LEGAL
Privacy policy.
Colour Lab is run by Mateusz Truszczyński, trading as Promptli, a sole trader registered in Poland. Address: Lipcowa 21, 80-178 Gdańsk, Poland. Tax ID (NIP/VAT): PL9570988579. REGON: 383277762. Email: [email protected].
This policy explains how we use personal data about visitors to colourlab.uk, people who contact us or book a demo, and the people who use Colour Lab accounts. We follow the UK GDPR, the Data Protection Act 2018 and, because we are based in Poland, the EU GDPR.
It does not cover the information salons keep about their own clients in Colour Lab. For that data the salon is in charge (the controller) and we only process it on the salon’s instructions, under our Data Processing Agreement. If you are a salon client, please contact your salon.
What we collect and why
| Information | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Website visits: IP address, browser, pages viewed | To deliver the website and protect it from attacks (handled by our host, Cloudflare) | Legitimate interests | Short-term security logs kept by Cloudflare |
| Your cookie choice | To remember whether you accepted or rejected cookies | Legal obligation (recording consent) | 12 months |
| Google Ads measurement: cookie identifiers, ad click IDs, pages viewed, clicks on “Book an online demo” | To see which of our adverts bring salons to the site | Consent (only if you click Accept) | Up to 90 days in cookies; see our Cookie policy |
| Demo bookings: name, email address, salon, chosen time | To arrange and hold your online demo (booked through Proton Calendar) | Steps before a contract; legitimate interests | Up to 2 years after our last contact, unless you become a customer |
| Emails and messages you send us | To answer you and give support | Legitimate interests; contract | Up to 2 years after our last contact, or as long as you are a customer |
| Customer accounts: names, email addresses, phone numbers, salon name and address, logins, user roles and settings | To provide Colour Lab, give support and manage the contract | Contract | While you are a customer, then up to 90 days so you can export your data |
| Billing: invoices, business details, payment records | To invoice and keep accounts | Legal obligation | As long as tax and accounting law requires (usually 5 to 6 years) |
| App technical data: app version, device model, platform, sync status, error reports | To support, update and fix the apps | Legitimate interests | While the account is active |
We send marketing emails only where the law allows: to customers and people who asked us for a demo, about similar services, or to people who agreed to receive them. Every marketing email lets you opt out.
We do not sell personal data and we do not use it for automated decisions with legal or similarly significant effects.
Who we share it with
We use these service providers. They process data only to provide their service to us:
- Cloudflare: hosts and protects this website.
- Supabase: database, sign-in and file storage for Colour Lab, hosted in Frankfurt, Germany.
- OVHcloud: the sync server for the tablet app (Frankfurt, Germany) and a backup copy of the database (Gravelines, France).
- Google: our email (Google Workspace) and, only with your consent, Google Ads measurement.
- Proton: the calendar used to book online demos (Switzerland).
- Twilio: sends SMS appointment reminders to UK phone numbers when a salon uses them.
We may also share data with professional advisers, with authorities when the law requires it, and with a distributor, reseller or payment provider that takes over selling or invoicing Colour Lab in the UK, or a buyer of the business. We will tell customers before their contract moves.
Where your data is stored
Colour Lab data is stored in the EU (Germany and France). The UK recognises EU countries and Switzerland as giving adequate protection. Where a provider processes data in the United States, we rely on the UK Extension to the EU–US Data Privacy Framework for certified providers, or on the UK International Data Transfer Addendum to the EU standard contractual clauses.
How we protect it
Data is encrypted in transit, our hosting providers encrypt it at rest, each salon can only reach its own data, access to our systems is limited and protected, and we keep backups.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, send it to you or another provider in a usable format, or stop using it, including for direct marketing at any time. Where we rely on consent, you can withdraw it at any time; for cookies use “Cookie settings” at the bottom of every page. Email [email protected]. We will reply within one month.
If you are unhappy with how we use your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113) or, because we are based in Poland, to the Polish data protection authority (uodo.gov.pl). We would appreciate the chance to help first.
Children
Colour Lab is a service for businesses and is not aimed at children.
Changes
We will update this page when our use of data changes, and email customers about important changes.