Legal

Privacy Policy

Effective date: June 1, 2026

Satellite Labs (“we”, “our”, or “us”) operates satellitelabs.xyz. This policy explains what personal data we collect, why we collect it, and your rights over it. We process data under UK GDPR and the Data Protection Act 2018.

1. Who we are

Satellite Labs is a creative studio that builds brand identity, websites, and growth strategy for growth-stage companies. We are the data controller for information collected through this website and our client engagements.

Contact us: privacy@satellitelabs.xyz

2. Data we collect

We collect information you provide directly, including:

  • Name, email address, phone number, and company name when you contact us or book a call
  • Project briefs, requirements, and any files you share with us
  • Payment and billing details processed via our payment provider (we do not store card numbers)
  • Newsletter subscription details (email address, signup source)

We also collect data automatically when you visit the site:

  • IP address, browser type, and device information
  • Pages visited, time spent, and referral source (via Google Analytics 4)
  • Cookies — see Section 7

3. How we use your data

To deliver our services — respond to enquiries, scope and execute projects, and communicate about ongoing work. Legal basis: contract performance.

To send our newsletter (Editors Notes) — only if you opted in. Legal basis: consent. Unsubscribe at any time via the link in any email.

To analyse website usage — understand how people find and use the site so we can improve it. Legal basis: legitimate interests.

To comply with the law — keep financial records, respond to legal obligations. Legal basis: legal compliance.

4. Data sharing

We do not sell, rent, or trade your personal data. We share it only with:

  • Service providers — tools we use to run our business (Supabase for database, Resend for email, Stripe for payments, Google Analytics for analytics). Each is bound by data processing agreements.
  • Collaborators — freelancers or sub-contractors working on your project, under NDA.
  • Authorities — if required by law or court order.

5. Data retention

We keep client data for 7 years after the end of an engagement (UK tax record requirements). We keep newsletter subscriber data until you unsubscribe. Website analytics data is retained for 14 months.

6. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (subject to legal retention obligations)
  • Restriction — ask us to limit how we process your data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — at any time, for any processing based on consent

To exercise any right, email privacy@satellitelabs.xyz. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies

We use the following cookies:

  • Essential — authentication and session management. Cannot be disabled.
  • Analytics — Google Analytics 4 (anonymised). You can opt out via your browser settings or a GA opt-out extension.

We do not use advertising or tracking cookies. You can control cookies in your browser settings at any time.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), access controls, and secure hosting (Vercel + Supabase). No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy periodically. Material changes will be notified by email to active clients and newsletter subscribers. The effective date at the top of this page will always reflect the most recent revision.

10. Contact

Questions, requests, or complaints about this policy:
privacy@satellitelabs.xyz