1. Data controller and contact details
For the purposes of UK data protection law, the controller is:
- Legal entity
- PIPELINE LABS LTD
- Company number
- 16970743
- Jurisdiction
- England and Wales
- Privacy enquiries
- [email protected]
2. Personal data we may collect
Depending on how you interact with us, we may process the following categories of personal data:
- Identity and business contact details (for example name, work email address, organisation, role, and enquiry details).
- Correspondence records when you contact us by form, email, discovery call request, or other direct communication.
- Information relevant to outsourced B2B sales discussions, such as service requirements, timelines, and communication preferences you choose to share.
- Technical and usage information generated by use of the website (for example device, browser, and interaction data), subject to final implementation and applicable legal requirements.
- Any additional information you choose to provide voluntarily in your communications.
3. How personal data may be collected
- Directly from you when you complete a contact form or request a discovery call via the website.
- Directly from you when you email us at [email protected].
- Directly from you during business communications about potential outsourced sales support.
- Automatically via website operation logs and related technical systems, where applicable.
Confirmation required: cookie/analytics technologies, consent requirements, and any separate cookie notice should be confirmed once the final website stack is approved.
4. Purposes of processing and lawful bases
We process personal data only where a lawful basis applies under UK GDPR. Typical purposes and lawful bases may include:
| Purpose | Possible lawful basis |
|---|---|
| Responding to business enquiries and correspondence | Legitimate interests and/or steps prior to entering a contract |
| Arranging discovery calls and discussing requested services | Legitimate interests and/or contractual necessity |
| Maintaining website functionality, performance, and security | Legitimate interests and/or legal obligations |
| Complying with legal and regulatory requirements | Legal obligation |
Final lawful basis mapping must be confirmed against actual operational processes before go-live.
5. Sharing personal data and processors
We may share personal data with trusted third-party service providers that process data on our behalf, such as website hosting, business communications, scheduling, or operational support providers. We require such providers to process data only on documented instructions and to implement appropriate safeguards.
Confirmation required: publish the final, accurate categories or names of processors (where appropriate) once vendor selection is complete.
6. International data transfers
Personal data may be processed in the UK. If transfers outside the UK occur, we will ensure an appropriate legal transfer mechanism is in place under applicable data protection law.
Confirmation required: verify whether any non-UK transfers occur and document the exact safeguards (for example, adequacy regulations or approved contractual mechanisms).
7. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to manage business enquiries, support ongoing communications, and satisfy legal, regulatory, and reporting requirements.
Confirmation required: set and publish specific retention periods or criteria by data category before publication.
8. Data security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. Access to personal data is limited to persons who need it for legitimate business purposes, including handling enquiries and related service communications.
Security controls and governance details should be reviewed regularly and updated in this notice where suitable.
9. Your rights under data protection law
Subject to legal conditions and exemptions, you may have rights to:
- Request access to your personal data.
- Request rectification of inaccurate or incomplete data.
- Request erasure of your personal data in certain circumstances.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
To exercise rights, contact [email protected].
10. Complaints to the Information Commissioner’s Office (ICO)
If you have concerns about how your personal data is handled, please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority for data protection matters.
11. Privacy enquiries
For any privacy-related question, rights request, or concern, including matters linked to business contact or discovery call communications, contact us at [email protected].
12. Changes to this Privacy Policy
We may update this notice from time to time to reflect legal, operational, or service changes. The latest version will be published on this page with an updated revision date.
Related legal page: Terms and Conditions