Privacy Policy

Last updated: September 2026

Andorite Labs takes your privacy seriously. This policy explains how we collect, use, share and protect personal data when you visit [website address] (the “Site”) or otherwise get in touch with us. It applies to personal data we handle as a controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  1. Who we are
    1. The controller of your personal data is [Andorite Labs Limited], a company registered in England and Wales under company number [number], with its registered office at [registered address] (“Andorite Labs”, “we”, “us” or “our”).
    2. Our ICO registration number is [number]. For any privacy question, contact us at info@andoritelabs.com
  2. Personal data we collect
    1. Information you give us. This includes your name, job title, organisation, email address, telephone number and the content of your message, when you complete a form on the Site, email or call us, subscribe to our updates, or meet us at an event.
    2. Information we collect automatically. When you use the Site, we collect technical data such as your IP address, browser type and version, device type, operating system, pages viewed, referring website, and the date and time of your visit. We collect this using cookies and similar technologies (see section 9).
    3. Information from other sources. We may receive business contact details from publicly available sources, such as company websites and professional networking sites, and from partners, event organisers and other business contacts.
    4. We do not intentionally collect special category personal data (for example, health information) through the Site. Please do not send it to us.
    5. If you apply for a role with us, we will give you a separate notice explaining how we handle your application.
  3. How we use your personal data
    1. We only use your personal data when the law allows us to. The table below sets out what we use it for and the lawful basis we rely on.
Purpose Lawful basis
Responding to your enquiries and requests Legitimate interests (running our business and responding to people who contact us), or taking steps at your request before entering a contract
Managing our business relationships and providing information about our products and services Legitimate interests (developing and maintaining business relationships)
Sending news, updates and marketing Consent, where the law requires it. Otherwise, legitimate interests (promoting our business to relevant business contacts)
Operating, securing and improving the Site, including analytics Legitimate interests (keeping the Site secure and effective). Consent for non-essential cookies
Complying with our legal and regulatory obligations Legal obligation
Establishing, exercising or defending legal claims Legitimate interests (protecting our legal rights)
  1. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
  1. Marketing
    1. We only send you marketing where you have consented or where the law otherwise allows it, for example to business contacts in relation to similar products or services.
    2. You can opt out at any time by using the unsubscribe link in any message or by emailing [email address]. We do not sell your personal data.
  2. Who we share your personal data with
    1. We may share your personal data with:
      1. service providers that support our business, such as website hosting, IT, email, customer relationship management, analytics and marketing platforms, who act on our instructions and under contract;
      2. professional advisers, such as lawyers, accountants, auditors and insurers;
      3. regulators, law enforcement and other authorities, where we are required to by law; and
      4. a prospective buyer or investor, if we sell, merge or restructure all or part of our business, who may use your data only as set out in this policy.
  3. International transfers
    1. Some of our service providers are located outside the United Kingdom. Where we transfer personal data abroad, we make sure it is protected by an appropriate safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
  4. How long we keep your personal data
    1. We keep personal data only for as long as we need it for the purposes set out in this policy, including to meet legal, accounting or reporting requirements.
    2. As a guide, we keep enquiry records for [24 months] after our last contact with you, unless a business relationship develops. We keep marketing details until you unsubscribe or withdraw consent. We then delete or anonymise your data.
  5. Security
    1. We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
  6. Cookies
    1. Cookies are small text files placed on your device when you visit a website. We use them to make the Site work, to understand how it is used and to improve it.
    2. We use the following types of cookie:
      1. Strictly necessary cookies, which let the Site function and stay secure. These do not need your consent;
      2. Analytics cookies, which tell us how visitors use the Site so we can improve it; and
      3. Marketing cookies, which help us measure and target our communications.
    3. We only set analytics and marketing cookies with your consent. You can change your choices at any time through our cookie banner or your browser settings. Blocking some cookies may affect how the Site works.
  7. Your rights
    1. Under UK data protection law you have the right to:
      1. be told how your personal data is used, and to request a copy of it;
      2. have inaccurate personal data corrected;
      3. have your personal data erased in certain circumstances;
      4. restrict how we use your personal data in certain circumstances;
      5. object to us using your personal data, including for direct marketing, which is an absolute right;
      6. receive certain personal data in a portable format; and
      7. withdraw your consent at any time, where we rely on it.
    2. To exercise any of these rights, email [email address]. We may need to verify your identity. We aim to respond within one month, and we do not normally charge a fee.
    3. If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us.
  8. Third-party websites
    1. The Site may link to third-party websites. This policy does not cover them. Please read their privacy policies before sharing personal data.
  9. Children
    1. The Site is intended for business users and is not directed at children. We do not knowingly collect personal data from children.
  10. Changes to this policy
    1. We may update this policy from time to time. The latest version is always on this page, with the date it was last updated shown at the top.
  11. Contact us
    1. If you have any questions about this policy or how we use your personal data, contact us at info@andoritelabs.com or via mail at 167-169 Great Portland Street, Fifth Floor, London, W1W 5PF.

‍