Privacy Policy

Last updated: 5 Dec 2025

1. Who we are

This website is operated by nollab (“we”, “us”, “our”).

  • Legal entity: nollab

  • Email: privacy@nol-lab.com

For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for personal data that we receive directly, for example if you contact us by email.

The website is hosted by Squarespace, Inc. ("Squarespace").

2. Our approach to your data

We have configured this website so that you can visit it without providing personal data such as your name, email address, or contact details through the site.

  • We do not use contact forms, sign-up forms, or other input fields on this website.

  • We do not offer user accounts or log-in areas.

  • We do not use third party advertising or tracking pixels through the site.

  • We do not use analytics tools that identify you as an individual visitor.

However, when you visit any website, certain technical information is collected automatically. Under EU law, some of this information counts as "personal data". Squarespace also processes such information independently, which is described in the next section.

3. Data collected by Squarespace (hosting provider)

Our website is built and hosted on the Squarespace platform. When you visit this site, Squarespace automatically collects certain technical information, which may include:

  • IP address

  • Date and time of your visit

  • The web pages you view

  • The referrer URL (the site you came from, if any)

  • Information about your browser, device, and operating system

Squarespace uses this information to:

  • Operate and secure the website

  • Maintain performance and reliability

  • Produce aggregate usage information about visits to the site

Squarespace may set strictly necessary cookies that are required for the site to function securely and reliably. These cookies do not track you across other websites.

Squarespace acts as an independent data controller for this automatically collected data. Squarespace processes this information in accordance with its own privacy policy and terms. You can read more on Squarespace’s website by searching for "Squarespace Privacy Policy".

We do not use Squarespace’s form features, customer accounts, or other tools that would allow visitors to submit personal data through the site.

4. Data processed when you contact us

If you choose to contact us directly outside the website, for example by sending us an email, we will process the personal data you provide. This may include:

  • Your name

  • Your email address or other contact details

  • The content of your message and any attachments

Purpose
To read, respond to, and manage your inquiry and, where relevant, to explore potential collaboration.

Legal basis under GDPR

  • Our legitimate interests in responding to your inquiry and managing our communications (Article 6(1)(f) GDPR)

  • If we discuss or enter into a contract with you, processing may also be necessary for the performance of that contract or for taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR)

Retention

We retain correspondence only for as long as necessary for our communication and any related legal, contractual, or administrative obligations. After this period, we delete or archive it securely.

5. Cookies and similar technologies

On our side:

  • We do not intentionally set cookies for advertising, behavioural tracking, or analytics.

On the Squarespace side:

  • Squarespace may use strictly necessary cookies to deliver the site and keep it secure, for example for load balancing or basic security functions.

  • If at a later date we activate additional features that use non-essential cookies (for example, embedded analytics or interactive components), we will update this policy and, where required, seek your consent before using such cookies.

You can control and delete cookies through your browser settings. However, blocking all cookies may affect the basic functioning of the site.

6. Sharing your data

We do not sell your personal data.

We may share personal data with:

  • Service providers, such as email or cloud storage providers, who process data on our behalf and only according to our instructions

  • Public authorities, if we are legally required to do so, for example to comply with a court order or legal obligation

Where service providers are located outside the EU or EEA, we will only use them where appropriate safeguards are in place, such as EU Standard Contractual Clauses or an adequacy decision by the European Commission.

7. Your rights under GDPR

Subject to applicable law, you have the following rights in relation to your personal data:

  • Right of access: to know whether we process your personal data and to receive a copy.

  • Right to rectification: to have inaccurate or incomplete data corrected.

  • Right to erasure: to request deletion of your data in certain circumstances.

  • Right to restriction of processing: to request that we limit how we use your data in specific cases.

  • Right to data portability: to receive your data in a structured, commonly used, machine readable format and to transmit it to another controller, where technically feasible and where the legal basis is consent or contract.

  • Right to object: to object to processing based on our legitimate interests, on grounds relating to your particular situation.

To exercise any of these rights, please contact us using the details in Section 1. We may need to verify your identity before responding.

8. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

No website or internet transmission can be guaranteed as completely secure. We work to keep the risk proportionate and to maintain a level of security appropriate to the nature of the data we process.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. The "Last updated" date at the top shows when this policy was last revised.

If we make significant changes to how we process personal data, we will take reasonable steps to inform you, for example by updating the text on this page.