Privacy Policy

Studio23Labs (“we”, “us”, “our”) is a software consulting company providing code audits, software development, and AI transformation services. Our principal place of business is registered in the United Kingdom. For any privacy-related questions, contact us at info@studio23labs.com.

We collect information you provide directly when you:

• Book an audit or inquiry (name, email, phone number, business name, website, project notes)
• Make a payment (processed by Stripe we do not store card details)
• Contact us via our website forms
• Subscribe to any communications

We may also collect limited technical data automatically (IP address, browser type, pages visited, referral source) via standard server logs and analytics.

We use your information to:

• Deliver and schedule audit sessions and development services
• Process payments and issue receipts
• Send you session confirmations, reports, and follow-up communications
• Respond to support and enquiry requests
• Improve our services and website
• Comply with legal obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We use the following trusted third parties who may process your data:

• Stripe payment processing. Your card data is handled entirely by Stripe and governed by their privacy policy.
• Google Analytics (GA4) website analytics. We collect anonymised data on pages visited, session duration, and traffic sources. No personally identifiable information is sent. Data may be processed in the United States. You may opt out via the Google Analytics Opt-out Add-on.
• Microsoft Clarity behavioural analytics including anonymised session recordings and heatmaps. Clarity does not capture passwords or payment details. Data may be processed in the United States. See Microsoft's Privacy Statement.
• Web3Forms form submission forwarding to our email inbox.
• Vercel website hosting and infrastructure.
• Zoom video call platform used for audit walkthrough sessions. Session data is governed by Zoom's Privacy Policy.

Each of these processors operates under their own privacy policies and, where applicable, data processing agreements.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Booking and payment records are kept for a minimum of 6 years for accounting and legal compliance. You may request deletion of your data at any time (subject to legal retention requirements) by emailing info@studio23labs.com.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, contact us at info@studio23labs.com. We will respond within 30 days.

We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data transmitted to and from our website is encrypted via HTTPS. Payments are processed over Stripe's PCI-DSS compliant infrastructure we never see or store your full card details.

We use cookies to operate the website and improve your experience. See our Cookie Policy for full details.

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

For any questions about this policy or how we handle your data, please contact us at info@studio23labs.com.