie that remembers your accept/decline choice so we don't ask on every visit. It lasts about 180 days and is strictly necessary to honour your preference, so it's set regardless of your analytics choice.
• _ga and _ga_<id>: Google Analytics cookies used to distinguish visitors and sessions. These are only set after you accept analytics, and can persist for up to around two years.

You can clear these cookies in your browser at any time. Removing rse_consent will make the banner appear again on your next visit so you can change your choice.

Who we share data with

We don't sell your data or share it for advertising. We rely on a small number of trusted providers who process data on our behalf:

• Resend: delivers contact-form emails to us.
• Google: Google Workspace (our email) and, with your consent, Google Analytics.
• Vercel: hosts and serves the website.

Some of these providers may process data outside the UK, including in the United States. Where that happens, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an adequacy decision.

How long we keep it

We keep contact-form correspondence for as long as it's useful to the conversation or any resulting work, and delete it when it's no longer needed. Analytics data is retained no longer than necessary, in line with the retention period configured in Google Analytics.

Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and, where we rely on consent, to withdraw that consent at any time.

To exercise any of these, email hello@rse-labs.com and we'll respond within the statutory time limit. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk. Though we'd appreciate the chance to put things right first.

Changes to this policy

We'll update this page if our data practices change, and revise the “last updated” date at the top. If you have any questions about how we handle your data, get in touch via the contact page.