Privacy notice

Who we are

SPAN LAB is a design and build studio registered in England and Wales. We operate spanlab.co.uk and build, host, and maintain websites for independent businesses across the UK.

For the purposes of UK data protection law, SPAN LAB is the data controller of any personal information you give us.

What data we collect

Two narrow streams:

• Contact details you submit via the contact form or by email — name, email address, and message.
• Basic technical data your browser sends on every request — IP address, browser type, and timestamps. We keep these in server logs only.

SPAN LAB does not load analytics scripts, tracking pixels, or advertising. See Cookies below for detail on third-party cookies set by the booking widget.

How we use it

To reply to your enquiry and figure out whether there is a project worth scoping.

To deliver work under a written scope and keep client sites running.

We do not sell your data and we do not profile visitors for advertising.

Legal basis for processing

We process your data under two legal bases.

• Legitimate interests — responding to your enquiry and running the service properly.
• Contract performance — delivering work you’ve agreed to.

Third parties and infrastructure

• Vercel hosts the site and its server infrastructure — US-based with EU edge regions. Transfers are covered by Standard Contractual Clauses.
• Supabase provides the managed database — EU-hosted.
• Cal.com, when booking goes live, handles booking data in the client’s own account, set up in their name during onboarding. Booking data sits with them, not with us.

We do not sell data to any third party or use it for advertising.

Cookies

SPAN LAB sets no cookies on your device — no analytics, no tracking, no advertising scripts of any kind.

When you open the booking widget (the “Book a Call” button), Cal.com loads in your browser and sets its own cookies on your device. These are Cal.com’s business tools — not ours, and not something we control:

• Google Analytics — Cal.com tracking usage of their own platform.
• Google Ads attribution — Cal.com’s advertising measurement.
• Intercom — Cal.com’s customer support platform.
• Dub.co referral tracking — Cal.com’s affiliate programme.

These cookies are only set when you actively click to open the call booking widget — not on page load.

If you prefer not to interact with it, the contact form on the same page sends your message directly without loading any third-party scripts or setting any cookies.

Cal.com’s full privacy policy is at cal.com/privacy.

Data retention

Enquiry data is kept for up to two years, or for as long as a business relationship is active.

Client data stays for the duration of the engagement and a reasonable period after exit for legal compliance, then goes.

If you would like it gone sooner, email hello@spanlab.co.uk.

Your rights under UK GDPR

You may:

• Access, correct, or delete the data we hold.
• Receive your data in a portable format.
• Restrict how we use it, or object to processing based on legitimate interests.
• Withdraw any consent at any time.

To exercise any of these rights, email hello@spanlab.co.uk.

To complain to the Information Commissioner’s Office, visit ico.org.uk.

Contact

Questions about this notice or how SPAN LAB handles your data — hello@spanlab.co.uk.