→ Privacy

Privacy policy.

Last updated:

The short version

Based Ltd, trading as Based Labs ("we", "us"), runs basedlabs.co.uk. We do not use Google Analytics, Meta Pixel, or any third-party tracker. We do not set advertising cookies. We do not sell or share your data. The behavioural counters you see in the UI (reading time, scroll depth, visitor "status") are client-side only and are discarded the moment you close the tab.

Who we are

Based Ltd (trading as Based Labs)
Company number: SC885222 (registered in Scotland)
Elgin, Scotland, United Kingdom
Data controller contact: ryan@basedlabs.co.uk

What we store on your device

A single sessionStorage entry called based_callout_shown — used only to make sure the 40%-scroll callout appears at most once per visit. It is erased automatically when you close the tab. No cookies are set. No localStorage. No IndexedDB.

Because this is strictly functional and stores no personal data, no cookie consent banner is required under UK GDPR / PECR.

What we collect when you contact us

If you email, call, or message us on WhatsApp, LinkedIn, or Instagram, we will see what you choose to send us: your name, contact details, and the content of your message. We use that information only to reply and to discuss potential work. We do not add you to any mailing list. We do not share your details with third parties.

Lawful basis (UK GDPR Art. 6): performance of a contract where you have asked us to quote or deliver work; legitimate interests for initial replies to unsolicited enquiries.

Retention: we keep correspondence from active and prospective clients for up to 7 years (the UK company record-keeping period). You can ask us to delete it sooner — see "Your rights" below.

Server logs

The site is hosted on Vercel. Vercel keeps standard access logs (IP address, user agent, URL, timestamp) for security and abuse-prevention purposes. These logs are controlled by Vercel under their own privacy policy. We do not query or analyse these logs for marketing.

International transfers

Vercel stores edge cache and logs on infrastructure that includes servers in the United States. Any transfer of personal data outside the UK/EEA is covered by the Vercel Data Processing Agreement and the UK's International Data Transfer Addendum.

Your rights under UK GDPR

You have the right to:

  • be told what data we hold about you (right of access)
  • ask for a copy of that data (right to data portability)
  • ask us to correct inaccurate data (right to rectification)
  • ask us to delete it (right to erasure)
  • ask us to restrict processing (right to restrict)
  • object to processing (right to object)
  • complain to the UK Information Commissioner's Office: ico.org.uk

To exercise any of these, email ryan@basedlabs.co.uk. We respond within 30 days.

Children

Based Labs is a B2B service. We do not knowingly collect data from anyone under 16. If you believe a minor has contacted us, let us know and we will delete the record.

Changes

If this policy changes, the "last updated" date at the top will change with it. Material changes will also be reflected in the site footer.