Privacy Policy
This Privacy Policy explains how GuardLabs ("GuardLabs", "we", "us") collects, uses, and protects information when you visit guardlabs.online (the "Site") or submit a request to us through it. It is written to comply with the EU General Data Protection Regulation (GDPR) and, for visitors in Poland, the corresponding Polish implementation (RODO).
1. Who is responsible for your data (data controller)
The data controller for guardlabs.online is the GuardLabs project. GuardLabs is not currently operated through a separately registered company for this website; for any data protection question, request, or complaint, contact us directly — see Section 10 below.
Contact for any privacy question or request: hello@guardlabs.online.
GuardLabs has not appointed a separate representative in the EU under GDPR Article 27. If you believe our processing requires one for your request, contact us at hello@guardlabs.online and we will handle your request directly.
2. What data we collect
2.1 Data you give us directly
When you fill in an audit request, lead-magnet, or contact form on the Site, we collect the fields the form asks for, which may include: your name, email address, company or website domain, a short description of your product or request, current metrics you choose to share, a link to a demo/recording (e.g. Loom), and your preferred language. Forms include a hidden anti-spam field that must stay empty; if a form is submitted with it filled in, we discard the submission as spam and do not process it further.
2.2 Data collected automatically
Like most websites, our server automatically logs technical information for every visit: the page requested, referring page, timestamp, IP address, user-agent (browser/device string), and whether the request looks like an automated bot. This is stored to keep the Site secure, to fix problems, and to understand aggregate traffic.
We also run a lightweight, first-party click-analytics script that records which links and buttons are clicked on a page (the link's destination, the page it was clicked on, and an anonymous session identifier). This identifier is stored in your browser's localStorage, not in a cookie, is not linked to your name or email unless you separately submit a form, and is not shared with advertising networks. See our Cookie Policy for details.
2.3 Data we do not collect here
This Site does not process payment card data directly. Pricing, accepted payment methods, and any related terms are presented separately at the point of purchase and are outside the scope of this Privacy Policy.
3. Why we process your data and our legal basis
| Purpose | Legal basis (GDPR/RODO) |
|---|---|
| Responding to an audit/service request you submitted | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)), or our legitimate interest in answering business inquiries (Art. 6(1)(f)) |
| Operating, securing, and troubleshooting the Site (server logs, bot/abuse filtering) | Legitimate interest in keeping the Site available and secure (Art. 6(1)(f)) |
| Understanding which pages and buttons are useful (click analytics) | Legitimate interest in improving the Site (Art. 6(1)(f)); where required by local law, consent |
| Sending you a reply, quote, or requested follow-up by email/Telegram | Steps taken at your request (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) |
4. How long we keep it
- Form submissions (audit/lead requests): kept for up to 24 months from your last contact with us, or until you ask us to delete it, whichever comes first.
- Server access logs: kept for up to 90 days, then automatically rotated out or aggregated.
- Click-analytics session identifier: kept in your browser only for as long as you don't clear site data; associated event records are kept for up to 14 months.
5. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf ("processors"), under instructions from us, and only to the extent needed to run the Site:
- Hosting / infrastructure: netcup GmbH (Germany) — hosts the server that runs guardlabs.online.
- Email delivery: used to send and receive messages to/from hello@guardlabs.online.
- Telegram: if you choose to contact us via @Alright_thanks, that conversation is processed by Telegram under its own privacy terms.
We may also disclose data if required to do so by law, or to protect the rights, property, or safety of GuardLabs, our users, or others.
Advertising: as of this update, the Site does not run Google Ads conversion tracking, Google Analytics, or Facebook Pixel. If we add any such advertising or analytics cookie in the future, we will update this Privacy Policy and our Cookie Policy first, and — for visitors in the EU/EEA and the UK — show a consent banner before any non-essential cookie is set.
6. International data transfers
Our hosting infrastructure is located in the EU (Germany). Where we use any service provider located outside the EU/EEA, we rely on the safeguards required by GDPR (such as Standard Contractual Clauses) before transferring personal data to it.
7. Your rights
Under the GDPR/RODO, you have the right to:
- Ask us what personal data we hold about you and get a copy of it (access);
- Ask us to correct inaccurate data (rectification);
- Ask us to delete your data (erasure / "right to be forgotten"), subject to legal exceptions;
- Ask us to restrict processing, or object to processing based on our legitimate interest (restriction / objection);
- Receive the data you gave us in a portable format (data portability);
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with a data protection supervisory authority — in Poland, the Urząd Ochrony Danych Osobowych (UODO), or the authority in your own country of residence.
To exercise any of these rights, email hello@guardlabs.online. We will respond within one month, as required by GDPR.
8. Children
This Site is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16.
9. Changes to this policy
We may update this Privacy Policy from time to time, for example when we add a new feature or ad-tracking technology. The "Last updated" date at the top will always reflect the latest revision. Material changes affecting EU/EEA visitors will be highlighted on the Site.
10. Contact
Questions about this policy or your data: hello@guardlabs.online.