Privacy Policy
Effective date: June 1, 2026
Satellite Labs (“we”, “our”, or “us”) operates satellitelabs.xyz. This policy explains what personal data we collect, why we collect it, and your rights over it. We process data under UK GDPR and the Data Protection Act 2018.
1. Who we are
Satellite Labs is a creative studio that builds brand identity, websites, and growth strategy for growth-stage companies. We are the data controller for information collected through this website and our client engagements.
Contact us: privacy@satellitelabs.xyz
2. Data we collect
We collect information you provide directly, including:
- Name, email address, phone number, and company name when you contact us or book a call
- Project briefs, requirements, and any files you share with us
- Payment and billing details processed via our payment provider (we do not store card numbers)
- Newsletter subscription details (email address, signup source)
We also collect data automatically when you visit the site:
- IP address, browser type, and device information
- Pages visited, time spent, and referral source (via Google Analytics 4)
- Cookies — see Section 7
3. How we use your data
To deliver our services — respond to enquiries, scope and execute projects, and communicate about ongoing work. Legal basis: contract performance.
To send our newsletter (Editors Notes) — only if you opted in. Legal basis: consent. Unsubscribe at any time via the link in any email.
To analyse website usage — understand how people find and use the site so we can improve it. Legal basis: legitimate interests.
To comply with the law — keep financial records, respond to legal obligations. Legal basis: legal compliance.
4. Data sharing
We do not sell, rent, or trade your personal data. We share it only with:
- Service providers — tools we use to run our business (Supabase for database, Resend for email, Stripe for payments, Google Analytics for analytics). Each is bound by data processing agreements.
- Collaborators — freelancers or sub-contractors working on your project, under NDA.
- Authorities — if required by law or court order.
5. Data retention
We keep client data for 7 years after the end of an engagement (UK tax record requirements). We keep newsletter subscriber data until you unsubscribe. Website analytics data is retained for 14 months.
6. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention obligations)
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, for any processing based on consent
To exercise any right, email privacy@satellitelabs.xyz. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Cookies
We use the following cookies:
- Essential — authentication and session management. Cannot be disabled.
- Analytics — Google Analytics 4 (anonymised). You can opt out via your browser settings or a GA opt-out extension.
We do not use advertising or tracking cookies. You can control cookies in your browser settings at any time.
8. Security
We use industry-standard security measures including encrypted connections (HTTPS), access controls, and secure hosting (Vercel + Supabase). No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy periodically. Material changes will be notified by email to active clients and newsletter subscribers. The effective date at the top of this page will always reflect the most recent revision.
10. Contact
Questions, requests, or complaints about this policy:
privacy@satellitelabs.xyz