Who we are
This notice explains how WhatLabs Ltd, a company registered in England and Wales (“WhatLabs”, “we”, “us”) collects and uses personal data through this website, whatlabs.org. WhatLabs is the data controller for personal data processed via this site.
Our consumer and business platforms (including WhatSchool, Coursemap, CareerMash and others) publish their own privacy notices covering the data processed there; this notice covers the corporate website only.
Questions or requests: privacy@whatlabs.org.
What we collect
- Information you give us — your name, email address, organisation and message when you contact us or email us.
- Technical and usage data — IP address, device and browser type, pages visited and referring source, collected through server logs and privacy-respecting analytics.
- Cookies and similar technologies — see our Cookie Policy.
We do not knowingly collect special-category data or data from children through this corporate site.
How and why we use it
We use personal data to respond to your enquiries, to operate, secure and improve the website, and to understand how it is used. Our lawful bases under UK GDPR are:
- Legitimate interests — running and securing our website and responding to enquiries, balanced against your rights.
- Consent — for any non-essential cookies or analytics, which you can withdraw at any time.
- Legal obligation — where we must retain or disclose information to comply with the law.
Sharing and international transfers
We do not sell personal data. We share it only with trusted service providers who process it on our behalf (for example hosting, email and analytics providers) under contract, and where required by law or to protect our rights.
Where data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / addendum.
Retention
We keep personal data only for as long as necessary for the purpose it was collected, to meet legal requirements, or to resolve disputes, after which it is securely deleted or anonymised.
Your rights
Subject to UK data-protection law, you have the right to access, rectify, erase, restrict or object to our processing of your personal data, to data portability, and to withdraw consent. To exercise any right, email privacy@whatlabs.org.
You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), though we ask that you contact us first so we can help.
Changes
We may update this notice from time to time. The version in force is the one published here, with the effective date shown above.